Privacy policy.

01Who we are

RightHire is an AI talent-intelligence recruitment service for tech, engineering and AI/ML roles. It is run by Ramisetty Harsha Vardhan as a sole proprietorship based in Nellore, Andhra Pradesh, India. In this policy, "RightHire", "we" and "us" mean this business.

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for the personal data described here: we decide why and how it is used. You are the Data Principal. This policy explains, in plain language, what we collect, why, and the choices you have.

It applies to candidates (people we may consider for a role), clients (companies and partners who hire through us) and visitors to this website.

02What we collect about candidates

From public professional sources

To find evidence of real skills, we look at professional information that is publicly available, for example:

• public code repositories and open-source contributions (such as GitHub or GitLab profiles)
• personal websites, portfolios, and shipped products or apps
• published articles, engineering blog posts, talks and research papers
• public professional profiles: name, current and past roles, employers, education, location (city level) and professional links

From you, if you choose to share it

• contact details (email, phone), your CV or résumé, and links you send us
• your current role, notice period, preferred locations or remote preferences, work authorisation and salary expectations
• notes from our conversations about your interests and the roles you're open to

What we don't collect

• We don't look for or record sensitive details such as religion, caste, health, sexual orientation, political views or financial account information, and we ask you not to send them.
• We don't access private accounts, log in as anyone else, or get around privacy settings or access controls.
• We don't knowingly collect data about anyone under 18.

Information you have made public yourself may fall outside parts of the DPDP Act. We still treat it with the same care as everything else in this policy: we use it only for recruitment matching, and you can ask us to delete it.

03Why we use it

We use candidate data for one purpose: recruitment matching. That means:

• judging whether you might be a strong fit for a specific open role
• contacting you about that role (and, if you agree, about similar roles later)
• preparing an "evidence card" that summarises your relevant work, with links, to share with a client only after you agree
• coordinating interviews and next steps if you go ahead

We don't use your data for unrelated marketing, we don't build profiles to sell, and we don't use it for any other purpose without asking you first.

How we use AI

We use AI tools to help find and summarise public evidence of skills. A person (the founder) reviews every candidate and every evidence card before anything is shared. We don't make fully automated decisions about you, and hiring decisions are made by the client, not by software.

04Your consent before we share your profile

We will never send your profile to a client without your clear permission. Before sharing, we contact you, describe the role (the company name may stay confidential at first) and ask whether you want to be put forward. You can say no at any time, with no consequences.

• Your consent covers the specific role and client we told you about. For a different role, we ask again.
• You can withdraw your consent at any time by emailing us. We then stop sharing your data. If a client has already received your profile, we will tell them you have withdrawn and ask them to delete it.
• Withdrawing consent doesn't affect anything done lawfully before you withdrew.

05Who we share data with

• Clients: only with your consent, and only for the role you agreed to. Clients may use it only to evaluate you for that role.
• Service providers we rely on to run the business, such as email, calendar and cloud storage (for example Google Workspace). They handle data on our behalf and not for their own purposes. Some of them may store data on servers outside India, as the DPDP Act permits.
• Authorities: only where the law requires it.

We do not sell, rent or trade personal data, ever.

06How long we keep it

• If we research you but never contact you, we delete those notes within 90 days of the search closing.
• If you engage with us, we keep your profile for up to 12 months after our last contact so we can tell you about suitable roles. After that, we delete or anonymise it unless you ask us to keep it longer.
• If you ask us to delete your data, or withdraw consent, we delete it promptly. We keep only a minimal record that you asked not to be contacted, so we don't contact you again by mistake.
• Client and billing records are kept for as long as tax and accounting laws require.

07Your rights

Under the DPDP Act, you can:

• Access: ask for a summary of the personal data we hold about you, what we did with it, and which clients we shared it with.
• Correct and update: fix anything inaccurate or out of date.
• Erase: ask us to delete your data.
• Withdraw consent at any time, as easily as you gave it.
• Raise a grievance with us and get a response.
• Nominate someone to exercise these rights for you if you die or become unable to.

To use any of these rights, email harshakusalmayuri@gmail.com with the subject "Privacy request". We may ask you to confirm your identity. We aim to acknowledge requests within 7 days and to act on them as quickly as we can, and always within the time the law allows.

If you're not satisfied with our response, you can complain to the Data Protection Board of India.

08Client data and confidentiality

When a company shares a role with us, we treat it as confidential:

• Job descriptions, hiring plans, team details, compensation ranges and any other business information you share are used only to run your search.
• We share only what candidates need to decide whether they're interested, and we keep your company name confidential until you're comfortable with us revealing it.
• We don't use your information for other clients or disclose it to third parties, except for the service providers listed above.
• If you need an NDA, we're happy to sign one.

Candidate profiles we share with you are confidential too. Please use them only to evaluate candidates for the agreed role, keep them secure, don't pass them on, and delete them when you no longer need them.

09How we protect data

We use reasonable safeguards for a small business: data is stored with reputable providers, access is limited to RightHire, accounts are protected with strong passwords and two-factor authentication, and we collect only what we need. No system is perfectly secure. If a personal data breach occurs, we will inform the people affected and the Data Protection Board of India as the law requires.

10This website

• We don't use analytics, advertising or tracking cookies on this site.
• The site is hosted on GitHub Pages. GitHub may log technical data such as IP addresses for security and operations (see GitHub's privacy statement). Fonts are loaded from Google Fonts, which receives your IP address when fonts load.
• The "request a shortlist" form doesn't send anything through the website. It opens your own email app with a pre-filled message, and nothing is sent until you press send.

11Changes to this policy

We may update this policy as RightHire grows or the law changes. We'll change the "last updated" date at the top, and for significant changes we'll tell candidates and clients we're working with.

12Contact and grievances

For any question, request or complaint about your personal data, contact: