Privacy Policy.

This policy explains what personal data InstaHires collects, why we collect it, who we share it with, and the choices you have. It applies to candidates, employers, HR teams and anyone who visits instahires.cloud or uses our apps. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. InstaHires (instahires.cloud) is the data controller responsible for your personal data.

1. Information we collect

Information you give us: your name, email address, phone number, profile photo, résumé, work history, education, skills, preferred locations and salary expectations. Employers also give us company details, GST information, job listings and billing contacts.

Documents you upload: résumés, certificates and identity or verification documents you choose to store in your document vault.

Activity on InstaHires: jobs you view, save or apply to, applicant status updates, messages between candidates and employers, and support conversations.

Device and usage data: IP address, browser and device type, pages visited, and push-notification tokens if you enable notifications.

Information from Google: if you choose "Sign in with Google", we receive limited information from your Google Account, as described in section 2.

2. Google user data

InstaHires offers "Sign in with Google" as an optional way to create an account and log in. This section explains exactly what we access from your Google Account and how we handle it.

What we access: we request only the openid and email scopes. From Google we receive your email address, whether Google has verified that email, your Google account identifier, and, where Google includes it, your name. We do not request or access your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or any other Google service data.

How we use it: we use this information only to authenticate you, to create your InstaHires account or match you to your existing account, to show your name and email on your profile, and to send you account and security messages related to InstaHires. We use Google user data only to provide or improve user-facing features that are visible and prominent in InstaHires. We do not use Google user data for advertising, marketing, profiling, or to train artificial intelligence or machine-learning models.

What we never do with Google user data. We do not, and will not:

• use it for serving advertisements, including targeted, personalised, retargeted or interest-based advertising;
• sell it, or transfer it to advertising platforms, data brokers or other information resellers;
• use it to determine credit-worthiness or for lending purposes;
• use it to develop, improve or train generalised or non-personalised artificial intelligence or machine-learning models;
• allow humans to read it, unless you give us affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations;
• transfer it to any third party for any of the purposes above.

How we store it: your email address, name and account role are stored in our secured database as part of your InstaHires account. We verify the Google sign-in token on our server and do not store your Google password, Google access tokens or refresh tokens. Data is protected with encryption in transit (HTTPS/TLS) and access controls.

How we protect it: our database and servers are hosted with trusted infrastructure providers and are not publicly accessible. Access to personal data is restricted to authorised InstaHires personnel who need it to operate or support the service, and is governed by role-based permissions. Your signed-in session is held in a secure, HTTP-only cookie, and passwords for email sign-in are stored only as salted one-way hashes. We monitor for misuse, apply security updates, and review our security procedures regularly.

How we share it: we do not sell, rent or transfer Google user data to third parties. Your name and email are shown to employers only when you apply to or are matched with their job, as part of the core service. We may disclose data only where required by law or to protect the safety of our users. In detail, Google user data is shared only in these limited cases:

• Employers you apply to: your name and email are shown to an employer only when you apply to or are matched with their job, as part of the core service you asked for.
• Service providers: our hosting, database and email providers process this data on our behalf, only to operate InstaHires, under confidentiality and data-protection obligations.
• Legal and safety reasons: where required by law, a court order or a government authority, or to protect the safety and rights of our users.
• Business transfer: as part of a merger, acquisition or sale of assets, in which case the recipient must continue to follow this policy and we will notify you first.

Retention and deletion: we keep Google user data for as long as your account is active. You can ask us to delete your account and all associated data at any time by writing to privacy@instahires.cloud; we delete or anonymise it within 90 days, except for records we must keep by law. To request deletion, email us from the address linked to your account with the subject "Delete my account"; we will confirm your identity, delete your data, and confirm by email once it is done. You can also remove InstaHires' access to your Google Account at any time from your Google Account permissions page.

Limited Use: InstaHires' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use your information

• To create and secure your account, including sign-in by email, Google or phone OTP.
• To match candidates with relevant roles and show employers suitable applicants.
• To let employers post jobs, review applications and message candidates.
• To process payments for employer plans and issue invoices.
• To send account, application and transactional notifications by email, SMS, phone or push notification.
• To detect fraud, fake listings and misuse, and to keep the platform safe.
• To improve InstaHires, fix problems and understand how features are used.
• To meet legal, tax and regulatory obligations.

4. Sharing your information

When you apply to or are matched with a role, the employer can see your profile, résumé and application details. Employers' company names and job listings are public.

We share data with service providers who help us run InstaHires, such as Firebase (authentication, hosting and notifications), Cashfree (payment processing) and our cloud database and email providers. They may only use the data to provide their service to us.

We may disclose information when required by law, a court order or a government authority, or to protect the rights and safety of our users. We do not sell your personal data.

5. Payments

Card, UPI and net-banking details are entered directly with our payment partner, Cashfree. InstaHires does not store your full card or bank details; we only keep the order reference, amount and payment status.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 90 days, except where we must keep records longer by law (for example, billing and tax records).

7. Your rights

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate or incomplete information.
• Delete your account and personal data.
• Withdraw consent for optional processing, such as marketing messages.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us and, if unresolved, with the Data Protection Board of India.

You can update most details from your account settings, or write to privacy@instahires.cloud.

8. Cookies

We use cookies and similar technologies to keep you signed in and to understand how the site is used. See our Cookie Policy for details.

9. Security

We use encryption in transit, role-based access control and trusted infrastructure providers to protect your data. No system is completely secure, so please keep your password and OTPs private. Read more on our Security page.

10. Children

InstaHires is meant for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. If the changes are significant, we will notify you by email or in the app before they take effect.

If we change how InstaHires accesses, uses, stores or shares Google user data, we will update this policy, change the "Last updated" date above, and notify you before the change takes effect. Where required, we will ask for your consent again before using Google user data in a new way.

12. Contact

Questions about this policy can be sent to privacy@instahires.cloud. For complaints, see Grievance Redressal.

Full policy document

The text on this page is the complete and authoritative InstaHires Privacy Policy. A copy is also shown below for reference. Can't see it? Open it in Google Docs. If the copy and this page ever differ, this page applies.