Privacy Policy
Introduction
WalkinDrive ("we", "us", "our", "the Platform") is an online career-information and resume-tools platform operated from Hyderabad, India. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and transparently.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights regarding your personal data. By accessing or using WalkinDrive, you agree to the practices described in this policy.
1. Information We Collect
We collect only the information necessary to provide our services effectively. The categories of data we collect are outlined below:
1.1 Information You Provide Directly
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Full name, email address, Google profile picture (received via Google Sign-In) | Account creation and authentication |
| Personal Details | Phone number, gender, date of birth | Profile completion and identity verification |
| Academic & Career Data | Pass-out year (batch), highest qualification, CGPA, preferred location, preferred job roles | Personalised job matching and filtering |
| Education Details | College/school names, locations, departments, degree status, marks/CGPA, start & end years (for bachelor's, intermediate/diploma, and 10th standard) | Profile enrichment and job-eligibility matching |
| Professional Links | LinkedIn URL, GitHub URL | Profile enrichment (optional) |
| Resume Data | Resume file uploaded in PDF, DOC, or DOCX format (max 5 MB) | AI-powered resume optimisation |
| Payment Information | Transaction ID, plan type, billing dates | Subscription management (card details handled by Razorpay) |
| Communications | Support emails, feedback, grievance submissions | Customer support and service improvement |
1.2 Information Collected Automatically
- Device Information: Browser type, operating system, device type, and screen resolution.
- Usage Data: Pages visited, features used, time spent on the Platform, click patterns, and search queries.
- Log Data: IP address, access timestamps, referring URLs, and error logs for debugging and security purposes.
- Cookies & Similar Technologies: Session identifiers, preference tokens, and analytics trackers (see Section 5 below).
1.3 Information We Do NOT Collect
- We do not collect or store passwords. Authentication is handled entirely through Google OAuth 2.0 — we never ask you to create a password.
- We do not collect Aadhaar numbers, PAN numbers, or government-issued identity documents.
- We do not store credit/debit card numbers — all payment card data is handled exclusively by Razorpay in compliance with PCI DSS standards.
- We do not collect biometric data or sensitive personal data as defined under the IT (Reasonable Security Practices) Rules, 2011.
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Service Delivery
- Account Management: Creating and maintaining your account, verifying your identity, and managing your subscription.
- Personalised Job Matching: Using your profile data (graduation year, location, skills) to filter and display relevant job listings.
- Resume Optimisation: Processing your uploaded resume content through our AI tools to suggest improvements and keyword optimisations.
- Payment Processing: Facilitating subscription payments and managing billing through Razorpay.
2.2 Communication
- Service Emails: Sending you subscription confirmations, renewal reminders (as required by RBI e-mandate regulations), and account-related notifications.
- Priority Job Alerts: For Pro plan subscribers, sending email notifications about newly curated job listings matching your profile.
- Support Responses: Responding to your queries, complaints, and feedback.
2.3 Platform Improvement
- Analysing usage patterns and trends to improve our features, user interface, and overall user experience.
- Monitoring platform performance, identifying bugs, and ensuring service reliability.
- Conducting internal research and analysis (using aggregated, anonymised data only).
2.4 Legal & Security
- Complying with applicable Indian laws, regulations, and legal processes.
- Detecting, preventing, and responding to fraud, abuse, security threats, and technical issues.
- Enforcing our Terms and Conditions.
3. Legal Basis for Processing
We process your personal data under the following legal grounds as recognised under Indian law:
- Contractual Necessity: Processing required to perform our contract with you (e.g., providing access to the Platform upon subscription).
- Consent: Where you have given clear consent for specific processing activities (e.g., uploading your resume for AI tailoring, opting in for job alerts).
- Legitimate Interest: Processing necessary for our legitimate business interests (e.g., improving the Platform, preventing fraud), balanced against your rights and interests.
- Legal Obligation: Processing required to comply with applicable laws (e.g., tax regulations, IT Act compliance).
4. Data Sharing & Disclosure
We may share limited data only in the following circumstances:
4.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Razorpay Payments Pvt. Ltd. | Payment processing | Transaction details (we never receive or store your card numbers) |
| Cloud Hosting Provider | Infrastructure & data storage | Encrypted application data |
| Email Service Provider | Transactional emails & alerts | Email address, name |
| Analytics Provider | Usage analytics (anonymised) | Aggregated, non-identifiable usage data |
All service providers are contractually obligated to process your data only for the specified purposes and in accordance with our privacy standards.
