CareHire Privacy Policy
Your resume is one of the most personal documents you will ever put online. It has your address, your photograph, your date of birth, your qualifications, your registration number and your entire career in it. This policy explains what Caresoft Systems Private Limited ("CareHire", "we") does with it.
The three things people most want to know:
1. We do not sell your data. Not to recruiters, not to training institutes, not to loan companies, not to anyone.
2. An employer sees your full Profile when you apply to them, or when you have chosen to make your Profile searchable.
3. You can hide or delete your Profile at any time, and we will tell you honestly what that does and does not undo.
ℹ️ 1. Who is responsible for what
Welcome to CareHire. CareHire is a healthcare-focused recruitment and employment platform operated by Caresoft Systems Private Limited, having its registered office at 311, Mahesh Industrial Estate, Silver Park, Mira Road East.
| Data | CareHire | Employer |
|---|---|---|
| Your account and Profile on CareHire | Data Fiduciary / Controller | — |
| Your Profile after you apply to an employer | Controller of our copy | Independent controller of theirs |
| Employer account and Listings | Controller | — |
| Website visitors | Controller | — |
This is the most important thing on the page. Once an employer receives your application, they hold your data in their own right, under their own policy and their own obligations. If you later delete your CareHire Profile, that does not delete the copy the employer already has. To have that removed, you must contact the employer directly. We will help you identify who to contact.
2. What we collect
2.1 From Job Seekers
- Identity and contact — name, photograph (optional), mobile number, email, city and locality, date of birth or age.
- Professional — qualification and specialisation, institution, year of passing, council or board registration number and state, licence validity, years of experience, current and previous employers, designation, department and speciality, shift preference, notice period, current and expected salary.
- Documents — resume, certificates, registration documents and any file you upload.
- Activity — jobs viewed and saved, applications sent, status of each, messages exchanged through the Platform.
- Technical — device, browser, IP address, approximate location derived from it, and cookies (§19).
2.2 From Employers
Organisation name, registration and address, GSTIN, contact person's name, designation, email and phone, verification documents, Listings, plan and billing records, and activity on the Platform.
3. Sensitive information
Please do not upload documents you do not need to. Resumes in India often carry identity numbers, category or caste details, marital status, family information, health details and photographs of original certificates. Very little of that is needed to get a job, and all of it increases what you lose if a document is misused.
We ask only for what a healthcare employer genuinely needs. If a field is optional, it is genuinely optional, and leaving it blank will not disadvantage your application.
- We do not require, and ask you not to upload, government identity documents such as Aadhaar or PAN. An employer may request them after selection, directly, outside the Platform.
- We do not ask for caste, religion, community or marital status, and Employers may not filter or discriminate on those grounds (Terms §10).
- We do not ask for health information. Any pre-employment health requirement is a matter between you and the employer, after an offer.
- If you have uploaded something you would rather not have, delete it from your Profile and tell us at [email protected].
4. Who can see your Profile
| Setting | Who sees your full Profile |
|---|---|
| Private (default) | Only employers you apply to |
| Searchable (you switch it on) | Verified employers with an active plan may find your Profile in candidate search and contact you |
| Hidden | Nobody. Existing applications remain with the employers who received them |
- You can change this at any time, and changes take effect immediately for new views.
- Only verified employers with an active plan can use candidate search. Unverified accounts cannot search or view Profiles at all.
- Employer searches are logged. We monitor for bulk viewing, scraping and other misuse (§18).
- You can block a specific employer from seeing your Profile — useful if you do not want your current employer to know you are looking.
5. What happens when you apply
- Your Profile and any documents you attached are delivered to that employer.
- The employer can see, download and store them from that point on.
- We record the application and its status so you can track it.
- The employer may contact you directly using the details in your Profile.
An application cannot be un-sent. You can withdraw an application on the Platform, which tells the employer you are no longer interested and removes it from their active list — but it does not delete what they have already downloaded. That is why §1 matters.
6. What employers must do with your data
Every employer accepts binding obligations before they can receive an application (Terms §13). They must:
- use your data only to assess and contact you for the role you applied to, or a closely comparable role at their organisation;
- never sell it, publish it, share it with third parties or add it to a commercial database;
- never use it for marketing or to sell you courses, loans, visas or coaching;
- keep it secure, restrict access to those involved in hiring, and delete it when it is no longer needed;
- comply with their own obligations as a data fiduciary.
If an employer contacts you for something other than the job, or passes your details to someone else, tell us at [email protected]. We investigate, and we remove employers who misuse candidate data.
7. We do not sell your data
CareHire does not sell, rent, licence or trade candidate data. We do not supply bulk candidate lists. We have no advertising business and we do not share your data with advertisers or data brokers.
Employers pay for access to the Platform — to post vacancies and to search candidates who have chosen to be searchable. They do not buy a database, and they cannot export one.
8. Employer and recruiter data
Employer contact details are used to operate the Platform, verify the organisation, provide support, bill the account, and — with consent — send product updates. Verification documents are held for the life of the account plus the retention period in §14, and are available to our compliance team and to authorities under valid legal process.
9. Why we process it
- To create and operate your account and Profile.
- To show you relevant vacancies and to deliver your applications.
- To let verified employers find candidates who have chosen to be searchable.
- To verify employers before they post, and to investigate reports of fraud or misuse.
- To send job alerts and service messages (§11).
- To provide support and resolve disputes.
- To improve matching, search and the Platform generally, using aggregate patterns.
- To keep the Platform secure and prevent abuse.
- To meet legal obligations, including mandatory log retention and incident reporting.
- To bill employers.
