Draft — Under Legal Review
These terms are currently under legal review and may change before the SteveGotJobs public launch.
DRAFT-2026-09-21
SteveGotJobs Privacy Notice Version: 1.0 — DRAFT FOR LEGAL REVIEW Effective date: [DATE] Data Fiduciary: [FULL LEGAL ENTITY NAME] Privacy contact: [PRIVACY EMAIL] SteveGotJobs is designed around a simple principle: information about your career should be used to help you, and information should not be sent to hiring parties merely because you created an account. This Privacy Notice explains what personal data SteveGotJobs processes, why we process it, how artificial intelligence is used, when information may be shared, and the choices and rights available to you. 1. Who Is Responsible for Your Personal Data? For the purposes of applicable Indian data-protection law, the entity responsible for the SteveGotJobs Service is: [LEGAL ENTITY] [REGISTERED ADDRESS] [PRIVACY EMAIL] [LAWYER: Confirm terminology and Data Fiduciary status under the Digital Personal Data Protection Act, 2023 and applicable Rules.] 2. Personal Data We May Process Depending on how you use SteveGotJobs, we may process the following categories. A. Identity and Account Information name; mobile number; email address; authentication identifiers; account identifier; authentication and account-security information. B. Candidate Profile Information location; current role; current or previous employer information; employment history; education; skills; qualifications; certifications; experience; professional interests; career preferences; work-location preferences; compensation expectations, if provided; availability; career aspirations. C. CV and Documents Information contained in documents you choose to provide, including CV or resume, employment history, education, professional qualifications, skills, achievements, projects, certifications, and other professional information contained in those documents. Please avoid including personal information that is unnecessary for career purposes. D. Career Interview and Conversation Information Where you use Steve's interview or conversational features, we may process your answers, career history discussed during the conversation, achievements and experiences, preferences, career objectives, questions you ask, corrections and feedback, and interview transcript or structured representations of the conversation. If audio recording or transcription is introduced, we will provide appropriate notice and obtain any consent required before activating that functionality. E. AI-Generated Career Intelligence Where you have provided the required AI-analysis consent, SteveGotJobs may generate structured observations or inferences concerning matters such as skills, strengths, professional experience, areas of expertise, career trajectory, preferences, aspirations, potential development areas, suitability for categories of roles, potential opportunity fit, and gaps or uncertainties requiring clarification. We aim, where appropriate, to distinguish AI-generated observations from candidate-provided or independently established facts. You may be given the opportunity to confirm, correct or reject important observations. F. Opportunity and Recruitment Information When you consider or pursue an opportunity, we may process opportunities shown to you, your interest or rejection, approval to contact a hiring party, candidate information approved for sharing, recruiter or hiring-manager responses, interview status, availability, interview scheduling information, recruitment-process status, candidate and hiring-side follow-ups, feedback, offers or process outcomes where known. G. Technical and Security Information We may process limited technical information required to operate and protect the Service, such as device/browser information, IP address, authentication events, security events, timestamps, application errors, and service logs. We seek to avoid placing CV contents, interview contents or other unnecessary candidate information into operational logs. 3. Why We Process Personal Data We process personal data for specified purposes including: Providing Your Account To authenticate you, create and maintain your SteveGotJobs account, secure your account, and restore your information when you return. Building Your Candidate Profile To store information you provide, maintain your career profile, store your CV and candidate documents, and allow you to review and update your information. AI-Assisted Career Analysis Where the required consent has been provided, to analyse candidate-provided information, extract and structure career information, generate career observations, identify strengths, experience, preferences and potential gaps, help you understand your career profile, and support relevant opportunity recommendations. Finding and Evaluating Opportunities To identify potentially relevant opportunities, understand opportunity requirements, compare opportunity requirements with your candidate information, and explain potential fit, gaps and uncertainties. Candidate-Approved Recruitment Activity Where you approve proceeding with a particular opportunity, to introduce your candidacy, share approved candidate information, communicate with relevant recruiters, employers or hiring managers, coordinate responses and interviews, follow up on recruitment activity, and track recruitment-process status. Operating and Protecting SteveGotJobs To prevent abuse and unauthorized access, troubleshoot failures, monitor reliability, maintain security, comply with applicable law, and establish, exercise or defend legal claims where appropriate. 4. AI Processing SteveGotJobs uses artificial intelligence as part of certain career-assistance functions. AI systems may process candidate information in order to generate structured career intelligence or assist with opportunity evaluation. AI-generated information can be incorrect, incomplete or uncertain. For this reason, SteveGotJobs is designed to preserve distinctions where appropriate between candidate-provided information, document-derived information, AI-generated observations, and candidate-confirmed information. Where the Service allows you to review, correct or reject AI-generated career observations, those actions may be recorded so that later processing does not silently overwrite candidate-confirmed information. AI analysis requiring consent will not be activated merely because you created a SteveGotJobs account. 