4.2 Legal Requirements
We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to:
- Comply with a legal obligation, court order, or government request.
- Protect and defend the rights, property, or safety of WalkinDrive, our users, or the public.
- Prevent fraud, abuse, or illegal activity on the Platform.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction. You will be notified via email and/or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.
5. Cookies & Tracking Technologies
We use cookies and similar technologies to enhance your experience on the Platform. Here's what we use and why:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Strictly Necessary | Authentication, session management, security — required for the Platform to function | Session / up to 30 days |
| Preference Cookies | Remembering your theme choice (dark/light mode) and language preferences | Up to 1 year |
| Analytics Cookies | Understanding usage patterns, page views, and feature adoption (anonymised) | Up to 1 year |
Managing Cookies
- You can control or disable cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.
- Note: Disabling essential cookies may prevent certain features of the Platform from working correctly (e.g., staying logged in).
- We do not use advertising or behavioural tracking cookies. We do not serve targeted ads.
6. Data Storage & Security
6.1 Where We Store Your Data
- Your data is stored on secure servers hosted by reputable cloud service providers with data centres that comply with international security standards (ISO 27001, SOC 2).
- We endeavour to store data within India wherever feasible, in compliance with Indian data localisation guidelines.
6.2 Security Measures
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS).
- Encryption at Rest: Sensitive data stored in our databases is encrypted using AES-256 encryption.
- Authentication Security: We use Google OAuth 2.0 for authentication. We do not store any passwords — login is handled entirely through Google's secure infrastructure.
- Access Controls: Access to user data is restricted to authorised personnel only, on a need-to-know basis.
- Regular Security Audits: We conduct periodic security reviews and vulnerability assessments.
7. Data Retention
We retain your data only as long as necessary to fulfil the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Active account data | As long as your account remains active |
| Data after account deletion | Deleted within 90 days of your request, except where retention is required by law |
| Payment records | Retained for 8 years as required by Indian tax and accounting regulations |
| Support communications | Retained for up to 3 years after resolution for quality and legal purposes |
| Analytics data (anonymised) | Retained indefinitely in aggregated, non-identifiable form |
| Server logs | Automatically deleted after 90 days |
8. Your Rights
Under applicable Indian law, including the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you at any time.
- Right to Correction: You can update or correct inaccurate or incomplete personal data through your account settings, or by contacting us.
- Right to Withdrawal of Consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing done prior to the withdrawal.
- Right to Deletion: You can request the deletion of your account and associated personal data. We will process your request within 90 days, subject to any legal retention requirements.
- Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format (e.g., JSON or CSV).
- Right to File a Grievance: If you are dissatisfied with how we handle your data, you may file a complaint with our Grievance Officer (see Section 12 below).
How to Exercise Your Rights
To exercise any of these rights, email us at support@walkindrive.com with the subject line "Privacy Request — [Your Right]". We will respond within 30 days of receiving your request.
9. Children's Privacy
- WalkinDrive is designed for users who are 18 years of age or older, or who have the consent of a parent or legal guardian.
- We do not knowingly collect personal data from children under the age of 18 without parental consent.
- If we become aware that we have inadvertently collected personal data from a child under 18 without appropriate consent, we will take steps to delete that information promptly. If you believe we have collected such data, please contact us immediately.
10. Third-Party Links & Services
- Our Platform contains links to employers' official career portals and other external websites. These links are provided for your convenience and information only.
- We are not responsible for the privacy practices, content, or data collection policies of any third-party website.
- When you click on an external link (such as an employer's "Apply" button), you leave our Platform and are subject to that website's privacy policy.
- We encourage you to review the privacy policies of any third-party website before submitting personal information.
11. Changes to This Privacy Policy
- We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will update the "Last Updated" date at the top of this page.
- Material Changes: If we make significant changes that affect how we handle your personal data, we will notify you via email to your registered email address at least 15 days before the changes take effect.
- Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.
- We recommend reviewing this page periodically to stay informed about how we protect your data.
12. Grievance Officer
In compliance with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have appointed a Grievance Officer to address your privacy concerns:
Grievance Officer
Email: support@walkindrive.com
Response Time: We will acknowledge your grievance within 48 hours and aim to resolve it within 15 business days.
Address: Hyderabad, Telangana, India
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
- Email: support@walkindrive.com
- Location: Hyderabad, Telangana, India
- Website: www.walkindrive.com