Legal · India DPDP Act
DPDP Compliance
1. Applicability
The DPDP Act governs processing of digital personal data in India. GoGrabJob, operated by Zykes Technologies LLP, acts as a Data Fiduciary when we determine the purpose and means of processing your personal data through our platform.
This notice supplements our Privacy Policy with India-specific information.
2. Personal data we process
- Identity and contact data (name, email, phone).
- Professional and employment-related data (resume, work history, skills, applications).
- Usage, device, and technical data necessary to operate the Service.
- Payment and subscription metadata (processed via licensed payment aggregators).
3. Consent and notice
We provide clear notice at sign-up and in this policy about what data we collect and why. Where the DPDP Act requires consent — for example, certain optional marketing or non-essential cookies — we obtain it separately and allow withdrawal as easily as giving consent.
For core service delivery (account, resume optimization, billing), processing is necessary to perform our contract with you.
4. Rights of Data Principals
Exercise your rights via Settings in your account or email [email protected]. We aim to respond within 30 days.
- Right to access information about personal data we process about you.
- Right to correction and erasure of inaccurate or outdated data.
- Right to grievance redressal through our designated contact.
- Right to nominate another individual to exercise your rights in the event of death or incapacity.
- Right to withdraw consent where processing is consent-based, without affecting prior lawful processing.
5. Children's data
We do not knowingly process personal data of children under 18 without verifiable parental consent as required by law. GoGrabJob is intended for job seekers who can enter a binding agreement.
6. Data security and breach
We implement reasonable security safeguards — encryption, access controls, and monitoring — appropriate to the nature of resume and account data we hold.
If a personal data breach affects you, we will notify the Data Protection Board of India and affected Data Principals as required by law.
7. Cross-border transfers
Some subprocessors may process data outside India. Where the DPDP Act restricts transfers, we comply with notified conditions and contractual safeguards.
8. Grievance redressal
Grievance Officer: [email protected]
We will acknowledge grievances within 24 hours and aim to resolve them within 30 days. If unresolved, you may approach the Data Protection Board of India under the DPDP Act.
10. Retention schedule (India)
- Account and resume data: while your account is active, plus up to 30 days after deletion.
- Payment records: as required by Indian tax and commercial law.
- Consent logs (cookies): up to 1 year.
11. Updates
We will update this page when our practices or DPDP rules change. Material changes will be communicated through the platform or email where appropriate.