Last updated: [Select Date] · Applies to: visitors, job seekers, institution staff, company recruiters, and student data shared through the Platform
This Privacy Policy explains what personal data Udhyogii Technologies Private Limited collects, why, how it is used and shared, and the rights available to you under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), read together with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 where applicable.
Drafting note: The DPDP Rules, 2025 were notified on 13 November 2025 and commence in phases — provisions establishing the Data Protection Board took effect immediately; consent-manager provisions commence 13 November 2026; the substantive data-principal-rights and data-fiduciary obligations commence 14 May 2027. Udhyogii has chosen to align this policy to the full standard ahead of that final commencement date rather than wait for it, and will update specific mechanics (such as the consent-manager option) as they come into effect.
| User | Data collected | Purpose |
|---|---|---|
| Job seeker / visitor | Name, email, browsing activity on Find Jobs | Show relevant listings; account access |
| Institution staff (placement officer) | Name, work email, phone, designation | Account access; verification; grievance contact |
| Student (via institution roster) | Name, roll number, branch, batch, contact details, resume, academic data if uploaded | Build a shareable profile; match to Direct Jobs; the institution is the source of this data and is responsible for obtaining student consent before it reaches Udhyogii |
| Institution premises (verification only) | Live geotagged photograph and device location, captured only where an email domain cannot be matched | One-time or annual physical verification of the institution's existence at its stated address |
| Company recruiter | Name, work email, phone, GST/CIN details | Account access; verification; badge display |
| All paying accounts | Billing name, address, GST number; payment is processed by our payment gateway partner and Udhyogii does not store full card or bank details | Invoicing and statutory tax compliance |
Where Udhyogii processes personal data on the basis of consent, that consent is free, specific, informed, unconditional and unambiguous, obtainable and withdrawable as easily as it was given, consistent with Section 6 of the DPDP Act. For student data specifically: the institution is required to obtain the student's consent once, before that student's profile leaves the institution and becomes visible to Udhyogii or any company. Udhyogii relies on the institution's representation that this consent has been properly obtained and is a contractual condition of the institution's use of the Platform; an institution that shares a profile without valid student consent is in breach of these Terms independently of any DPDP Act liability that may attach to it directly as a data fiduciary in its own right.
A student's profile and resume are visible only to a company that the institution has explicitly chosen to share it with, and only against the one job description it was shared for. There is no searchable, open resume database on the Platform — a company cannot browse or search students who were not shared with it. A shared profile automatically leaves the company's console 30 days after sharing and moves to cold storage; the institution may revoke a share at any time, which removes the company's access immediately. Every resume download is logged with the recruiter's identity and is visible to the institution. Full detail is in the Data & Resume Handling Policy, which forms part of this Privacy Policy by reference.
Udhyogii does not sell personal data. Data is shared with: (a) the institution and company account holders as described above; (b) sub-processors that host, store or process data on our behalf under written data-processing terms (for example, cloud infrastructure and email-delivery providers), who may not use the data for their own purposes; (c) our payment gateway, solely to process a transaction; and (d) any authority to whom disclosure is required by law, including under a lawful order or in connection with a fraud investigation.
Personal data may be processed on servers located in India or, for limited technical sub-processing (such as email delivery or error monitoring), outside India. The DPDP Act permits transfer of personal data outside India except to countries the Central Government restricts by notification; Udhyogii will not transfer personal data to a country so restricted, and will update this clause if the Government notifies such a list.
Subject to the DPDP Act's phased commencement noted above, and honoured by Udhyogii on a voluntary basis in the interim, you have the right to: obtain a summary of the personal data being processed about you and the processing activities; correction and completion of inaccurate or incomplete personal data; erasure of personal data that is no longer necessary for the purpose it was collected for; grievance redressal against Udhyogii in the first instance; nominate another individual to exercise your rights in the event of death or incapacity (Section 14, DPDP Act); and to file a complaint with the Data Protection Board of India if you are not satisfied with how Udhyogii has addressed your grievance. To exercise any of these rights, contact the Grievance Officer named in the Grievance Redressal Policy.
The Platform is intended for use by institutions, companies and students who are ordinarily 17 years of age or older (final-year school leavers, diploma, undergraduate and postgraduate students). Where an institution's roster includes a student who is a child within the meaning of the DPDP Act (under 18 years of age), the institution is responsible for obtaining verifiable parental or lawful-guardian consent before sharing that student's profile, and Udhyogii will not knowingly permit behavioural monitoring, tracking or targeted advertising directed at any user it has actual knowledge is a child.
Udhyogii applies reasonable security practices and procedures consistent with the IT Act, 2000 and applicable rules, including encryption of data in transit, access controls limiting visibility to the specific institution or company a record was shared with, and logging of resume downloads. In the event of a personal data breach, Udhyogii will notify the Data Protection Board of India and affected data principals as required under Section 8(6) of the DPDP Act and the DPDP Rules.
Udhyogii uses strictly necessary session cookies or local storage to keep you signed in and remember in-product preferences. Udhyogii does not currently use third-party advertising or cross-site tracking cookies; if that changes, this Policy and an in-product cookie notice will be updated first.
Udhyogii may update this Privacy Policy from time to time. Material changes will be notified by email or in-product notice before they take effect. Continued use of the Platform after a change takes effect constitutes acceptance of the revised Policy.
