Last updated
This policy explains how InSach Global(“we”, “us”) handles personal data on insachglobal.com and its candidate and employer portals. It is written for two groups: candidates who create a profile and apply to jobs, and recruiters who post jobs and review applicants.
1. What we collect
From candidates
- Account details — name, email address, phone number, and a password (held by our authentication provider, never by us in readable form).
- Profile data — headline, summary, skills, total experience, current and expected salary, notice period, current and preferred locations.
- Resumes — the files you upload, plus the work history and education you enter.
- Application activity — the jobs you apply to, save, and the stage each application reaches.
- Technical data — IP address, browser type and pages visited, used for security, rate limiting and abuse prevention.
From recruiters
- Account and company details, including company name, website, industry and location.
- Verification documents — GST certificate or incorporation proof, used only to confirm the company is real before it can publish jobs.
- Billing records for any plan purchased. We never see or store your card details.
2. How we use it
- To run the service: showing jobs, submitting applications, tracking hiring stages.
- To let verified recruiters search candidate profiles — only where the candidate has left their profile searchable (see section 5).
- To send job alerts you asked for, and notifications about your applications.
- To verify employers, prevent fraudulent listings and enforce our Terms.
- To take payment for recruiter plans and issue receipts.
We do not sell personal data, and we do not use your resume to train machine-learning models.
3. Who sees your data
| Who | What they see |
|---|---|
| The recruiter whose job you applied to | Your name, contact details, profile and the resume attached to that application |
| Verified recruiters searching the database | Your profile and contact details — only if your profile is set to searchable |
| Our staff | Account records, for support and moderation. Every staff action that changes a record is written to an audit log |
| Service providers | See section 4 |
For our IT staffing service, we may share your profile with a client company when submitting you for a specific role. We tell you before we do this.
4. Service providers
We rely on a small number of providers, each for a specific purpose:
- Google Firebase — sign-in, password resets, and storage of uploaded resumes and documents.
- Razorpay — payment processing for recruiter plans. Card details go directly to Razorpay and never reach our servers.
- Email and hosting providers — to deliver notifications and run the service.
These providers process data on our instructions. Some may store data outside India; where that happens we rely on contractual safeguards with the provider.
5. Your control and your rights
Under India’s Digital Personal Data Protection Act, 2023, you can:
- Access and correct your data — edit any of it from your profile at any time.
- Hide from recruiter search— turn off “Let verified recruiters find my profile” on your profile page. Applications you have already sent remain visible to those recruiters.
- Withdraw an application, which marks it withdrawn for the recruiter.
- Delete your account — write to contact@insachglobal.com and we will erase your profile and resumes within 30 days.
- Withdraw consent for job alert emails, from the alerts page or the unsubscribe link in any alert.
- Nominate someone to exercise these rights on your behalf if you are unable to.
- Complain to the Data Protection Board of India if we do not resolve your grievance.
6. How long we keep it
- Active accounts — for as long as the account exists.
- After deletion — profile and resumes are erased within 30 days.
- Applications — the recruiter keeps a record of applications they received, since it documents a hiring decision.
- Invoices and payment records — retained as long as tax law requires.
7. Security
Passwords are held by our authentication provider and are never stored in readable form. Sessions use short-lived tokens that rotate. Resumes are stored with access-controlled links rather than public URLs, and staff actions on records are logged. No system is perfectly secure, but we will tell you and the authorities if a breach affects your data.
8. Children
The service is not for anyone under 18. We do not knowingly collect data from children; if we learn we have, we delete it.
9. Grievance Officer
As required by the DPDP Act and the Information Technology Rules, you can reach our Grievance Officer for any complaint about how your data is handled:
- Email: contact@insachglobal.com
- Address: InSach Global, India
We acknowledge complaints within 48 hours and aim to resolve them within 30 days.
10. Changes
We will update this page when our practices change and revise the date at the top. If a change materially affects your rights, we will notify you by email or in the portal.
See also our Terms of Use and Cookie Policy.
Questions about this policy? Write to contact@insachglobal.com or use the contact form.