Privacy Policy
Aapta (entity name pending registration) · Last updated 1 September 2026 (draft)
Section 5(3) of the Digital Personal Data Protection Act, 2023 gives you the right to read this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
Available today: English and Hindi. Hindi is 1 of the 22 Eighth Schedule languages — the remaining 21 are being added.
What we collect, and why
Account basics — your name, email address, and password (stored only as a hash). Purpose: creating and securing your account.
Profile information you choose to add — headline, summary, phone, location, experience, education, skills, résumé, photos. Purpose: the profile you show to employers, colleges, and people you connect with. Sensitive academic fields (like GPA) stay hidden unless you explicitly share them.
Identity verification you opt into — Aadhaar/PAN document checks, verified ID photo, income documents. Purpose: your verified trust passport. We store outcomes and masked identifiers (like last-4 digits), never full Aadhaar numbers or biometrics.
Messages and calls — private conversations in Circle are end-to-end encrypted: we store only ciphertext we cannot read. Calls are peer-to-peer encrypted; we relay only connection signaling.
Usage and device information — log-ins, IP addresses, device identifiers, and activity events. Purpose: security (like new-device alerts and brute-force lockouts), fraud prevention, and improving recommendations.
Exam proctoring data, when you take a proctored exam — webcam snapshots, browser events, and analysis results. Purpose: exam integrity, disclosed before every exam.
Your rights (Digital Personal Data Protection Act, 2023)
Access: request a complete export of your personal data from your Privacy page. We deliver within 30 days.
Erasure: request deletion; personal identifiers are irreversibly redacted, with a 7-day grace period to change your mind and a completion report when done. Some records are retained where the law requires (payments, audit trails) — the erasure report lists exactly what.
Correction: edit your profile data directly at any time.
Grievance: see our Grievance page for the officer's contact and the response timelines we follow.
Who sees your data
Employers and colleges see what your visibility settings allow. Operational data they create about you (notes, scorecards) is theirs; our export tells you which organizations received your data so you can approach them directly.
We do not sell personal data. We use self-hosted AI for platform features — your documents are not sent to third-party AI providers.
Security
Passwords hashed; two-factor authentication available; login anomaly alerts; encrypted storage for OAuth tokens; end-to-end encryption for private messages with user-verifiable safety numbers; uploads virus-scanned and validated.
Contact
Questions about this policy or your data: use the Grievance page, or write to the address published there.
Yogya
A professional hiring marketplace with verified candidates, secure exams, and enterprise-ready workflows.
Built for large hiring teams, multi-level approvals, secure assessments, and high-volume candidate discovery.