Privacy Policy

This policy explains what Branova Jobs does with personal data. It covers jobs.branova.in and is operated by [[LEGAL ENTITY NAME]], [[REGISTERED ADDRESS]], India ("Branova", "we").

1. Who this applies to

Two different kinds of people use Branova Jobs, and we treat their data differently:

• Job seekers hold a personal account. Their profile and résumé are private until they choose to apply to a role.
• Employers hold a workspace account. Their data is isolated to their own organisation and is never visible to another employer.

2. What we collect

From job seekers

• Account details: name, email, password (stored only as a bcrypt hash — we never see it).
• Profile: headline, summary, city, years of experience, current and expected salary, notice period, education, skills, languages, links you add.
• Résumés and documents you upload.
• Applications you submit, including cover notes and answers to an employer's screening questions.

From employers

• Account and workspace details, company profile, and the postings you publish.
• Notes, ratings and interview feedback your team records against an application.
• Billing records for payments made.

Automatically

• A session cookie so you stay signed in, and a single sign-on cookie on .branova.in so one sign-in works across the Branova Business Suite.
• Server logs, and a per-job view counter that is deduplicated per browser session. We do not run advertising trackers or sell data to advertisers.

3. Who can see your data

This is the part that matters most on a job board, so it is stated plainly:

• Your résumé is not public. It is stored outside the web root and can only be opened by you, or by an employer to whose role you actually applied. No one can reach it by guessing a URL.
• Your contact details are not public. Employers browsing the talent pool see your profile without your email or phone number. Those become visible to an employer only once you apply to one of their roles.
• You can set your profile to Hide me, and then you appear to an employer only when you apply.
• Employer data is scoped to the employer's own organisation. One employer cannot see another's postings, applicants, notes or messages.
• Notes, ratings and internal feedback an employer records are visible to that employer's hiring team only — never to the candidate.

4. Why we process it

• To run the service: showing postings, accepting applications, moving candidates through a pipeline, scheduling interviews, delivering messages.
• To send transactional email you asked for — application confirmations, stage updates, interview details, and job alerts you created. You can stop alerts from your portal.
• To bill employers, and to keep the tax records the law requires.
• To keep the service secure — rate limiting, abuse prevention, audit logs.

We do not sell personal data, and we do not use your résumé to train machine-learning models.

5. Sub-processors

We use a small number of service providers to operate the platform: our hosting provider (Hostinger, servers in [[HOSTING REGION]]), our email provider for transactional mail, and Razorpay for employer payments. Payment card details are handled by Razorpay and never reach our servers.

6. How long we keep it

• Your account and profile: until you delete your account.
• Applications and the pipeline history attached to them: retained by the employer as their hiring record, for up to [[RETENTION PERIOD, e.g. 24 months]] after the role closes.
• Invoices and tax records: as long as Indian tax law requires.
• Server logs: [[LOG RETENTION, e.g. 90 days]].

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 you may ask us to access, correct, or erase your personal data, and to withdraw consent. Most of it you can do yourself: edit or hide your profile, replace your résumé, or delete your account from your portal. For anything else, write to hello@branova.in and we will respond within [[RESPONSE WINDOW, e.g. 30 days]].

Our Grievance Officer is [[GRIEVANCE OFFICER NAME]], reachable at hello@branova.in.

Note that when you apply to a role, the employer becomes an independent controller of the application they received. If you want an employer to erase it, we will pass your request on and tell you who to contact.

8. Security

Passwords are hashed with bcrypt. Traffic is served over HTTPS. Session and single sign-on cookies are HttpOnly, SameSite=Lax and Secure. Database access uses prepared statements throughout. Résumés live in a directory that is not web-servable and are released only after an authorisation check. No system is perfect; if you find a problem, please tell us at hello@branova.in.

9. Children

Branova Jobs is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

If we change this policy materially we will update the date above and, for significant changes, email account holders.