Privacy Policy

Hireveda LLP
Version 1.0 Effective On publication
For candidates, clients, recruiters, website visitors, ExecEdge participants and other users
This Notice explains how Hireveda LLP collects, uses, shares, retains and protects digital personal data. It also explains the choices and rights available to individuals. Contextual notices may provide additional information at the point of application, purchase, outreach or data collection. Where a contextual notice gives more detail for an activity, it applies alongside this Notice; this Notice remains readable on its own.

Hireveda LLP, LLPIN ACN-6714, is generally the Data Fiduciary for the Hireveda platform, candidate database, direct recruitment services and ExecEdge. Where Hireveda processes personal data solely on documented instructions of a Client, Hireveda may act as a Data Processor and the Client remains responsible for its own notice and lawful instructions. A Client that receives candidate information ordinarily becomes an independent Data Fiduciary for its subsequent recruitment use.

This Notice applies to hireveda.com, related applications and subdomains, candidate and recruiter dashboards, applications, recruitment operations, ExecEdge, email and WhatsApp communications, support, payment administration and connected tools. It does not govern an independent employer’s website, employment process or internal systems.

Category	Examples
Identity and contact	Name, email, work email, phone, profile photograph, account identifiers and authentication details
Professional profile	Resume, employment history, role, employer, location, skills, experience, education, certifications, LinkedIn profile and portfolio links
Preferences and compensation	Career interests, preferred locations and roles, notice period, current or expected compensation and job preferences
Application and recruitment	Roles applied for, client or role associations, screening notes, interview status, recruiter observations, ratings, communications and outcomes
ExecEdge and career services	Target companies, positioning choices, outreach approvals, research, deliverables, meeting records and engagement progress
Derived and AI-assisted data	Parsed resume fields, normalised titles and skills, inferred experience, potential matches, rankings, summaries and generated drafts
Communication data	Emails, WhatsApp messages, replies, delivery status, opens, clicks and communication preferences
Technical and usage	IP address, device and browser information, cookies, local storage, session data, pages viewed, events, diagnostics and security logs
Transaction and support	Invoices, payment status, transaction references, GST details, complaints, grievances and support records
Other submitted information	Information voluntarily supplied in forms, files, meetings or correspondence

Hireveda does not ask Candidates to submit Aadhaar numbers, financial-account credentials, medical information, caste, religion or other highly sensitive information unless a specific lawful and necessary process clearly requests it. Users should not place unnecessary sensitive or confidential information in a resume or free-text field.

• Directly from the individual through an Account, application, resume upload, payment, meeting, message or privacy choice.
• From Clients, recruiters, referral sources and authorised representatives.
• From publicly accessible professional sources and licensed recruitment or professional datasets where lawful.
• From job platforms, communication services, payment providers and integration partners.
• From use of Hireveda websites, applications and communications.
• From analysis, normalisation and AI-assisted processing of lawfully obtained information.
• Information from other sources -
  Where Hireveda obtains professional information from public sources or licensed datasets rather than directly from you, it uses that information only for the recruitment purposes in §5. You may object to such use or request correction or deletion at any time through the privacy dashboard..

Purpose	What it involves
Accounts and security	Create accounts, authenticate users, prevent abuse, investigate incidents and maintain audit records
Applications	Receive and administer applications, communicate status, evaluate relevance and manage role associations
Recruitment and sharing	Search, match, shortlist and disclose candidate information to authorised Clients in accordance with the candidate’s applicable sharing choice
Future opportunities	Consider a Candidate for roles not specifically applied to only where the applicable permission or another lawful basis exists
Career services	Deliver ExecEdge and other purchased services, research target organisations and support approved outreach
AI-assisted operations	Parse resumes, normalise and infer professional attributes, support search and ranking, detect duplicates and prepare drafts
Communications	Send transactional messages and, where permitted, optional job, ExecEdge, marketing or WhatsApp communications
Payments and records	Process payments, issue invoices, manage refunds, maintain tax and accounting records and prevent fraud
Improvement and analytics	Understand use, diagnose errors, measure features and improve services using aggregated, de-identified or permitted data
Legal and safety	Comply with law, enforce agreements, answer rights requests and grievances, establish legal claims and protect people and systems

Where consent is relied upon, Hireveda presents a clear purpose and records the individual’s affirmative action, applicable legal-document version, time and channel. Optional permissions are separate from Platform Terms and may be withdrawn in the same place it was given, or through privacy dashboard. Withdrawal does not invalidate processing lawfully completed before withdrawal.
Some processing is necessary to provide a service requested by the individual, provide a service you requested, meet legal obligations, or use data as otherwise permitted by applicable law for the specific purpose stated at collection. Hireveda does not label such processing as optional marketing consent.

A Candidate may select automatic sharing for roles the Candidate has applied to, or may request confirmation before identifiable submission to a particular Client or role. Automatic sharing is limited to the relevant application or another scope clearly selected by the Candidate. Consideration for unrelated future opportunities requires the separate future-opportunity choice or another lawful basis. De-identified profile use and promotional communications are separate choices.
Hireveda records each disclosure, including the Candidate, recipient or Client, role or purpose, time and applicable permission. A Client receiving candidate data must use it only for authorised recruitment and is responsible for its later processing.

Hireveda uses AI-assisted tools, including Azure OpenAI or comparable providers, to parse and structure resumes, infer professional information, generate drafts, support matching and search, and assist internal workflows. Inputs may contain personal data when necessary for the selected function. Hireveda applies access and configuration controls appropriate to the service and does not intentionally submit unnecessary personal data. Hireveda staff also review AI output before material recruitment or career decisions.

