Privacy Policy
1. Introduction
IndoJob ("we," "us," "our") is a government job aggregation platform operated by a sole independent developer based in India. We take your privacy seriously. This Privacy Policy explains how IndoJob collects, uses, stores, shares, and protects your personal data when you visit www.indojob.in ("Website"), create an account, subscribe to job alerts, or purchase any course.
This Policy is written in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000 and associated Rules, and the Consumer Protection Act, 2019. By using IndoJob, you consent to the data practices described in this Policy.
2. Data Fiduciary — Who We Are
Under the Digital Personal Data Protection Act, 2023, the entity responsible for deciding how and why your personal data is processed is called the Data Fiduciary. For IndoJob, the Data Fiduciary is:
| Platform Name | IndoJob |
| Website | www.indojob.in |
| Operated by | Solo Independent Developer |
| Contact Email | contact@indojob.in |
| Jurisdiction | India |
As we are a solo-operated platform, there is no separate Data Protection Officer (DPO) at this time. All data-related queries are handled personally by the developer.
3. Personal Data We Collect
3.1 Data You Provide Directly
When you register or interact with IndoJob, we collect the following personal data:
| Data Type | Example | Why Collected |
|---|---|---|
| Full Name | Rahul Sharma | Account identification and personalisation |
| Email Address | rahul@gmail.com | Login, job alerts, course access, communications |
| Phone Number | +91 98765 43210 | SMS job alerts and account recovery |
| Password (hashed) | Encrypted at rest | Account security — we never store plain-text passwords |
| Job Preferences | State, category, exam type | Personalising job alert notifications |
| Payment Info (Courses) | Transaction ID only | Full card/UPI data handled by payment gateway — not stored by us |
3.2 Data Collected Automatically
When you browse IndoJob, we automatically collect certain technical data through cookies, log files, and analytics tools:
- IP address and approximate geographic location (state/city level, not precise location)
- Browser type, version, and operating system
- Pages visited, time spent, and links clicked on IndoJob
- Referring URL (the website that brought you to IndoJob)
- Device type (mobile, tablet, desktop)
- Session duration and interaction patterns
This data is collected in an aggregated, pseudonymous form and is used solely to improve website performance and user experience.
3.3 Data We Do NOT Collect
IndoJob does not collect, store, or process:
- Aadhaar number, PAN, or any government-issued identity document
- Educational certificates, mark sheets, or qualification documents
- Caste, religion, gender, disability status, or other sensitive personal data
- Bank account details, CVV, or full credit/debit card numbers
- Precise GPS location data
- Biometric data of any kind
4. How We Use Your Personal Data
We use your personal data only for the purposes listed below. Under the DPDPA 2023, we process your data on the basis of your consent (provided at registration) and legitimate interest where applicable.
| Purpose of Processing | Legal Basis (DPDPA 2023) |
|---|---|
| Creating and managing your account | Consent |
| Sending government job alert notifications (email/SMS) | Consent |
| Processing course purchases and access | Contractual necessity |
| Sending order confirmations and course access emails | Contractual necessity |
| Improving website performance via analytics | Legitimate Interest |
| Preventing fraud and ensuring platform security | Legitimate Interest |
| Complying with legal obligations (IT Act, DPDPA) | Legal Obligation |
| Responding to your queries and grievances | Consent / Legal Obligation |
We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you without your explicit consent.
5. Job Alerts and Communications
If you subscribe to job alerts, you consent to receiving the following types of communications from IndoJob:
- Job Notifications: New government job openings matching your state, category, or exam preferences.
- Admit Card & Result Alerts: Updates on admit card release dates and result declarations for jobs you follow.
- Course Promotions: Promotional emails about new courses, discounts, or study material available on IndoJob.
- Platform Updates: Important changes to the Website, Terms of Service, or this Privacy Policy.
You may opt out of promotional communications at any time by clicking the "Unsubscribe" link in any email, replying STOP to any SMS, or writing to contact@indojob.in. Please note that opting out of promotional messages will not stop transactional messages (e.g., course purchase confirmations, account security alerts).
IndoJob complies with TRAI's Telecom Commercial Communications Customer Preference Regulations (TCCCPR) for all SMS communications.
6. How We Share Your Data
6.1 We Do Not Sell Your Data
IndoJob does not sell, rent, trade, or lease your personal data to any third party for commercial purposes. Your data is not a product.
6.2 Limited Sharing With Service Providers
We may share your personal data with trusted third-party service providers who help us operate IndoJob. These providers act as Data Processors under the DPDPA 2023 and are contractually bound to process your data only on our instructions:
- Email Service Provider (e.g., SendGrid, Mailchimp): To send job alerts and transactional emails.
- SMS Gateway Provider (e.g., Twilio, MSG91): To deliver SMS notifications.
- Payment Gateway (e.g., Razorpay, PayU): To securely process course payments. We do not receive or store your card/UPI/bank details.
- Web Hosting / Cloud Provider (e.g., AWS, DigitalOcean): To host the Website and store data securely.
- Analytics Provider (e.g., Google Analytics): To collect anonymised usage statistics. Personal identifiers are not shared.
6.3 Disclosure Required by Law
IndoJob may disclose your personal data if required to do so by:
- A court order, judicial process, or lawful request from an Indian government authority;
- A requirement under the Information Technology Act, 2000 or DPDPA 2023;
- To protect the rights, property, or safety of IndoJob, its users, or the public;
- To investigate, prevent, or act against fraud, illegal activity, or violations of our Terms of Service.
We will, where legally permissible, notify you before disclosing your data in response to a legal request.
6.4 Business Transfer
In the unlikely event that IndoJob is transferred, merged, or sold, your personal data may be transferred to the new operator as part of that transaction. You will be notified via email at least 15 days prior to any such transfer, and you will have the right to delete your account before the transfer is completed.
