Privacy Policy (Job Seekers)

1Data We Collect From Job Seekers

Category	What We Collect	Why
Identity	Full name, date of birth, gender, Aadhaar number, PAN number	Profile verification and AI matching
Contact	Email address, permanent address, current address	Account access, communication
Professional	Academic qualifications, work experience, skills, certifications, projects	Core matching data
Preferences	Desired role, expected salary, preferred locations, work mode, leadership interest	Job recommendation filtering
Documents	Uploaded PDFs/images of certificates, marksheets, identity proof	Verification by admin
Profile Photo	Uploaded photo image	Shown to employers on candidate profile
Bank Details	Account number, IFSC, bank name, UPI ID	Future payment processing (Phase 2)
Languages	Languages known and proficiency level	Enhanced AI matching
Usage Data	Login timestamps, dashboard visits, pages accessed	Billing, security, platform improvement

2How We Use Your Data

To generate AI-powered job match recommendations using semantic embedding technology
To verify your identity and submitted documents through our admin review process
To send transactional emails — OTP, interview notifications, warnings, account updates
To process payments and issue GST invoices for platform access charges
To enforce platform safety — detecting fraud, multiple accounts, and policy violations
To comply with applicable Indian laws and respond to lawful government requests
To improve our AI matching algorithms using anonymised, aggregated data

We do not use your data for advertising. Your personal information is never sold, rented, or used to serve advertisements from third parties.

3Sensitive Data — How We Protect It

Aadhaar number: Encrypted using AES-256-CBC before storage. Only last 4 digits shown on screen. Full number never visible to any employer or platform operator.
PAN number: AES-256-CBC encrypted. Masked on display.
Bank account number & UPI ID: AES-256-CBC encrypted. Masked on display.
Uploaded documents: Stored with randomised filenames. Accessible only to you and authorised admin users.

No employer ever sees your Aadhaar, PAN, bank details, or full identity documents. Employers only see your professional profile — qualifications, experience, skills, preferences, and profile photo.

4Data Sharing — Who We Share With

Matched Employers: Professional profile only (qualifications, experience, skills, preferences, photo). Identity documents and financial data are never shared.
Payment Gateways (Razorpay / PayU): Transaction amount and email only — to process payments.
Email Service (Gmail SMTP): Your email address — to send transactional messages.
Legal Authorities: If required by law, court order, or legitimate government request.

We do NOT sell your data to any third party, data broker, advertising platform, or research organisation under any circumstances.

5Data Retention

Active accounts: Data retained for duration of your account and 30 days after deletion request
Payment records: Retained 7 years as required by Indian GST law
Uploaded documents: Deleted within 30 days of account deletion
Warnings and quit reasons: Retained 12 months, then anonymised
Blacklisted accounts: Core data retained 90 days for legal purposes, then purged

6Your Data Rights

Access: View all data we hold about you through your profile pages
Correction: Update your profile data at any time (subject to lock restrictions)
Deletion: Delete your account from the dashboard. All personal data removed within 30 days, except legally retained records
Portability: Contact us to request a copy of your data in a structured format
Objection: Contact us to object to specific uses — we will respond within 30 days

7Security Measures

All data transmitted over HTTPS (TLS encryption in transit)
Sensitive fields encrypted at rest with AES-256-CBC
Passwords hashed with bcrypt (cost factor 12)
JWT authentication with server-side blacklist on logout
File uploads validated by extension, MIME type, and file signature
All database queries use parameterised statements (no SQL injection risk)

Despite these measures, no system is 100% secure. We will notify you promptly if we become aware of a data breach affecting your personal information.

8Changes to This Policy

We may update this Privacy Policy as the platform evolves. Changes will be notified via email and posted with a new version date. Continued use after notification constitutes acceptance of the updated policy.

9Governing Law & Jurisdiction

These Terms and Conditions, Privacy Policy, and all agreements between KKhoji Panndit (operated by Shagun Industrial Lines) and its users shall be governed by and construed in accordance with the laws of India. Any dispute, claim, or controversy arising out of or relating to these terms, the platform, its services, or any breach thereof shall be subject to the exclusive jurisdiction of the competent courts located in Raipur, Chhattisgarh, India.

By accessing or using KKhoji Panndit, you irrevocably agree to submit to this jurisdiction and waive any objection to proceedings in these courts on grounds of venue, inconvenience, or otherwise.

Any unauthorized use, reproduction, distribution, or breach of intellectual property rights associated with KKhoji Panndit will be pursued to the fullest extent permissible under applicable Indian law.

By registering on KKhoji Panndit, you confirm you have read and accepted this Privacy Policy.
You consent to the collection, use, and storage of your data as described above.

Privacy Policy — Job Seekers