Privacy Policy & Data Protection

1Data Collection & Purpose Specification

SS40 NETWORK PRIVATE LIMITED operates Global Talent Connect under strict purpose-limitation principles. We collect personal and professional data solely to facilitate technical skill assessment, cryptographic verification, and direct employer interview matching.

• Identity Data: Full legal name, verified email address, phone number, and location.
• Assessment & Vector Data: 20-MCQ evaluation scores, answered question telemetry, and weighted skill vectors.
• Professional Dossier: Resumes, experience history, salary expectations, and verified credentials.
• Authentication Records: FIDO2 WebAuthn biometric public key credentials and SHA-256 session tokens.

2Proctoring Security & Candidate Privacy

During candidate 20-MCQ evaluations, our anti-cheating mechanisms monitor tab focus, full-screen lock integrity, and randomized question delivery. We do not store biometric facial scans or record private ambient audio outside the proctored assessment window.

3Zero-Spam & Non-Sale of Personal Data

We do not sell, rent, or lease candidate or employer data to third-party marketing brokers. Candidate data is disclosed exclusively to verified enterprise employers when an autonomous match is generated or when a candidate explicitly applies for a vacancy.

4AES-256 Encryption & Infrastructure Storage

All data in transit is encrypted using TLS 1.3 with AES-256-GCM cipher suites. Inactive data is stored in partitioned SQLite databases running in WAL (Write-Ahead Logging) mode on private dedicated servers located in secure Indian and Tier-3 certified data centers.

5Data Subject Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection (DPDP) Act and international privacy frameworks, users retain rights to:

• Access a summary of their processed personal data and verified skill scorecards.
• Request rectification of inaccurate profile or contact records.
• Request complete erasure (Right to be Forgotten) of their account and historical test logs.
• Nominate a representative in the event of death or incapacity.

6Grievance Officer & Redressal Mechanism

For grievances, data subject requests, or privacy concerns, contact our designated Grievance Officer at privacy@ss40network.com. We acknowledge all requests within 48 hours and resolve them within 30 days as required by law.