Privacy Notice

This Privacy Notice applies to Indyaah Techbytes Private Limited ("we", "us", "our"), which operates indyaah.in to offer technical recruitment, staffing, and AI training and evaluation talent services.

For personal data collected through this website, our enquiry and application forms, and our booking page, Indyaah Techbytes Private Limited is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Data Controller under the EU and UK GDPR.

When a representative of a company sends a hiring enquiry or books a call, we collect:

• Contact data: full name, work email address, phone number, job title, and the country where you need the talent — which tells us the compliance requirements for placing contractors there.
• Company and hiring needs: company name, the service you are interested in, the roles and requirements you describe, and your timeline.
• Discovery call data: your preferred call date and time, notes you give us, and the recording and transcript of the call. Discovery calls are held on Google Meet and recorded; we tell you that the call is recorded before it starts.
• Your consent choices.
• Our follow-up records: the status of your enquiry, follow-up dates and internal notes.

When you apply through the For Candidates page, we collect:

• Contact data: full name, email address, phone or WhatsApp number, and city and country.
• Your CV (PDF, DOC or DOCX, up to 5 MB) and anything it contains, such as work history and education.
• Profile details: the work you are applying for, your domain and skills, years of experience, availability, your LinkedIn profile, your GitHub or portfolio link (required for developers, designers and marketers), your expected rate (optional) and any notes you add. We review your public LinkedIn profile, including recommendations, and your GitHub or portfolio to check them against your CV.
• Screening call data: if we invite you to a screening call, it is held on Google Meet and recorded, and we tell you that the call is recorded before it starts.
• Your consent choices.
• Our process records: your stage in our process, which clients your profile was shared with (only with your consent) and their outcome, and internal notes.
• Please do not include sensitive data such as identity numbers, bank details, health information or photographs in your CV or notes.

This website does not set cookies and does not use advertising or tracking tools.

Our hosting provider keeps standard server and security logs, which may include your IP address, browser type and the pages requested.

Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

We use personal data only for the purposes below.

We do not sell, rent or trade personal data. We share it only as follows:

• Website hosting: Vercel Inc. (United States).
• Google (Google Workspace, Google Sheets, Google Drive, Google Calendar and Google Apps Script), where our email, website form submissions, candidate CVs and bookings are stored and processed.
• Google Meet, for discovery calls with clients and screening calls with candidates, including their recordings.
• Zoho CRM, where we manage client and prospective client records.
• Zoho applicant tracking system (ATS), where we manage candidate applications, CVs and assessments.
• Group entities and subcontractors: affiliated executive search consultants or recruitment partners engaged in delivering specialised staffing solutions.
• Google Fonts, for loading the website fonts.
• Prospective clients: a candidate’s CV and profile are shared with a client only after we have asked the candidate and they have agreed.
• Authorities, where we are required to by law or a binding legal process.

Our service providers may store or process data on servers outside your country, including in India, the United States, the EU and the UK.

For Indian residents, transfers follow the DPDP Act, 2023 and its rules. For EU and UK residents, transfers rely on Standard Contractual Clauses or adequacy decisions.

We keep personal data only as long as needed for the purposes above:

• Prospective clients who do not become clients: 12 months after our last contact, then deleted.
• Clients: for the duration of the service agreement, plus any period required by tax and accounting law.
• Candidates: 12 months after our last contact, then deleted — or sooner if you ask.
• Update emails: until you unsubscribe or ask us to delete your details.

Depending on where you live, you have the right to:

• Access the personal data we hold about you and have it corrected.
• Ask us to delete it, where we have no contract or legal obligation to keep it.
• Withdraw consent at any time, including unsubscribing from update emails. Withdrawal does not affect processing done before it.
• Under the DPDP Act: grievance redressal, and nominating another person to exercise your rights in the event of death or incapacity.
• Under EU/UK GDPR: object to processing, restrict it, and receive your data in a portable format; and complain to your data protection authority.
• Under US state privacy laws, where they apply: opt out of targeted advertising and not be discriminated against for using your rights.

To exercise your rights or ask a question, email grievance@indyaah.in.

Legal entity: Indyaah Techbytes Private Limited

Registered address: 22/T-25/101 Amanora Parktown, Hadapsar, Pune 411028, Maharashtra, India

General enquiries: info@indyaah.in

Grievance Officer (DPDP Act): Sanmeet Singh Sahni · grievance@indyaah.in

We acknowledge grievances within 48 hours and aim to resolve them within 15 business days. If your grievance is not resolved, you may approach the Data Protection Board of India.

We will update this notice when our practices change. The "Last updated" date at the top shows when the wording last changed.