Privacy Policy

1. Introduction & Scope

This Privacy Policy governs the collection, storage, use, disclosure, and processing of personal data by Hindu Swad Private Limited, operating the HinduSwad Logistics Jobs Platform (the “Platform”), accessible at jobs.hinduswad.in or associated domains.

This Policy applies to:

• All persons who register as candidates, browse job listings, submit applications, upload documents, or make payments on the Platform;
• Information collected through our telecalling, regional office, and support channels that is entered into HinduSwad's systems.

This Policy does not apply to:

• Third-party websites, apps, or services linked from the Platform (including PayU, Supabase, or partner organizations);
• Data independently collected or processed by partner organizations that engage candidates post-placement.

By registering, submitting an application, paying a fee, or uploading documents, you consent to the terms of this Policy. Your continued use of the Platform constitutes ongoing acceptance.

2. Data Controller & Grievance Officer

Under the Digital Personal Data Protection Act, 2023 (DPDP Act), HinduSwad is a “Data Fiduciary” responsible for determining the purposes and means of processing your personal data. Our Grievance Officer details are provided in Section 19.

3. Data We Collect

4. Legal Basis for Processing

We process your personal data on the following legal bases under the Information Technology Act, 2000, the IT (SPDI) Rules, 2011, and the Digital Personal Data Protection Act, 2023:

• Consent: Where you voluntarily submit information, tick consent checkboxes, or upload documents.
• Contractual Necessity: To process your application, conduct assessments, and facilitate onboarding as requested by you.
• Legal Obligation: To comply with statutory, regulatory, tax, or court-mandated requirements.
• Legitimate Interests: To prevent fraud, secure the Platform, improve our services, and manage our operations, provided such interests are balanced against your rights.
• Vital Interests: Where necessary to protect the safety of candidates or others.

5. How We Use Your Data

• Candidate Registration & Profile ManagementCreating and maintaining your candidate profile, verifying your identity, and managing your account.
• Application Processing & ShortlistingReviewing your qualifications, experience, and preferences to assess suitability for available roles.
• Assessment & Interview SchedulingAdministering aptitude tests, scheduling interviews, recording scores, and communicating results.
• Document Verification & Background ChecksVerifying Aadhaar, PAN, educational certificates, and experience documents; conducting criminal and address background checks as required.
• Payment ProcessingFacilitating the collection of application fees via PayU, recording transaction data, and issuing receipts.
• Onboarding & Role AllocationCoordinating your onboarding with partner logistics networks, training scheduling, and role/district assignment.
• CommunicationSending transactional updates on application status, assessment schedules, verification outcomes, and onboarding details via SMS, email, and phone.
• Legal & ComplianceMaintaining records required by law, responding to legal process, and preventing/detecting fraud and platform abuse.
• Platform Analytics & ImprovementAnalysing usage patterns to improve platform experience, identifying recruitment trends, and planning operational expansion.

We will not use your data for purposes materially different from those above without notifying you or obtaining your consent where legally required.

6. Third-Party Data Sharing

We do not sell your personal data. We may share your data only in the following circumstances:

• Partner Organisations & EmployersYour profile, qualifications, document verification outcomes, assessment scores, and contact details may be shared with logistics operators, delivery networks, merchants, or allied entities for the purpose of evaluating your candidature and facilitating employment or engagement.
• Background Verification AgenciesIdentity documents, contact details, and employment history may be shared with verified third-party background check agencies, subject to your consent and applicable law.
• Payment Processors (PayU)Transaction-related data is shared with PayU for the purpose of processing payments. PayU's privacy policy governs their data use.
• Cloud & Infrastructure ProvidersData is hosted on Supabase (cloud-hosted PostgreSQL database) and associated secure cloud storage. These providers process data on our behalf under appropriate data processing agreements.
• Legal & Regulatory AuthoritiesWe may disclose data to courts, law enforcement, government regulators, or other authorities where required by law, court order, or to protect legal rights and public safety.
• Corporate TransactionsIn the event of a merger, acquisition, or sale of assets involving HinduSwad, candidate data may be transferred as part of the transaction, subject to continued protection consistent with this Policy.

7. Payment & Financial Data

• All payment transactions are processed by PayU Payments Private Limited, a RBI-regulated payment aggregator operating in a PCI-DSS compliant environment.
• HinduSwad does not collect, store, or process full payment card numbers, CVV codes, UPI PINs, or net banking credentials at any point.
• HinduSwad stores: PayU Transaction ID (mihpayid), payment status (PAID/FAILED/PENDING), payment amount, payment timestamp, payment method type, and masked payment reference metadata returned by PayU in its callback response.
• This payment data is retained for the period mandated by applicable tax and financial regulations (typically 7 years) and for dispute resolution purposes.
• Failed transaction data may be retained for fraud prevention and chargeback defense purposes.

8. Document & KYC Data

• Documents you upload (photograph, Aadhaar image, resume, experience certificates) are stored in encrypted cloud storage (Supabase Storage / AWS S3-compatible) with access restricted to authorised HinduSwad personnel and verified partner organisations.
• Document URLs are stored in our database linked to your candidate profile. Access to the actual documents requires authenticated, role-based access.
• We do not store or process Aadhaar biometric data or OTPs generated by the UIDAI system. Document images are used solely for manual verification purposes.
• Documents shared with partner organisations are transmitted via secure, encrypted channels. HinduSwad contractually restricts partner organisations from using candidate documents for any purpose other than candidate evaluation and onboarding.
• Upon receipt of a verified deletion request (Section 11), documents will be purged from active storage, subject to any legal retention obligations.

