DPDP 2023 & ISO 27001 Security Standard

Privacy Policy & Data Protection Protocol

Data Fiduciary: SS40 NETWORK PRIVATE LIMITED·Last Updated: August 21, 2026·Standard: Digital Personal Data Protection Act (DPDP)

AES-256 TLS Encryption

All data in transit is encrypted using TLS 1.3, and resting records are isolated with deterministic cryptographic hashes.

FIDO2 Hardware Passkeys

Hardware-bound biometric authentication (WebAuthn / Touch ID / Hello) ensuring zero plaintext password exposure.

Zero Data Monetization

We never sell, rent, or trade your personal candidate resumes, assessment results, or contact information to data brokers.

1Categories of Information Collected

In operating the global employment intelligence ecosystem, SS40 NETWORK PRIVATE LIMITED collects and processes only the information strictly necessary to facilitate verified talent assessment and employer matching:

Candidate Identity & Professional Data: Full name, verified email, telephone number, education credentials, skill competencies, portfolio URLs, resume text, and location preferences.
Assessment & Proctoring Telemetry: 20-MCQ skill assessment scores, time-per-question telemetry, technical proficiency levels, and competency certification timestamps.
Employer & Organizational Profile: Registered enterprise name, GST/CIN registration identifiers, verified corporate domains, recruiter contact profiles, job requirements, and compensation bands.
Security & Device Telemetry: Passkey public keys, session authentication tokens, IP addresses, and access timestamps recorded for tamper prevention and fraud detection.

2Purpose and Legal Grounds for Processing

We process your personal information pursuant to lawful, transparent bases under applicable data protection regulations:

Fulfillment of Service: To calculate 100-point candidate fit vectors against active employer job requirements.
Skills Upskilling Routing: To identify regional skill deficits and match candidates lacking specific competencies with accredited training partner cohorts.
Enterprise Security: To prevent identity theft, unauthorized account access, and assessment manipulation.
Legal & Regulatory Compliance: To maintain verified audit trails under national employment compliance frameworks.

3Disclosure & Information Sharing Safeguards

Candidate profile details, verified assessment grades, and resume summaries are shared exclusively with:

Verified Enterprise Employers: When a candidate applies for a vacancy or is matched via high-fit vector criteria.
Partner Academies: Only when a candidate explicitly opts in to join a targeted skill upskilling cohort.
Law Enforcement or Statutory Authorities: Strictly when mandated by a valid judicial court order or statutory legal obligation.

4Data Subject Rights (DPDP Compliant)

Under the Digital Personal Data Protection Act and international privacy frameworks, you retain full sovereignty over your personal data:

Right to Access & SummaryRequest a machine-readable export of all stored personal records and assessment histories.

Right to Correction & UpdateInstantly rectify inaccurate experience, contact info, or skill data via your Profile Hub.

Right to Erasure ("Right to be Forgotten")Request permanent deletion of your account and biometric passkey credentials.

Right of Grievance RedressalDirect escalation to our Data Protection Officer with guaranteed 48-hour acknowledgment.

5Data Retention & Storage Architecture

All data is stored in enterprise-grade SQLite 3 WAL clusters and cloud storage featuring automated cryptographic checksum verification. Inactive candidate accounts are retained for a maximum duration of 24 months, after which they are automatically anonymized or securely purged.

Data Protection Officer (DPO)

For data privacy requests, consent withdrawal, or DPDP compliance queries.

Email Data Protection Officer