Privacy Policy

Who we are

Bodhiyo is a hiring platform operated by Heuristech Innovation Labs Private Limited, a company registered in India with its office at FL-701, Bldg-A, Gold Coast Co-op Hsg Soc Ltd, Baner Road, Pune, Maharashtra 411008, India. For the purposes of Indian data protection law, we are the Data Fiduciary for the personal data described in this policy.

This policy covers employers and their team members who use the Platform to post jobs, discover candidates and communicate with them. Candidates and workers using Bodhiyo are covered by the policy shown in the worker app.

Information we collect

Information you give us

• Account details: your mobile number (used to log in with a one-time password), your name and, optionally, your email address.
• Business details: company name, company type, city, state, area and pincode.
• Job posts: role titles, descriptions, responsibilities, skills, experience, pay, work location and other details you add to a job.
• Messages: the conversations you have with candidates on the Platform.
• Support requests: information you share when you contact us for help.

Information created when you use the Platform

• Subscription and billing records: your plan, validity period, usage counts (such as candidate conversations and discoveries), order and payment IDs, amounts, invoice numbers and GST details.
• Activity on the Platform: candidates you view, shortlist or contact, job status changes and similar actions needed to run the service.
• Technical data: IP address, browser and device type, log data and the pages you visit, collected for security, troubleshooting and analytics.
• Cookies: see the Cookies section below.

Information we do not collect

We do not collect or store your card, UPI or bank account details. Payments are processed directly by our payment partner, Razorpay, on their secure systems.

How we use your information

We use personal data only for clear, lawful purposes, namely to:

• create and secure your account, and verify your mobile number with a one-time password;
• publish your job posts and show them to relevant candidates;
• recommend suitable candidates for your jobs using our AI matching (see below);
• let you search, shortlist and communicate with candidates;
• process payments, activate plans, track plan usage and issue GST invoices;
• send you service messages, such as OTPs, payment confirmations and important account updates;
• respond to support requests and improve the Platform;
• detect, prevent and investigate fraud, misuse and security incidents; and
• meet our legal, tax and regulatory obligations.

We do not sell your personal data.

AI candidate matching

To recommend candidates, our systems compare the requirements in your job post with information in candidate profiles. We use trusted AI service providers, including Google, to help process this information. Only the information needed to produce recommendations is shared, and it is used solely to provide the service to you.

Recommendations are suggestions to help you hire faster. Hiring decisions are always yours, and you should review each candidate yourself.

How we share information

We share personal data only in these situations:

• With candidates: your company name, job details and the messages you send are shown to the candidates you post jobs for or contact.
• With service providers who process data on our behalf under contract, only as needed to run the Platform. These include Razorpay (payments), Twilio and Meta WhatsApp (OTP and service messages), Amazon Web Services (hosting and file storage), Google (maps and location, AI services, advertising measurement), Firebase (notifications) and our database and hosting providers.
• For legal reasons: when required by law, court order or a government authority, or to protect the rights, safety and property of our users, the public or us.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, subject to this policy continuing to protect your data.

Cookies and similar technologies

We use a small number of cookies and similar technologies:

• Essential cookies keep you logged in securely. The Platform does not work without them.
• Advertising and measurement cookies from Google help us understand how people find us and measure how well our ads work.

You can block or delete cookies in your browser settings. If you block essential cookies you will not be able to stay logged in.

How long we keep your information

We keep personal data for as long as your account is active and as long as needed for the purposes described in this policy.

Billing, invoice and tax records are kept for the period required under Indian tax and accounting laws, even after your account is closed. When data is no longer needed, we delete or anonymise it.

How we protect your information

We use reasonable security practices to protect your data, including encrypted connections (HTTPS), secure login with one-time passwords, access controls that limit who can see data, and secure, access-controlled storage for files.

No system is completely secure. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

Your rights and choices

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it is used;
• Correct and update your data. You can edit most details yourself from your Profile page;
• Erase your data and close your account, except where we must keep certain records by law;
• Withdraw consent for processing that relies on consent. This does not affect processing already carried out;
• Nominate another person to exercise your rights in case of death or incapacity; and
• Raise a grievance with us, and then with the Data Protection Board of India if it is not resolved.

To exercise any of these rights, contact us at bodhiyo@heuristech.io. We may need to verify your identity before acting on a request.

Children

The Employer Platform is meant for businesses and individuals who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and for significant changes we will notify you on the Platform or by other means. Continuing to use the Platform after an update means you accept the updated policy.

Contact and grievance officer

If you have questions or concerns about this policy or how we handle your data, please contact us:

• Email: bodhiyo@heuristech.io
• Grievance Officer: Mayank Prakash, Chief Product Officer, mayank@heuristech.io
• Address: Heuristech Innovation Labs Private Limited, FL-701, Bldg-A, Gold Coast Co-op Hsg Soc Ltd, Baner Road, Pune, Maharashtra 411008, India

We aim to acknowledge grievances within 48 hours and resolve them within the time required by law.