EazyHire Privacy Policy

1. Who This Policy Applies To

This Policy may apply to:

• recruiters;
• organization owners;
• administrators;
• hiring managers;
• interviewers;
• recruitment coordinators;
• candidates and applicants;
• authorized workspace users; and
• individuals communicating with EazyHire.

2. Our Role

Depending on the processing activity, Eazyway may process personal data for its own purposes or process information on behalf of an organization using EazyHire.

For example, Eazyway generally determines processing necessary for account administration, platform security and operation.

An employer using EazyHire may independently determine why candidate information is processed as part of its recruitment process.

3. Information We Collect

Account information

We may collect:

• first and last name;
• business email address;
• mobile number;
• authentication credentials;
• organization;
• job title;
• workspace membership;
• role and permissions.

For the exact signup page shown, this means the first name, last name, work email, mobile number and authentication credentials entered during account creation.

Authentication information

If you use Google, Microsoft or another identity provider, we may receive identifiers and profile information necessary to authenticate you, according to the permissions presented during authentication.

Organization information

We may collect:

• company name;
• business contact information;
• company profile;
• organization identifiers;
• workspace settings;
• recruitment preferences; and
• verification information where required.

Recruitment information

Information processed through EazyHire may include:

• job postings;
• candidate profiles;
• resumes/CVs;
• contact information;
• employment history;
• education;
• skills;
• applications;
• recruitment stage and status;
• recruiter notes;
• interview information;
• assessment information;
• feedback;
• hiring decisions;
• offers; and
• related communications.

Usage and technical information

We may collect information such as:

• IP address;
• device/browser information;
• login activity;
• timestamps;
• pages/features accessed;
• security events;
• audit records;
• error information; and
• interaction with platform functionality.

4. Why We Process Personal Data

We may process personal data to:

• create and administer accounts;
• authenticate users;
• establish organization workspaces;
• provide recruitment functionality;
• manage applicants and recruitment pipelines;
• facilitate collaboration;
• schedule interviews;
• provide assessments and offers where available;
• deliver notifications;
• secure accounts and prevent unauthorized access;
• maintain audit trails;
• detect abuse or fraud;
• provide support;
• diagnose technical problems;
• improve reliability and performance;
• comply with applicable law;
• resolve disputes; and
• provide AI-assisted functionality where applicable.

We will not process personal data for an incompatible purpose merely because the data is technically available to us.

5. Mobile Number

The signup screen explains that the mobile number is used to protect the account and for time-sensitive interview alerts.

We may therefore use a mobile number for:

• account security;
• verification;
• security notifications; and
• time-sensitive recruitment/interview notifications where appropriate.

Marketing communication, if introduced, should be handled separately with the appropriate preference/consent mechanism.

6. Cookies and Similar Technologies

EazyHire may use cookies or similar technologies necessary for:

• authentication;
• session management;
• security;
• preferences;
• service operation; and
• analytics where applicable.

Where consent is legally required for non-essential technologies, appropriate consent controls should be provided.

A separate Cookie Policy may be published if the deployment uses analytics, advertising or other non-essential tracking technologies.

7. AI and Automated Processing

Where EazyHire offers AI-assisted recruitment features, personal data may be processed to provide functions such as matching, ranking, summarization or recommendations.

8. How We Share Information

Personal data may be shared with:

• authorized members of the relevant organization;
• infrastructure and cloud providers;
• authentication providers;
• communication providers;
• security providers;
• analytics/service providers;
• recruitment integration partners;
• professional advisers; and
• authorities where disclosure is legally required.

Service providers should receive only information reasonably necessary to perform their functions and should be subject to appropriate contractual safeguards.

We do not sell personal data.

9. Data Isolation and Access

EazyHire uses organization/workspace access controls intended to restrict access to authorized users.

Organizations are responsible for appropriately assigning user permissions.

Eazyway personnel should access customer information only where required for legitimate operational, security, support or legal purposes and subject to appropriate controls.

10. Data Security

We use reasonable technical and organizational safeguards designed to protect personal data.

These may include, as applicable:

• access controls;
• authentication controls;
• authorization and role-based permissions;
• encryption;
• secure communications;
• audit logging;
• database controls;
• monitoring;
• backup and recovery mechanisms; and
• vulnerability and security management.

No internet-based service can guarantee absolute security.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and as required by applicable contractual, security and legal obligations.

Retention periods may differ for:

• account information;
• candidate records;
• recruitment history;
• security/audit records;
• transactional records;
• backups; and
• legally required records.

12. Account Deletion

Where applicable, individuals may request deletion of their account or personal data.

Some information may need to remain where retention is necessary for:

• legal compliance;
• establishment or defence of legal claims;
• security;
• fraud prevention;
• contractual obligations; or
• maintaining integrity of legitimate historical/audit records.

Deletion of a user account therefore may not necessarily mean deletion of every historical business record associated with that user.

13. Your Privacy Rights

Subject to applicable law and the circumstances of processing, individuals may have rights concerning their personal data, including rights to obtain information about processing, request correction or updating, request erasure where applicable, and use available grievance mechanisms.

Because India's DPDP provisions are entering force according to the government's staged commencement schedule, the production implementation should map the rights workflow to the provisions applicable on the relevant date. — MeitY

14. Consent and Withdrawal

Where processing relies on consent, individuals should be able to withdraw that consent as required by applicable law.

Withdrawal does not necessarily invalidate processing lawfully performed before withdrawal.

Some EazyHire functionality may be unavailable where information is necessary to provide the requested service.

15. Candidate Requests

Where candidate information is controlled by an employer using EazyHire, we may direct a candidate to the relevant organization or assist that organization in responding to the request, depending on the applicable legal and contractual roles.

16. Children's Data

EazyHire's recruiter service is intended for professional/business use and is not intended for children to create recruiter accounts.

The broader Eazyway ecosystem should separately address any product that intentionally processes children's personal data.

17. International Processing

EazyHire or its service providers may process information using infrastructure located in different jurisdictions.

Where cross-border processing occurs, Eazyway will apply safeguards required by applicable law.

18. Data Breaches

We maintain processes for investigating and responding to personal-data security incidents.

Where notification is legally required, we will provide notifications to affected parties and/or relevant authorities as required by applicable law.

The DPDP Rules include security and breach-related requirements whose substantive commencement follows the government's notified timetable, so EazyHire's incident-response architecture should be designed ahead of those effective dates. — MeitY

19. Grievance and Privacy Contact

Questions, complaints and privacy requests may be submitted to:

• Privacy / Grievance Contact
• eazyway Corporate Consulting Private Limited
• Email: [privacy@eazyway.io]
• Address: [Registered Office Address]

20. Changes to This Privacy Policy

We may update this Policy when our services, technology or legal obligations change.

When changes are material, we will provide appropriate notice and obtain fresh consent where legally required.