Privacy Policy & Data Protection Notice

Nityaved (“Nityaved,” “we,” “our,” or “us”) is an Indian job discovery and career intelligence platform accessible at https://nityaved.com. We operate as a Data Fiduciaryunder India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and relevant provisions of the Information Technology Act, 2000.

1. Scope of This Notice

This Privacy Notice governs the collection, processing, storage, and transfer of digital personal data across all Nityaved services, including:

• Our public web platform, job indexing search engine, and company hiring portals.
• User accounts, watchlist (saved jobs), and personalized search preferences.
• Direct job alert notifications dispatched via email.
• Developer REST APIs and Model Context Protocol (MCP) server endpoints.
• Customer support, grievance handling, and rights-holder takedown workflows.

2. Categories of Personal Data Collected

In alignment with the principle of Data Minimisation, Nityaved only collects personal data strictly required to deliver our services:

3. Purposes of Processing & Lawful Bases

Under Section 4 and Section 6 of the DPDP Act 2023, we process personal data exclusively for specified, lawful purposes based on your explicit consent or legitimate uses:

• Service Delivery: To create and authenticate your account, maintain your saved jobs, and route you directly to official company ATS portals.
• Job Notifications: To transmit automated email alerts matching your criteria (subject to opt-in consent, withdrawable at any time).
• Security & Abuse Prevention: To enforce rate limits via Upstash Redis, prevent scraping abuse, and maintain incident audit logs aligned with CERT-In directions.
• Compliance & Legal Obligation: To respond to statutory grievances under the IT Rules 2021 and lawful government directives.

4. Data Processors & Infrastructure Vendors

Nityaved does not sell, rent, or tradeyour personal information. We engage verified cloud service providers (“Data Processors”) governed by strict confidentiality and data protection agreements:

• Supabase Inc. — Hosted relational database, authentication, and access control.
• Vercel Inc. — Serverless web hosting, edge deployment, and cookieless web performance analytics.
• Upstash Inc. — Serverless Redis cache for atomic API rate limiting and security safeguards.
• Resend / Email Delivery Providers — Transactional email dispatch for password resets and job alerts.
• Sanity AS — Content management system for editorial career guides (no candidate data is shared with Sanity).
• Oracle Cloud Infrastructure — Private VPS hosting for automated public ATS scraping pipelines (processes publicly indexable job requisitions only).

5. Data Principal Rights (DPDP Act Sections 11–14)

As a Data Principal under the DPDP Act 2023, you enjoy statutory rights regarding your digital personal data:

• Right to Access Information (Section 11): You may request a summary of the personal data we hold about you and the identity of processors processing it.
• Right to Correction & Erasure (Section 12): You may update outdated information or request the complete deletion of your account and personal data.
• Right of Grievance Redressal (Section 13): You have the right to register a complaint with our Grievance Redressal Officer. If unresolved, you may appeal to the Data Protection Board of India.
• Right to Nominate (Section 14): You may designate an individual who, in the event of death or incapacity, shall exercise your privacy rights.
• Right to Withdraw Consent: You may revoke consent for job alerts or optional communications at any time via the one-click “Unsubscribe” link in emails or account settings.

To exercise any of these rights, email us at privacy@nityaved.com or visit our dedicated Grievance & Privacy Rights Portal.

6. Data Retention & Erasure

We retain personal data only as long as necessary to fulfill the operational purpose for which it was gathered:

• Account & Watchlist Data: Retained until you request account deletion. Upon deletion, account records are purged within 30 days.
• Security & Traffic Logs: Retained for 180 days in compliance with cybersecurity directions issued by the Indian Computer Emergency Response Team (CERT-In).
• Grievance Records: Kept for up to 3 years to maintain evidence of compliance and regulatory resolution.

7. Children’s Personal Data (Section 9)

Nityaved is strictly designed for career seekers and professionals aged 18 years and above. We do not knowingly collect, process, or track personal data from individuals under 18. If we become aware that an account belongs to a minor, we will immediately delete the associated personal data.

8. Cross-Border Data Transfers

Your personal data may be stored or processed on cloud infrastructure hosted in India or in foreign jurisdictions (such as the United States or the European Union) by our infrastructure processors (e.g., Supabase, Vercel). We ensure that all cross-border processing complies with Section 16 of the DPDP Act and is never transferred to countries restricted by the Central Government of India.

9. Statutory Grievance Redressal Officer Contact

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021 and Section 13 of the DPDP Act 2023, the details of our designated Grievance Redressal Officer are published below: