Privacy Policy

1. Who we are and how to contact us

Kryon Jobs is operated by the company that owns and runs the Kryon Jobs service, incorporated in India. Our full corporate identity and registered address are available on request from the contact below. For the personal data described in this policy, we are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller under the UK and EU General Data Protection Regulation where that law applies to you.

2. Scope of this policy

This policy covers personal data we handle when you use the Kryon Jobs website, web application, mobile application, and APIs. It does not cover how an employer handles your data after they receive it through the platform, which is explained in section 7, or how third-party sites we link to handle your data.

3. Information we collect

• Account details - name, email address, phone number, password (stored only as a one-way hash), and the role you register under.
• Candidate profile - location, work experience, skills, education, summary, job preferences, expected salary, notice period, and profile photo.
• Resumes and documents - resume files or links, identity records, certificates, and experience letters you upload for verification.
• Employer details - company profile, logo, industry, locations, job postings, and hiring team members.
• Activity data - jobs you view, save, and apply to, application status changes, interview invitations and responses, and support requests.
• Social login data - if you sign in with Google, LinkedIn, or GitHub, we receive your name and verified primary email address from that provider. We never receive your password for those accounts.
• Technical data - session identifiers, IP address, browser and device type, and timestamps.

Some of this is sensitive personal data or information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, in particular your password and any identity document you upload. We collect it only with your consent and only for the purposes in section 4.

We do not ask you for data about your race, religion, caste, health, sexual orientation, political opinions, or trade union membership, and you should not include it in your profile or documents. If you choose to include it, you consent to us storing and transmitting it as part of that document.

4. Why we use your information, and our legal basis

We use your information for the purposes below. Where the GDPR applies to you, the legal basis for each purpose is shown in brackets.

• Create and secure your account, authenticate you, and reset your password. [performance of a contract]
• Build your candidate profile and make it available to employers you apply to. [performance of a contract]
• Publish, moderate, and search job postings. [performance of a contract]
• Process applications, schedule interviews, and share status updates. [performance of a contract]
• Verify documents and company details so users can trust one another. [legitimate interests, being the integrity of the marketplace; consent for the sensitive documents you upload]
• Send notifications about applications, interviews, and account activity. [performance of a contract]
• Suggest jobs to you and surface candidate profiles to employers, as described in section 9. [legitimate interests, being the usefulness of the service; you may object at any time]
• Respond to support requests and investigate misuse, fraud, or security incidents. [legitimate interests, being the security of the platform and its users]
• Produce aggregate analytics that do not identify individuals. [legitimate interests, being service improvement]
• Meet legal, tax, audit, and regulatory obligations, and respond to lawful requests. [legal obligation]

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not use your resume or documents for advertising.

5. Consent and withdrawal

Where we rely on your consent, in particular for the identity documents and certificates you upload, that consent is free, specific, informed, and unconditional, and you give it by an affirmative action when you upload the document or tick a consent box.

You may withdraw consent at any time by deleting the relevant document from your workspace or by writing to support@kryonjobs.com. Withdrawal does not affect processing carried out before withdrawal. Where the data is necessary to provide a feature, withdrawing consent may mean we can no longer provide that feature to you.

6. When we share information

• With employers you apply to. When you apply for a job, the employer receives your profile, the resume you selected for that application, and your application history for that role. Employers with an active subscription may also search candidate profiles that are set to be discoverable.
• With processors acting on our instructions. Microsoft Azure for hosting, database, and file storage; an SMTP provider for transactional email; and, where enabled, an SMS provider. They process data only on our documented instructions and under a written contract.
• With platform administrators. Our administrators can access account and moderation data to review jobs, resolve grievances, and enforce our Terms and Conditions.
• For legal reasons. Where required by law, by a court order, or by a lawful request from a government agency, or where necessary to establish, exercise, or defend legal claims, or to protect the rights and safety of our users.
• On a business transfer. If we merge, are acquired, or sell assets, your data may transfer to the acquirer, who will remain bound by this policy or give you notice of any change.

7. Employers are independent controllers

Once an employer receives your application, that employer decides for itself how it uses your data, and it becomes an independent data fiduciary or controller. We are not responsible for what an employer does with your data after that point, and their own privacy notice applies.

Our Terms and Conditions require employers to use candidate data only to evaluate you for the role, to keep it secure, and to delete or return it when their purpose ends. If you believe an employer has misused your data, tell us at support@kryonjobs.com and we will investigate and may suspend their account, but you may also need to exercise your rights directly against that employer.

8. Resumes, documents, and verification

Resumes, identity records, certificates, profile photos, and company logos are stored in a private Azure Blob Storage container. They are not publicly listable and are served only through authenticated application routes.

Verification status is recorded as metadata against your profile so employers can see whether a document has been reviewed, without needing a copy of the underlying file. You can replace or remove a document from your workspace at any time.

9. Automated processing and job matching

We use a simple automated score to order the jobs we suggest to you, based on how your skills, location, and experience compare with a posting. We use similar logic to list candidate profiles for employers. This ordering affects what you see first; it does not decide whether you are shortlisted, interviewed, or hired, and it does not restrict your ability to search for and apply to any published job.

We do not carry out automated decision-making that produces legal or similarly significant effects on you within the meaning of Article 22 of the GDPR. Hiring decisions are made by employers, not by us or by this scoring. You may object to this processing at any time by writing to support@kryonjobs.com.

10. Where your data is stored and transferred

We host the platform and store uploads in data centres operated by our cloud infrastructure provider, Microsoft Azure. Our email and SMS providers, and the social login providers you choose to use, may process limited data outside that region, including in the United States and the European Union.

Where we transfer personal data out of the UK or the European Economic Area, we rely on an adequacy decision where one applies, and otherwise on the Standard Contractual Clauses approved by the European Commission or the UK International Data Transfer Addendum, together with the additional measures those clauses require. You may request a copy of the safeguards we use by writing to support@kryonjobs.com. Transfers out of India are made only to jurisdictions not restricted by the Central Government under the Digital Personal Data Protection Act, 2023.

11. Cookies and third-party resources

The browser portal uses a session cookie to keep you signed in and a CSRF token cookie to protect form submissions. Both are strictly necessary, are marked HTTP-only, and expire when your session ends or after the session timeout. The REST API uses bearer tokens rather than cookies. We do not use advertising or cross-site tracking cookies, and we do not run analytics that profile you across other websites.

Our pages load fonts and script libraries from third-party content delivery networks, currently Google Fonts, jsDelivr, and unpkg. When your browser fetches those files, your IP address and browser details are sent to those providers under their own privacy terms. We do not control that, and we do not receive any profile from them. If this concerns you, a content blocker or a browser configured to block third-party requests will prevent it, and the platform will continue to work with reduced styling.

12. Email and SMS communication

We send transactional messages necessary to run your account, including password reset codes, application updates, and interview invitations. These are not marketing messages, and they cannot be turned off while your account is active because they carry information you need. We will not send you marketing email without your separate consent, and every marketing message will carry an unsubscribe link.

Where SMS notifications are enabled, your phone number is shared with our SMS provider solely to deliver that message.

13. How long we keep your data

• Account and profile data - for as long as your account is active, and for 90 days after you close it, to allow recovery and to handle disputes.
• Resumes and uploaded documents - until you delete them, or 90 days after account closure, whichever is earlier.
• Applications and interview records - for 3 years from the close of the application, so that both parties can evidence the process if a dispute arises.
• Invoices and payment records - for 8 years, as required by tax and companies legislation.
• Security and access logs - for 180 days, in line with the Information Technology Act, 2000 and rules made under it.
• Grievance records - for 3 years from resolution.

Routine backups are overwritten on a rolling cycle of not more than 90 days. When a retention period ends we delete the data or irreversibly anonymise it.

14. How we protect your data

• Passwords are stored using a one-way hash and are never readable by us or by employers.
• Traffic to the platform is served over HTTPS, and connections to our database use TLS.
• Access is controlled by role, so candidates, employers, and administrators reach only the data their role permits.
• Uploads are stored in a private container and served through authenticated routes.
• We keep access logs and review administrator access.

These are the reasonable security practices we maintain for the purposes of section 43A of the Information Technology Act, 2000. No online service can guarantee absolute security. Please use a strong, unique password and tell us immediately if you believe your account has been accessed without your permission.

15. Personal data breaches

If a personal data breach occurs, we will notify the Data Protection Board of India and each affected user without delay, in the form and manner required by the Digital Personal Data Protection Act, 2023. Where the GDPR applies, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach where the law requires it, and will inform affected individuals without undue delay where the breach is likely to result in a high risk to their rights.

16. Your rights and choices

Subject to the law that applies to you, you may:

• Ask for confirmation of what we hold about you and obtain a copy of it.
• Correct or complete information that is inaccurate. Most of this you can edit directly in your profile.
• Ask us to erase your data and close your account.
• Object to, or ask us to restrict, processing based on our legitimate interests, including the matching described in section 9.
• Receive the data you gave us in a portable, machine-readable form.
• Withdraw consent, as described in section 5.
• Nominate another person to exercise your rights in the event of your death or incapacity, as provided by the Digital Personal Data Protection Act, 2023.
• Disconnect a social login, which stops us receiving further data from that provider.

Write to support@kryonjobs.com to exercise any of these. We will respond within 30 days. We may need to verify your identity first, and we may refuse a request that is manifestly unfounded or excessive, or where the law requires us to keep the data, in which case we will tell you why.

These rights apply to us. Where an employer already holds your data, you may also need to exercise them against that employer, as explained in section 7.

17. Children's data

The platform is for users aged 18 and over. We do not knowingly collect personal data from children. If we learn that we hold data about a person under 18, we will delete it and close the account. We do not carry out tracking, behavioural monitoring, or targeted advertising directed at children.

18. Grievance redressal and complaints

If you are unhappy with how we have handled your data, contact our Grievance Officer at support@kryonjobs.com, marking your message for their attention. We will acknowledge within 24 hours and respond within 15 days, as required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

If we do not resolve your complaint, you may escalate it to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. If you are in the UK or the European Economic Area, you may complain to your local supervisory authority, including the Information Commissioner's Office in the UK. You may do this without first complaining to us, although we would prefer the chance to put things right.

19. Changes to this policy

We may update this policy. The version number and effective date at the top of this page show when it last changed. Where a change is material, we will give notice in the application or by email before it takes effect, and where the change relies on your consent we will ask for that consent again.

20. Contact us

Privacy queries, rights requests, grievances, and general support: support@kryonjobs.com, or the Help center once you are signed in.

Your use of Kryon Jobs is also governed by our Terms and Conditions.