Privacy Policy

TruSanity ("we", "us", "our") operates the job aggregation platform at trusanity.com. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our Platform.

For privacy-related inquiries, contact us at privacy@trusanity.com.

What you provide directly

• Account registration: Name, email address, password (hashed)
• Profile information: Skills, work experience, resume/CV (optional)
• Employer accounts: Company name, contact details, billing information
• Communications: Messages you send to our support team

Collected automatically

• Usage data: Pages visited, jobs viewed, search queries, clicks, and time spent
• Device and technical data: IP address, browser type, operating system, device identifiers
• Cookies and similar technologies: Session cookies, preference cookies, analytics identifiers

What we do NOT collect

• Government-issued ID numbers (Aadhaar, PAN, Passport) unless voluntarily submitted
• Financial account credentials or card numbers directly (payment processed by Stripe)
• Biometric data

We use your information to:

• Create and manage your account
• Provide personalised job recommendations and search results
• Track your saved jobs and application history
• Process employer payments and subscriptions (via Stripe)
• Send transactional emails (account verification, job alerts you opt into)
• Improve Platform performance, fix bugs, and develop new features
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations

We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.

Where applicable law requires a lawful basis, we process personal data under:

• Contract performance: To deliver the service you signed up for
• Legitimate interests: Platform security, fraud prevention, product improvement
• Consent: Marketing emails and non-essential cookies (you may withdraw consent at any time)
• Legal obligation: Compliance with court orders, tax regulations, or law enforcement requests

We do not sell your personal data to third parties. We share data only as follows:

• Service providers: Hosting (AWS), payment processing (Stripe), email delivery, and analytics — bound by data processing agreements
• Employers (direct postings only): When you apply to a job posted directly on TruSanity, your application information is shared with that employer
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In the event of a merger or acquisition, subject to equivalent privacy protections

TruSanity does not share your personal data with Source Platforms whose job listings we aggregate.

We use the following types of cookies:

• Strictly necessary: Authentication tokens, session management — cannot be disabled without breaking core functionality
• Functional: Saved preferences (theme, filters) — enable a better experience
• Analytics: Aggregated usage statistics to improve the Platform (privacy-friendly, no advertising profiles)

You can manage cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

We retain personal data for as long as your account is active or as needed to provide services:

• Account data: Retained until you delete your account + 30 days
• Usage logs: Retained for up to 12 months for security and analytics
• Billing records: Retained for 7 years as required by Indian tax law
• Support communications: Retained for up to 3 years

After retention periods expire, data is securely deleted or anonymised.

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• Bcrypt hashing for passwords (never stored in plain text)
• Role-based access controls limiting staff access to personal data
• Regular security audits and vulnerability assessments

In the event of a data breach that affects your rights, we will notify you and relevant authorities within 72 hours of becoming aware.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing in certain circumstances
• Withdraw consent: At any time, for processing based on consent

To exercise any of these rights, email privacy@trusanity.com. We will respond within 30 days.

TruSanity is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us at privacy@trusanity.com and we will delete that data promptly.

TruSanity is operated from India. If you access the Platform from outside India, your data may be transferred to and processed in India or other countries where our service providers operate (e.g., AWS data centres). We ensure appropriate safeguards are in place, including standard contractual clauses.

The Platform contains links to third-party job listings and Source Platforms. This Privacy Policy does not apply to those external sites. We encourage you to review their privacy policies before providing personal information.

TruSanity does not share your personal data with Source Platforms whose listings we aggregate. Any interaction you have with those platforms after following a link is governed solely by their own privacy policies.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email and/or a prominent notice on the Platform. Continued use after changes are posted constitutes acceptance.

For privacy questions, data requests, or complaints:

• Email: privacy@trusanity.com
• Legal email: legal@trusanity.com
• Response time: Within 30 days

If you are an EU/UK resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.