5. Candidate Control Over Sharing Creating a SteveGotJobs account does not constitute blanket permission for us to distribute your CV or candidacy to employers. Consent to AI analysis also does not constitute permission to send your information to hiring parties. Before SteveGotJobs sends your candidate information to a recruiter, employer or hiring manager for a particular opportunity, we will obtain the applicable candidate approval. We may record that approval, including the opportunity, the intended recipient or hiring organization where known, what action you approved, the information approved for sharing, and the date and time of approval. 6. Who May Process Personal Data on Our Behalf? We use technology providers to operate SteveGotJobs. These may include providers of cloud hosting, authentication, databases, secure document storage, email, messaging, application monitoring, and artificial-intelligence/model infrastructure. Our current architecture may use services provided by organizations such as Firebase/Google, Supabase, Vercel, Resend, Gupshup, OpenRouter and underlying AI model providers where the applicable functionality is enabled. Not every provider necessarily receives every category of personal data. We seek to limit information disclosed to service providers to what is appropriate for the relevant function. [LAWYER: Review whether named subprocessors should remain in this Notice or be maintained on a separately versioned Subprocessor page.] 7. Employers, Recruiters and Hiring Managers Where you approve proceeding with a particular opportunity, information may be shared with the relevant hiring party. The hiring party may thereafter process information it receives under its own legal responsibilities and privacy practices. SteveGotJobs cannot control independent processing subsequently undertaken by an employer or recruiter outside the SteveGotJobs Service. 8. International Processing Some technology providers or AI providers used by SteveGotJobs may process or store information using infrastructure outside India. Where cross-border processing occurs, we will handle it in accordance with applicable Indian law and any restrictions or requirements applicable at the relevant time. [LAWYER: Verify this clause against current DPDP cross-border requirements and the actual regions/providers enabled in production.] 9. How Long We Keep Information We intend to retain personal data only for as long as reasonably necessary for the purposes for which it is processed, subject to applicable legal, security and dispute-resolution requirements. Indicatively: active-account information may be retained while your account remains active; candidate profile and CV information may be retained while you use SteveGotJobs; recruitment-process information may be retained for an appropriate period to maintain process history; consent and approval records may be retained where necessary to demonstrate what was authorized; security and operational logs may be retained for shorter operational periods unless required for investigation or legal purposes. When personal data is no longer required for a lawful purpose, we will delete or anonymize it as appropriate. [LAWYER: Finalize specific retention schedules before production launch. Engineering should then implement those schedules.] 10. Security We use reasonable technical and organizational measures intended to protect candidate information. These include measures such as verified authentication, server-side authorization, private document storage, short-lived authorized document access, access controls, separation between candidates, secure handling of credentials and service secrets, and monitoring and logging designed to minimize exposure of candidate content. No internet service can guarantee absolute security. If you believe your account or personal data may have been compromised, contact us at [SECURITY/PRIVACY EMAIL]. 11. Your Choices and Rights Subject to applicable law, you may have rights relating to your personal data, including rights to obtain information about personal data being processed; seek correction, completion or updating of personal data; request erasure where applicable; withdraw consent where processing is based on consent; raise a grievance; and exercise other rights available under applicable law. Where consent is the basis of processing, withdrawing consent does not invalidate processing lawfully carried out before withdrawal. Withdrawal may mean that features requiring that processing can no longer be provided. For example, withdrawing AI-analysis consent may prevent SteveGotJobs from providing AI-assisted career-intelligence functionality. You can exercise applicable rights through: [IN-APP PRIVACY CONTROLS / URL] or contact: [PRIVACY EMAIL] We will not require you to contact an AI provider separately in order to exercise rights concerning information processed by SteveGotJobs through that provider. 12. Withdrawing AI Consent You may withdraw AI-analysis consent using [METHOD]. Following withdrawal, SteveGotJobs will cease future consent-dependent AI processing within a reasonable period, subject to processing or retention otherwise required or permitted by law. [LAWYER + ENGINEERING: Confirm exact treatment of previously generated AI observations, source records, model-provider retention and legal/audit records.] 13. Account Closure and Erasure You may request account closure using [METHOD]. Closing your account may result in deletion or anonymization of personal data that is no longer required. Certain limited records may be retained where required or permitted for purposes such as legal compliance, security, fraud prevention, dispute resolution, proof of consent or candidate-approved disclosure, and establishment, exercise or defence of legal claims. 14. Grievances For questions, requests or grievances concerning personal data, contact: Privacy / Grievance Contact: [NAME OR ROLE] Email: [PRIVACY EMAIL] Address: [ADDRESS] We will handle grievances in accordance with applicable law. Nothing in this Notice limits rights available to you under applicable data-protection law. [LAWYER: Confirm requirements relating to the Data Protection Board of India and grievance escalation applicable on the publication/effective date.] 15. Children SteveGotJobs is presently intended for persons aged 18 years and above. We do not intentionally offer candidate accounts to children. If this changes, we will implement the additional safeguards required by applicable law before offering those services. 16. Changes to This Privacy Notice We may update this Privacy Notice as SteveGotJobs develops or legal requirements change. Each version will have a version number and effective date. Where a material change requires a new notice or consent, we will provide the required information and obtain renewed consent where applicable. We may retain historical versions and acceptance records so that we can establish which notice applied at a particular time. 17. Contact Us [LEGAL ENTITY] [ADDRESS] Privacy: [PRIVACY EMAIL] Support: [SUPPORT EMAIL]