Privacy Policy (Employers)

1Data We Collect From Employers

Category	What We Collect	Why
Company Identity	Company name, registered address, business type, employee count, approximate turnover, GST number	Profile verification and display to matched candidates
Ownership	Owner/director names, Aadhaar numbers, PAN numbers, contact information	Business legitimacy verification — admin review only
Documents	Company registration certificate, GST certificate, ownership identity documents	Business verification by admin
Bank Details	Account number, IFSC, bank name, UPI ID	Future payment processing (Phase 2)
Job Postings	Job title, description, salary range, requirements, location, work mode, interview details	AI matching with candidate profiles
Account Data	Registered email address, password (bcrypt hashed)	Authentication and account access
Usage Data	Login timestamps, dashboard visits, actions taken	Billing, security, platform improvement

2How We Use Your Data

To verify your business identity and submitted documents through admin review
To match your job postings with suitable candidate profiles using AI embedding technology
To present matched candidates to you on your employer dashboard
To send transactional emails — OTP, posting expiry alerts, candidate updates, account notices
To process payments and issue GST invoices
To enforce platform safety — detecting fraudulent postings and policy violations
To comply with applicable Indian laws and respond to lawful government requests

We do not sell your data to any third party, data broker, competitor, or advertising platform under any circumstances.

3Sensitive Data — How We Protect It

Owner Aadhaar numbers: AES-256-CBC encrypted. Only masked version shown on screen. Never visible to any candidate or other employer.
Owner PAN numbers: AES-256-CBC encrypted. Masked on display.
GST number: AES-256-CBC encrypted. Masked on display.
Bank account number & UPI ID: AES-256-CBC encrypted. Masked on display.
Uploaded documents: Stored with randomised filenames. Accessible only to authorised admin users — never to job seekers or other employers.

No job seeker ever sees your owner Aadhaar, PAN, bank details, GST number, or business documents. Seekers only see your company name, job posting details, and interview information.

4What Job Seekers See About You

When a job seeker is matched to your posting, they can see:

Company name
Job posting details — title, description, salary range, location, work mode, requirements
Interview details (mode, rounds, date) — only after they are shortlisted by you

Job seekers cannot see your owner identity details, business documents, bank information, GST number, or any other sensitive business data.

5Data Sharing — Who We Share With

Matched Job Seekers: Company name and job posting details only (as described in Section 4)
Payment Gateways (Razorpay / PayU): Transaction amount and email for payment processing only
Email Service (Gmail SMTP): Email address for transactional messages only
Legal Authorities: Required by law, court order, or legitimate government request

6Candidate Data — Your Confidentiality Obligation

When you access matched candidate profiles, you receive access to personal data belonging to real individuals. You are obligated to:

Use candidate data only for evaluating them for your posted role
Not share candidate data with any third party under any circumstances
Not retain candidate data after the hiring process is concluded
Handle all candidate information in compliance with Indian data protection law

Misuse of candidate data is a violation of Indian law and these Terms. It will result in immediate account blacklisting and may result in criminal prosecution.

7Security Measures

All data transmitted over HTTPS (TLS encryption in transit)
Sensitive fields encrypted at rest with AES-256-CBC
Passwords hashed with bcrypt (cost factor 12)
JWT authentication with server-side blacklist on logout
File uploads validated by extension, MIME type, and file signature
All database queries use parameterised statements (no SQL injection risk)

8Your Data Rights

Access: View all data through your employer profile sections
Correction: Update profile data at any time
Deletion: Delete your account from the dashboard. All data removed within 30 days, except payment records retained 7 years under Indian law
Objection: Contact us to object to specific uses — we will respond within 30 days

9Governing Law & Jurisdiction

These Terms and Conditions, Privacy Policy, and all agreements between KKhoji Panndit (operated by Shagun Industrial Lines) and its users shall be governed by and construed in accordance with the laws of India. Any dispute, claim, or controversy arising out of or relating to these terms, the platform, its services, or any breach thereof shall be subject to the exclusive jurisdiction of the competent courts located in Raipur, Chhattisgarh, India.

By accessing or using KKhoji Panndit, you irrevocably agree to submit to this jurisdiction and waive any objection to proceedings in these courts on grounds of venue, inconvenience, or otherwise.

Any unauthorized use, reproduction, distribution, or breach of intellectual property rights associated with KKhoji Panndit will be pursued to the fullest extent permissible under applicable Indian law.

By registering on KKhoji Panndit as an Employer, you confirm you have read and accepted this Privacy Policy.
You consent to the collection and use of your organisation's data as described above.

Privacy Policy — Employers