9. Data Retention & Fraud Databases

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Indicative retention periods:

Fraud Databases: In cases of confirmed document fraud, identity fabrication, or platform abuse, HinduSwad may retain relevant data indefinitely and may report the incident to industry fraud-sharing networks or law enforcement. Such data may also be shared with partner organisations to prevent future misuse.

10. Data Security

We implement appropriate technical and organisational security measures, including:

• Encryption: Data in transit is protected via TLS/HTTPS. Passwords are hashed using bcrypt. Documents stored in cloud storage are encrypted at rest.
• Access Controls: Role-based access control (RBAC) restricts database and document access to authorised personnel only. Admin portal access requires separate authentication.
• Authentication: All user sessions are secured using cryptographic tokens (NextAuth.js / Auth.js) with short expiry windows.
• Monitoring: Platform access logs, error monitoring, and anomaly detection tools are employed to identify and respond to security incidents.
• Third-Party Security: Our cloud infrastructure partners (Supabase) maintain SOC 2 compliance and operate secure, audited environments.

While we apply industry-standard security practices, no system is completely immune to breaches. In the event of a security incident affecting your personal data, we will notify you and relevant authorities as required by applicable law.

11. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• AccessRequest confirmation of whether we process your personal data and obtain a copy.
• Correction (Rectification)Request correction of inaccurate or incomplete data (e.g., wrong address, misspelled name).
• Deletion (Erasure)Request deletion of your personal data, subject to our legal, contractual, and legitimate business requirements to retain certain data (e.g., payment records, fraud flags).
• Withdrawal of ConsentWithdraw consent where processing is based on consent. This will not affect the lawfulness of prior processing. Withdrawal may affect our ability to continue processing your application.
• Restriction of ProcessingRequest restriction of processing in certain circumstances (e.g., while accuracy is contested).
• ObjectionObject to processing where we rely on legitimate interests, if your rights outweigh our interests.

To exercise any of these rights, write to us at support@hinduswad.in. We may request identity verification before processing your request. We will respond within the timeframes mandated by applicable law.

12. Data Principal Rights (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), as a Data Principal (individual whose data is processed), you have the following additional rights once the relevant provisions are notified and in force:

• Right to Information: Know what personal data we process and the grounds for processing.
• Right to Correction & Erasure: Correct inaccurate data or erase data no longer necessary for the stated purpose.
• Right to Grievance Redressal: Raise grievances with our Data Fiduciary and, thereafter, with the Data Protection Board of India.
• Right to Nominate: Nominate a person to exercise your rights in the event of your death or incapacity.
• Consent Management: Withdraw consent previously given, in a manner that is as easy as giving consent.

The DPDP Act provisions will be implemented in a phased manner as notified by the Government of India. HinduSwad is committed to compliance with all notified provisions upon their effective dates.

13. Children's Privacy

The Platform is intended for individuals who are at least 18 years of age (the minimum legal working age). We do not knowingly collect personal data from individuals below 18 years of age. If we discover that personal data of a minor has been submitted to the Platform without appropriate authorisation, we will delete such data promptly. If you believe a minor has submitted data through the Platform, please notify us immediately at support@hinduswad.in.

14. Cookies & Tracking

The Platform uses the following types of cookies and tracking technologies:

• Essential Cookies: Session authentication tokens and CSRF protection cookies that are strictly necessary for the Platform to function.
• Preference Cookies: Cookies that remember your language, district preference, and form data to improve your experience.
• Analytics Cookies: Cookies used by analytics tools to measure Platform performance and identify improvement areas. These may be first-party or third-party.

You may configure your browser to decline or delete cookies. Blocking essential cookies will prevent the Platform from functioning correctly. We do not use cookies for behavioural advertising or tracking across third-party websites.

15. Automated Decision-Making

The Platform may use automated processes to shortlist candidates based on declared qualifications, experience, district preference, and assessment scores. These automated shortlisting mechanisms are used as a first-pass filter and are reviewed by human recruitment staff before final decisions are made.

No purely automated decisions affecting your legal rights or equivalent significant interests will be made without human review. If you believe you have been unfairly rejected as a result of automated processing, you may request a human review by contacting us at support@hinduswad.in.

16. Account Suspension & Data Access

In the event of account suspension or termination (whether due to breach of Terms, fraud, or other reasons), your access to the Platform will be disabled. However, your personal data will be retained for the periods specified in Section 9 above, as required for legal, regulatory, and fraud-prevention purposes.

You may submit a data access or deletion request even after account termination, subject to the limitations described in Section 11. Requests from suspended accounts due to confirmed fraud will be evaluated on a case-by-case basis.

17. Cross-Border Transfers

HinduSwad's primary data processing operations are located in India. However, certain cloud infrastructure and service providers we use (including Supabase and AWS) may host or process data on servers located outside India.

Where data is transferred outside India, we take reasonable contractual and technical steps to ensure such transfers are subject to appropriate safeguards consistent with applicable Indian law. Your data will continue to receive protection substantially equivalent to that described in this Policy.

As the DPDP Act, 2023 provisions on cross-border transfers are notified, HinduSwad will implement any additional requirements that apply.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our business operations, technology, or user feedback. The updated Policy will be posted on the Platform with a revised “Effective Date”. Where changes are material, we will notify registered candidates via email or Platform notification at least 7 days before the changes take effect.

Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy. We recommend reviewing this Policy periodically.

19. Grievance Officer & Contact

For any questions, concerns, data rights requests, or grievances relating to this Privacy Policy or the processing of your personal data, please contact:

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India (once operational under the DPDP Act, 2023) or approach the appropriate regulatory authority.