Privacy Policy

This policy explains how Sapna Jobs — a Graciax brand operated by Keyakash Technologies Private Limited ("we", "us") — collects, uses, shares and protects your personal data, in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. Data we collect

Job seekers: name, phone number, city and area, education, work experience, expected salary, languages, and the applications you submit. Employers: contact details, company information and documents submitted for verification (such as GST details). Everyone: device and usage data (pages viewed, approximate location from IP) and cookies needed for sign-in and analytics. We do not knowingly collect data from anyone under 18.

2. How we use it

To operate the platform: matching you with relevant jobs or candidates, sending application updates and job alerts, verifying employers, processing payments, preventing fraud and spam, improving the product, and meeting legal obligations. Job alerts and marketing messages can be switched off at any time from your account or the message itself.

3. Who we share it with

Employers see your profile and contact details only when you apply to their job. Service providers process data on our behalf: Supabase (hosting and database), Razorpay (payment processing — we never store your card or UPI credentials), analytics and communication providers. Authorities where required by law. We do not sell personal data, and we do not share job seekers' phone numbers with anyone except employers whose jobs they applied to.

4. Retention

We keep your data while your account is active and for up to 12 months after deletion where needed for legal, accounting or fraud-prevention purposes, after which it is deleted or anonymised. Payment records are retained as required by Indian tax law.

5. Your rights

You can access and correct your data from your account, download a copy by writing to us, withdraw consent, or ask us to delete your account and data (info@sapnajobs.com). We respond within the timelines set by the DPDP Act. You may also nominate a person to exercise these rights on your behalf as the Act provides.

6. Security

Data is encrypted in transit, access is restricted by role, and payment card data never touches our servers. No system is perfectly secure; if a breach affecting you occurs we will notify you and the Data Protection Board of India as required.

7. Grievances

Grievance Officer: [Name], [Email], Keyakash Technologies Private Limited, [Registered office address]. We acknowledge complaints within 48 hours and aim to resolve them within 15 days. If unsatisfied, you may complain to the Data Protection Board of India.