Privacy Policy

Recroid (“Recroid”, “we”, “our”, or “us”) is an enterprise recruitment platform operated by Velozent Technologies. Our platform connects recruiters, hiring managers, interviewers, jobseekers, and universities to streamline the end-to-end hiring process.

Our registered address and data controller contact: privacy@recroid.com

We collect information you provide directly, information generated through platform use, and technical data:

• Account data: name, email address, password (hashed), profile photo
• Professional data: resume, skills, work history, education, LinkedIn/GitHub URLs
• Recruitment data: job descriptions, applications, interview schedules, scorecards, offer letters
• Organisation data: company name, industry, employee count, verification documents
• Usage data: pages visited, features used, login timestamps, IP address (for demo rate-limiting)
• Communications: messages sent through the platform, notification preferences

We do not sell your personal data to third parties. We do not run behavioural advertising.

• Providing, operating, and improving the platform
• Matching candidates to job opportunities using AI-powered recommendations
• Sending transactional emails (application updates, interview schedules, offer letters)
• Platform security: detecting fraud, abuse, and spam
• Analytics: aggregated, anonymised usage metrics to improve product quality
• Legal compliance: responding to lawful requests from public authorities

Where applicable, we process personal data under the following legal bases:

• Contract performance: to deliver the service you signed up for
• Legitimate interests: platform security, product improvement, fraud prevention
• Consent: optional features such as marketing emails — you can withdraw at any time
• Legal obligation: compliance with Indian law (DPDP Act 2023) and applicable regulations

Data is stored on servers located in Azure Central India (region: centralindia). We use industry-standard encryption in transit (TLS 1.2+) and at rest. Access is restricted to authorised personnel only. Row-Level Security (RLS) policies at the database level ensure no tenant can read another tenant's data.

While we take reasonable precautions, no system is 100% secure. If you discover a vulnerability, please contact us at security@recroid.com.

• Active accounts: retained for as long as your account is open
• Deleted accounts: anonymised within 30 days, with certain records retained for up to 7 years to meet legal obligations
• Demo data: automatically reset every 24 hours
• Audit logs: retained for 7 years (compliance requirement)

We share data only in these circumstances:

• Within your organisation: your profile and application data are visible to recruiters, hiring managers, and interviewers within the same tenant
• Service providers: email delivery (Resend), AI inference (OpenAI API) — governed by data processing agreements
• Legal: where required by law, court order, or to protect rights and safety
• Business transfer: in the event of a merger or acquisition — we will notify you before data is transferred

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: update inaccurate or incomplete data via your profile settings
• Deletion: request erasure of your account and associated personal data
• Portability: receive your data in a structured, machine-readable format
• Object / restrict: object to or restrict certain processing activities
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, email privacy@recroid.com. We will respond within 30 days.

We use strictly necessary cookies for session management (authentication). We do not use advertising or tracking cookies. A cookie consent notice will be shown if we add any optional cookies in the future.

Recroid is not directed to children under 18. If we learn that a child has provided us with personal data, we will promptly delete it.

We may update this policy periodically. Material changes will be communicated via email or an in-app notice at least 30 days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

Questions, concerns, or requests related to this privacy policy: privacy@recroid.com

You also have the right to lodge a complaint with the Data Protection Board of India (under the DPDP Act 2023) or your local supervisory authority.