10. Lawful basis
We process on the basis of your consent, given when you create an account and provide your Profile, and for the certain legitimate uses permitted under the Digital Personal Data Protection Act, 2023 — including where you voluntarily provide data for a specified purpose. Delivering your Profile to an employer you apply to is the purpose for which you gave it. Marketing and searchable visibility are separate consents you control and can withdraw.
11. Messages you will receive
- Service messages — account, security, application status and employer responses, by email, SMS or WhatsApp. These continue while your account is active.
- Job alerts and marketing — only with consent, switchable off at any time from settings or via the opt-out in the message.
- Employers may contact you directly using your Profile details. They must not send you promotional messages, and repeated unsolicited contact is grounds for their suspension.
- We never ask for payment, passwords or OTPs by message. Any message claiming to be from CareHire and asking for money is fraudulent.
12. Sharing
- Employers — as described in §4 and §5.
- Service providers — hosting, email and messaging delivery, payment processing, and support tooling, each under written confidentiality and security obligations. Listed at /subprocessors.
- Authorities — where compelled by valid legal process, or where we report suspected recruitment fraud. We assess each request, disclose the minimum required, and notify you unless prohibited.
- Corporate transactions — in a merger or sale of assets, subject to equivalent protection and notice to you.
- Nobody else.
13. Where data is held
Data is stored and processed within India, including backups. Support and engineering access is from India. Where an employer outside India receives an application you sent them, your data goes to that country as a consequence of your application — see Terms §11 on overseas roles, and consider carefully before applying to an overseas recruiter you have not verified.
14. How long we keep it
| Data | Retention |
|---|---|
| Your Profile and account | While your account is active. Deleted within [30] days of account deletion |
| Inactive accounts | We notify you after [24] months of inactivity and delete after a further [60] days unless you sign in |
| Application records | [24] months from application, so you can see your history |
| Messages sent through the Platform | [24] months |
| Employer accounts, Listings and verification documents | Life of the account plus [3] years — needed if a fraud complaint arises later |
| Fraud and misuse investigation records | [5] years, or longer where a proceeding is open |
| Billing, tax and accounting records | Up to 8 years as required by Indian tax law |
| System logs required by law | Minimum 180 days, held in India |
| Backups | Rolling [35] days |
15. Security
Encryption in transit and at rest; passwords stored as salted and peppered one-way hashes; role-based access with multi-factor authentication for administrative accounts; document storage separated from the public application; rate limiting and bot protection on search and Profile views; monitoring for bulk access and scraping; no production data in development or test environments; vulnerability scanning and periodic penetration testing; and a documented incident response plan.
Protect your own account: use a strong unique password, never share your OTP, and sign out on shared devices.
16. If something goes wrong
- We notify affected users of a personal data breach without undue delay, and in any event within [24] hours of confirmation, with what happened and what to do.
- We are required to report specified cyber incidents to CERT-In within 6 hours, and to retain system logs for a minimum of 180 days within India. These override conflicting deletion requests to the extent the law requires.
- We notify the Data Protection Board of India where required, preserve evidence, and provide a written root cause analysis within [10] working days.
17. Your rights and controls
17.1 In the product
- Edit any part of your Profile, or remove a document, at any time.
- Switch Profile visibility between private, searchable and hidden.
- Block a specific employer from seeing your Profile.
- Withdraw an application.
- Turn job alerts and marketing off.
- Download your data.
- Delete your account.
17.2 Legal rights
Subject to applicable law you may request access, correction, erasure, a portable copy, and withdrawal of consent, and may nominate someone to act for you. Write to [email protected]; we verify identity and respond within 30 days.
What deletion does and does not do. Deleting your account removes your Profile, documents and searchability from CareHire. It does not retrieve applications already delivered to employers, and it does not delete records we must keep — fraud investigation records, billing records, and logs required by law. We will tell you specifically what is retained and why.
18. Fraud, misuse and enforcement
We actively monitor for misuse of candidate data — bulk Profile viewing, scraping, automated access, exporting beyond normal recruitment activity, and contact patterns that suggest data has been passed on.
- Employers found misusing candidate data are suspended immediately and permanently removed.
- Employers demanding money from candidates are removed and reported to the appropriate authorities.
- We preserve records of such conduct for [5] years and cooperate fully with law enforcement.
- Where your data may have been misused, we will tell you what we know.
Report anything suspicious to [email protected]. Reports are acknowledged within [24] hours.
19. Cookies
We use strictly necessary cookies for sign-in, session management and security; functional cookies for your preferences; and analytics cookies with your consent where required. Non-essential cookies are set only after you accept, and you can change your choice at any time. Full detail is in our Cookie Policy.
20. Age
CareHire is for adults aged 18 and over. We do not knowingly collect data from children and do not carry out tracking or targeted advertising directed at children. If you believe a minor has registered, tell us at [email protected] and we will remove the account.
21. Contact and Grievance Officer
Grievance Officer (Information Technology Act, 2000; Digital Personal Data Protection Act, 2023)
Name: Rajeecv Pillai
Address: 311, Mahesh Industrial Estate , Silver Park, Mira Road East , Thane -401107.
Acknowledgement within 24 hours; resolution within 15 days.
You may complain to the Data Protection Board of India if you are dissatisfied with our response.
Caresoft Systems Private Limited, 311, Mahesh Industrial Estate , Silver Park, Mira Road East , Thane -401107 , CIN U72900MH2022PTC387875 .
22. Changes
We may update this policy. The version date will change. Material changes are notified at least [15] days in advance by email and in the product. Any change to §4, §6 or §7 will be notified prominently and in advance — those sections are the substance of the promise.