🔒 PRIVACY POLICY

Privacy Policy

How PassionCrew collects, uses, stores, and shares your personal information in compliance with Indian law.

📅 Effective: 01 January 2025 🔄 Last Updated: 09 June 2026 🏛️ Governed by: IT Act 2000 & SPDI Rules 2011

1. Information We Collect

Data Category	Examples	Purpose
Identity Data	Full name, email, phone, Aadhaar (if submitted)	Account creation, KYC verification
Employment Data	Skills, work history, job applications, uploaded documents	Matching with job listings
Transaction Data	Payment amount, plan purchased, Razorpay order ID	Processing payments, GST invoicing
Technical Data	IP address, browser type, cookies, page views, session data	Security, analytics, fraud prevention
User Content	Job listings, comments, ratings, cover letters	Platform functionality

We do NOT collect sensitive data such as caste, religion, sexual orientation, or medical history beyond what is strictly necessary and with explicit consent.

2. Legal Basis for Processing

Contract performance — to provide Platform access and services you have requested.
Legal compliance — to comply with orders from courts, tax authorities, labour authorities, and law enforcement.
Legitimate interests — to operate, maintain, and improve the Platform, detect fraud, and ensure security.
Consent — for optional features such as promotional communications. You may withdraw consent at any time.

3. How We Use Your Information

Create and manage your account.
Display your profile or job listing on the Platform.
Match Workers with relevant job opportunities.
Process payments and issue GST invoices.
Send transactional notifications (application updates, approvals).
Enforce our Terms & Conditions and investigate violations.
Maintain security logs and prevent fraudulent or illegal activity.
Comply with legal obligations including responding to government orders.
Generate anonymised aggregate analytics about Platform usage.

4. Sharing & Disclosure

4.1 With Other Users

Your name, posted job listings (Employers) or profile and application details (Workers) are visible to other registered Users for the purpose of matching and hiring.

4.2 With Service Providers

We share data with Razorpay (payments), cloud hosting providers, and email notification services. These providers are contractually bound to protect your data.

4.3 With Law Enforcement & Government Authorities

We will disclose information in response to lawful requests including under Sections 69, 69A, and 69B of the IT Act, 2000, without prior notice to you where legally required.

4.4 No Sale of Data

We do NOT sell, rent, or trade your personal information to any third party for marketing purposes.

5. Data Security

We implement reasonable security practices as mandated by Section 43A of the IT Act, 2000 and the IT (Reasonable Security Practices) Rules, 2011 ("SPDI Rules").

Passwords are stored as bcrypt hashes — never in plain text and cannot be recovered by us.
All web traffic is encrypted via SSL/TLS (HTTPS).
Payment data is processed by Razorpay — we do not store card numbers.
Access to personal data is restricted to authorised personnel only.
Security events are logged and monitored.
Sessions expire after a period of inactivity.

No system is 100% secure. In the event of a data breach affecting your SPDI, we will notify you and appropriate authorities as required by law.

6. Data Retention

Data Type	Retention Period	Reason
Account & profile data	Duration of account + 3 years after closure	Legal compliance, dispute resolution
Job applications	2 years from application date	Dispute resolution
Payment records	8 years	GST and Income Tax Act requirements
Security logs	90 days (rolling)	Security investigation
Uploaded documents	Duration of account + 1 year	Verification records

7. Your Rights

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and data (subject to legal retention requirements).
Withdrawal of Consent: Withdraw consent for optional processing at any time.
Opt-out of Marketing: Unsubscribe from promotional communications at any time.

Contact our Grievance Officer at passioncrewhr@gmail.com or via the online grievance form. We will respond within 15 days. We cannot delete data we are legally required to retain.

8. Cookies

We use session cookies strictly necessary to provide a logged-in experience. We do not use tracking cookies for advertising. You may disable cookies in your browser settings, but this will impair Platform functionality.

9. Children's Privacy

The Platform is not directed at persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us at passioncrewhr@gmail.com immediately and we will delete their data.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Platform with at least 30 days' advance notice. Continued use after the effective date constitutes acceptance.