Legal

Privacy Policy

Effective date: May 1, 2026

1. Who We Are

JobPulse India ("we", "our", "us") operates the website jobpulse.in, a job market intelligence platform providing weekly data on AI, ML, and Data Science job listings in India. We are the data fiduciary responsible for your personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act).

Contact us at: miqbal303@gmail.com

2. Data We Collect

Account data: Your name, email address, and hashed password when you register. If you use Google Sign-In, we receive your name and email from Google.

Payment data: Your subscription plan, payment amount, and Razorpay transaction/order IDs. We do not store card numbers, UPI IDs, or banking credentials — these are handled entirely by Razorpay.

Usage data: Job search keywords you query within the dashboard. We do not link keyword searches to your identity for analytics or advertising purposes.

Technical data: IP address (for rate limiting abuse prevention only, not stored persistently), browser type, and standard server logs.

3. How We Use Your Data

  • Authenticate you and manage your account
  • Process subscription payments and activate plan features
  • Send password reset emails when you request them
  • Enforce plan limits (e.g., restricting data access to your subscribed tier)
  • Prevent abuse via rate limiting on sensitive endpoints
  • Respond to your support requests

We do not use your data for advertising, profiling, or sale to third parties.

4. Third-Party Processors

We share data only with the following processors, under contractual data protection obligations:

MongoDB Atlas (MongoDB, Inc.)
Database hosting for account and payment records. Data stored on AWS infrastructure.
Razorpay (Razorpay Software Pvt. Ltd.)
Payment processing. PCI-DSS Level 1 certified. Razorpay's privacy policy governs payment data.
Google (Alphabet Inc.) — optional
Google OAuth for sign-in. Only used if you choose "Continue with Google". Google's privacy policy applies.

5. Data Retention

  • Active accounts: data retained while your account exists
  • Password reset tokens: deleted immediately upon use or after 1-hour expiry
  • Deleted accounts: personal data purged within 30 days of deletion request
  • Payment records: retained for 7 years as required by Indian tax law

6. Your Rights (DPDP Act 2023)

As a data principal under India's Digital Personal Data Protection Act, you have the right to:

  • Access a summary of your personal data we hold
  • Correct inaccurate or incomplete personal data
  • Request erasure of your personal data (subject to legal retention requirements)
  • Withdraw consent for processing (note: this may terminate your account)
  • Nominate a person to exercise these rights on your behalf

To exercise any right, email us at miqbal303@gmail.com with the subject line "DPDP Request". We will respond within 30 days.

7. Security

Passwords are hashed using bcrypt (cost factor 12) and never stored in plain text. All connections use HTTPS/TLS. Payment data is processed entirely by Razorpay's PCI-DSS compliant systems — we never see or store card details. API endpoints are protected by authentication and rate limiting.

8. Cookies

We use a single session cookie set by NextAuth.js to keep you signed in. No advertising cookies, tracking pixels, or third-party analytics cookies are set.

9. Changes to This Policy

We may update this policy as our service evolves. Material changes will be communicated via email to registered users at least 7 days before taking effect. Continued use of the service after the effective date constitutes acceptance.

10. Contact & Grievances

For privacy concerns, data requests, or grievances under the DPDP Act, contact:

JobPulse India — Data Grievance Officer