7. Cookies and Tracking Technologies
7.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.
7.2 Cookies We Use
| Cookie Type | Purpose | Duration | Can You Opt Out? |
|---|---|---|---|
| Essential Cookies | Login sessions, CSRF protection | Session | No — required for site to function |
| Preference Cookies | Remember your job category/state preferences | 1 year | Yes — via browser settings |
| Analytics Cookies | Understand page visits and traffic sources | Up to 2 years | Yes — via opt-out link in footer |
| Marketing Cookies | Not currently used | N/A | N/A |
You can control cookies through your browser settings. Please note that disabling essential cookies may prevent you from logging in or using certain features.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Indian law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data (name, email, phone) | Until account deletion + 90 days | Account recovery window |
| Job alert preferences | Until account deletion | Service delivery |
| Course purchase records | 7 years from purchase date | Legal / tax compliance (GST Act) |
| Course access logs | 2 years from last access | Dispute resolution |
| Server access logs (IP, browser) | 90 days | Security and fraud prevention |
| Deleted account data | 30 days post-deletion, then purged | Account recovery safety window |
After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you.
9. Data Security
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:
- Encryption in Transit: All data transmitted between your browser and IndoJob is encrypted using HTTPS / TLS 1.2 or higher.
- Password Hashing: Passwords are hashed using bcrypt or equivalent — never stored in plain text.
- Encryption at Rest: Databases containing personal data are encrypted at rest on our hosting provider's servers.
- Access Control: Personal data is accessible only to the sole developer and authorised service providers.
- Payment Security: All payment transactions are processed by PCI-DSS compliant payment gateways. IndoJob never receives raw card data.
- Regular Security Audits: We periodically review our security practices and apply patches and updates promptly.
No method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours of becoming aware of it, as required under DPDPA 2023.
10. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you (as the Data Principal) have the following rights regarding your personal data held by IndoJob:
- Right to Access: You may request a summary of the personal data IndoJob holds about you and the purposes for which it is being processed.
- Right to Correction: You may correct inaccurate or incomplete personal data at any time via your account settings or by contacting us.
- Right to Erasure: You may request deletion of your personal data. We will delete your data within 30 days, subject to legal retention obligations.
- Right to Withdraw Consent: You may withdraw consent to data processing at any time. Withdrawal may affect your ability to use certain features.
- Right to Grievance Redressal: You have the right to file a complaint with IndoJob's Grievance Officer and, if unresolved, with the Data Protection Board of India.
- Right to Nominate: You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity (as provided under DPDPA 2023).
To exercise any of these rights, contact us at contact@indojob.in with the subject line "Data Rights Request — [Your Name]." We will respond within 7 business days.
11. Children's Privacy
IndoJob is not directed at or intended for children under the age of 18. Government job applications in India require applicants to be 18 years of age or older in most cases. We do not knowingly collect personal data from any person below the age of 18.
If we become aware that we have inadvertently collected personal data from a minor, we will delete such data immediately. If you are a parent or guardian and believe your child has provided data to IndoJob, please contact us at contact@indojob.in immediately.
12. Third-Party Links and External Websites
IndoJob contains outbound links to official government portals (e.g., upsc.gov.in, ssc.nic.in, railrecruitment.gov.in), third-party job aggregator websites, and payment gateways. Once you leave IndoJob:
- IndoJob's Privacy Policy no longer applies to your activity on those external sites;
- The external site's own privacy policy governs the collection and use of your data;
- IndoJob is not responsible for the privacy practices, security, or content of any external website.
We encourage you to review the privacy policy of every website you visit, especially before submitting personal data on government or third-party portals.
13. Data Storage and Cross-Border Transfers
IndoJob primarily stores your personal data on servers located in India. Where we use third-party service providers (such as email platforms or analytics tools) that may process data outside India, we take contractual and technical measures to ensure your data is protected to standards equivalent to those required by the DPDPA 2023.
We do not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards, in compliance with any cross-border data transfer rules notified under the DPDPA 2023.
14. Course Purchase and Payment Data
When you purchase a course on IndoJob, your payment is processed entirely by a third-party payment gateway. IndoJob receives only a transaction reference ID and confirmation of payment success or failure — we never see, store, or have access to your card number, CVV, UPI PIN, or bank credentials.
We retain course purchase records (your name, email, course purchased, amount, date, and transaction ID) for a period of 7 years to comply with GST and tax record-keeping obligations under Indian law.
If you request a refund, your name, email, and transaction ID will be shared with the payment gateway to process the refund. No additional personal data is shared.
15. Changes to This Privacy Policy
IndoJob may update this Privacy Policy from time to time to reflect changes in our data practices, new features, or changes in applicable law, including implementing any new rules notified under the DPDPA 2023. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy;
- Send a notification email to all registered users at least 7 days before the changes take effect;
- Display a prominent notice on the IndoJob homepage for at least 14 days.
Your continued use of IndoJob after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should stop using IndoJob and delete your account.
16. Grievance Redressal
In accordance with the DPDPA 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, IndoJob designates a Grievance Officer to address concerns related to data privacy:
| Role | Grievance Officer / Sole Developer — IndoJob |
| contact@indojob.in | |
| Acknowledgement Time | Within 48 hours of receiving the complaint |
| Resolution Time | Within 15 days of receiving the complaint |
If your grievance is not resolved to your satisfaction within 15 days, you may escalate your complaint to the Data Protection Board of India once it is formally constituted and operational under the DPDPA 2023. In the meantime, unresolved complaints may also be escalated to the Ministry of Electronics and Information Technology (MeitY).
17. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or IndoJob's data practices, please reach out:
Contact UsBy using IndoJob, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.
Questions about our privacy policy? Reach out to us.
Contact Us