AI outputs may be incomplete, inaccurate or biased. Hireveda labels or separates inferred information where practicable and expects human review before material recruitment or career decisions. Individuals may request correction of inaccurate profile information. Hireveda does not promise that an automated inference will be accepted by an employer or produce an employment outcome.

• Recruitment Clients and their authorised hiring personnel for permitted recruitment purposes.
• AWS services, including compute, storage and content delivery; database, cache, search, backup and security infrastructure.
• Microsoft Azure and AI service providers used for approved AI-assisted processing.
• Email, WhatsApp and communication providers used to deliver authorised messages.
• PostHog and Google Analytics for permitted product and website analytics.
• Razorpay and banking or payment participants for payment, refund and fraud controls.
• Professional advisers, auditors, insurers and authorities where necessary and lawful.
• A successor or transaction participant in a merger, investment, restructuring or transfer, subject to confidentiality and applicable law.

Hireveda does not sell personal data as a standalone commodity. Hireveda may charge Clients for recruitment or platform services that involve authorised processing and disclosure; that commercial arrangement does not permit unrestricted reuse of candidate information.

Personal data may be processed in India and in other countries where cloud, analytics, communication, AI or support providers operate. Hireveda uses contractual, access and security measures appropriate to the provider and will comply with any transfer restriction notified under applicable Indian law. Service-provider locations may change as infrastructure changes. Transfer countries are available on request to privacy@hireveda.com.

Hireveda uses reasonable technical and organisational safeguards proportionate to the nature and risk of the data. Measures include role-based access, authentication, logging, encryption in transit, provider encryption at rest, environment separation, backups, vulnerability and dependency management, incident response and access review. No internet or storage system is completely secure. Users should protect credentials and report suspected misuse promptly.

Hireveda retains personal data only for the period reasonably required for the stated purpose, legal obligations, dispute management and security. The following are general maximum operating periods unless a shorter period, legal hold, statutory requirement or documented exception applies.

Record	General retention period
Account and active profile	While the Account remains active, followed by deletion or de-identification under the applicable request and retention process
Candidate recruitment profile	Until withdrawal or erasure request; otherwise up to three years after the last application, meaningful interaction or confirmed update
Application and disclosure records	Up to five years after the relevant application or disclosure
Consent and legal acceptance evidence	Up to eight years after the last processing or relationship for which the evidence may be required
ExecEdge service records	Service duration plus eight years for contractual, tax and dispute records; working material may be deleted earlier
Invoices and payment records	For the period required under tax, accounting and corporate law, generally up to eight financial years or longer where legally required
Communication logs	Up to three years; delivery and suppression records may be retained longer to honour opt-outs
Analytics event data	Normally twelve to fourteen months, subject to configured provider settings and earlier aggregation or deletion
Rights, grievance and incident records	Up to eight years after closure
Security logs and backups	A minimum of one year; backups rotate under documented schedules and may persist until the next secure deletion cycle

• Obtain information about personal data and processing as provided by applicable law.
• Access a copy or structured summary of available personal data.
• Correct inaccurate or incomplete personal data.
• Withdraw an optional consent or change communication choices.
• Request erasure of personal data that is no longer necessary, subject to lawful retention and technical completion cycles.
• Raise a grievance and receive a response through the stated process.
• Nominate another person to exercise applicable rights in the event of death or incapacity where the law provides.
• Use an available statutory complaint mechanism after first giving Hireveda a reasonable opportunity to resolve the grievance, including the government's data-protection authority.

Requests may be submitted through the privacy dashboard or to privacy@hireveda.com. Hireveda may verify identity and authority, request clarification and refuse or limit a request where law permits. Hireveda will not retaliate against a person for making a good-faith request.

An authenticated erasure request initiates deletion or de-identification across identified production systems, including account records, candidate profiles, application associations, search indexes, stored resumes, communication queues and relevant analytics identities. The process preserves only data required for law, fraud prevention, security, suppression, dispute evidence or another permitted purpose. Backups are removed through scheduled rotation and are not restored for ordinary business use after erasure.

Hireveda uses essential storage for authentication, security and preferences and may use PostHog, Google Analytics and similar tools for permitted analytics. Details and available controls appear in the Cookie and Analytics Notice. Disabling essential storage may prevent protected features from working.

The Services are intended only for persons aged eighteen years or older. Hireveda does not knowingly permit minors to create Accounts, apply for roles or enrol in ExecEdge. If Hireveda learns that a minor’s personal data was collected through the Services, it will take reasonable steps to restrict processing and delete the data, subject to legal requirements. Reports may be sent to the Privacy Office.

The Grievance Officer is Varun Jain, Partner and CTO. Submit a grievance to privacy@hireveda.com with the subject “Privacy grievance”. Include enough information to identify the Account or interaction and explain the requested resolution. Hireveda will acknowledge and handle the grievance within 30 days. Individuals may pursue any statutory remedy that cannot be excluded. We respond in English; write to privacy@hireveda.com if you need an Indian-language response.

Hireveda may update this Notice for legal, service, vendor or operational changes. Material changes will be identified by version and effective date and, where required, notified or presented for renewed consent. Earlier notices and evidence may be retained for audit and dispute purposes.

If your information was with Hireveda before this Notice took effect, this Notice now governs it; your choices in §13 apply equally, including objecting to sourced-data use in §4.

Hireveda LLP; LLPIN ACN-6714; GSTIN 20AASFH1576Q1ZT. Registered office: 30A, CH Area East, Road No 10, Co-op College, East Singhbhum, Jamshedpur, Jharkhand 831001, India. Website: https://hireveda.com. Support: support@hireveda.com. Telephone: +91 82105 99401.
Privacy Office and Grievance Officer: Varun Jain, Partner and CTO, privacy@hireveda.com, +91 82105 99401. Legal notices: legal@hireveda.com.