[company legal name] ("SwitchKaraDo", "we") runs SwitchKaraDo, a place where tech professionals serving notice are discovered by verified recruiters, plus a browser-based Job Assistant. This policy explains what personal data we hold, why, who sees it, how long we keep it and what you can do about it. We process personal data under India's Digital Personal Data Protection Act, 2023.
What we collect
- Account: name, email address, Google sign-in details, your role (candidate or recruiter), and email verification status. If you verify a mobile number, we store the number and verification time. Legacy password accounts retain only a one-way password hash.
- Candidate profile: job title, experience, current and preferred locations, skills, expected salary, notice status and last working day (LWD). Your current employer is shown to recruiters only if you choose.
- Résumé (optional) and LWD documents you upload for verification. Staff review LWD documents; recruiters never see them, only whether your LWD is verified.
- Recruiter details: company name and domain, work email, designation, roles you post, and introductions you request.
- Job Assistant: your search preferences, connected browsers, job details the extension finds (title, company, location, experience, skills, salary when shown) and a record of each application you approved. The extension runs in your own browser. It never sends us your job-portal password or cookies.
- Payments: order and payment status from Razorpay. We never see or store your card, UPI or bank details.
- Technical data: IP address, used briefly to limit abuse (stored only as a one-way hash and cleared within a day), plus security logs of important actions.
- Analytics, only if you opt in: product usage events, without documents or contact details. You can change this any time under Your data.
Why we use it
- To run your account and show your profile to verified recruiters, only while you've turned on discovery and confirmed you're still looking.
- To share your contact details, and your résumé if you allowed it, with a recruiter only after you accept their introduction.
- To verify LWD documents, match jobs to your preferences and record applications you approve.
- To verify access to your mobile number through a WhatsApp verification message you choose to send (or a code you request when OTP verification is available). Your number is not shown to recruiters or used for marketing.
- To send account emails: verification, password reset, reminders and introduction updates.
- To take payments, prevent fraud and abuse, and meet legal obligations.
We don't sell your personal data or share it for advertising.
Who we share it with
Recruiters, as described above. And service providers that process data for us under contract: Render (hosting), Supabase (database), Cloudflare R2 (file storage and encrypted backups), our email delivery provider, Meta / WhatsApp (your mobile number and verification message or code when you choose WhatsApp verification), Razorpay (payments) and PostHog (analytics, only with your consent). Some of these process data outside India. We may also disclose data when required by law.
How long we keep it
- Incoming WhatsApp verification references expire after ten minutes. We match the sender to the number you entered. We retain the temporary reference, expected number and verification status, without storing incoming message bodies or unrelated messages. References are cleaned up by scheduled maintenance after expiry (normally within 25 hours). Your verified number remains until you change it or delete your account. Outbound WhatsApp verification codes, when available, expire after five minutes. Only a keyed hash is stored; the temporary challenge is deleted on success or cleaned up by our scheduled maintenance after expiry (normally within 25 hours).
- Account and profile data: until you delete your account.
- LWD documents: deleted 30 days after upload, whether or not they were reviewed.
- Encrypted database backups: up to 6 months. Backup copies of uploaded documents: 30 days.
- Payment records: as long as tax law requires. After you delete your account they're no longer linked to you.
- Outgoing email records: 30 days, with message contents removed once sent.
Your rights
- Access: download everything we hold about you from Your data.
- Correction: edit your profile at any time.
- Deletion: delete your account from Your data. It takes effect immediately; backups age out as described above.
- Withdraw consent: turn off discovery, analytics or the Job Assistant at any time.
- Nominate someone to exercise these rights if you're unable to, and raise a grievance with us (below) or with the Data Protection Board of India.
Security
Connections are encrypted, documents are stored privately and only served after permission checks, backups are encrypted with a key we keep offline, and access to production systems is limited. No system is perfectly secure; we'll notify you and the authorities of a breach as the law requires.
Age
SwitchKaraDo is for people aged 18 or over.
Contact and grievance officer
Grievance officer: [grievance officer name], [contact email]. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
Changes
We'll post updates here and email you about significant changes.