Privacy Notice

PRIVACY NOTICE

Effective date: 4 September 2026

This Privacy Notice explains how personal data is handled when you use InverseHire.

InverseHire is operated by Sandeep Kumar Narsing, an individual developer in India. For personal data for which InverseHire determines the purpose and means of processing, the operator acts as the Data Fiduciary under applicable Indian data-protection law.

Privacy and grievance contact: sandeepkumarnarsing@gmail.com.

1. SCOPE

This Notice applies to InverseHire account creation and sign-in, profiles, tutorials, roadmaps, articles, interview preparation, daily practice, mock tests, bookmarks, dashboards, job discovery, feedback and support, privacy requests, and Job Match / Resume Match.

Third-party websites reached through job-application links or other external links have their own privacy practices and are not governed by this Notice.

2. PERSONAL DATA WE PROCESS

Depending on the features you use, we may process:

Account and profile data:

• email address;
• username;
• first and last name;
• optional profile or contact fields you choose to provide;
• age band (adult 18+ or minor under 18), parental-consent status, role, account status, and account identifiers. InverseHire does not collect an exact date of birth for this classification.

Authentication and security data:

• password hashes, not plain-text passwords;
• email-verification and password-recovery records;
• Google Sign-In identifiers and account information needed to authenticate you, such as email and basic profile information made available for sign-in;
• sessions and security identifiers;
• IP address, user agent, device or session labels, login history, and security events where generated by the Service.

Saved Service activity:

• bookmarks;
• mock-test attempts, answers, results, timing, and practice history;
• daily-interview-question completions and streak information;
• dashboard metrics and recommendations derived from saved activity;
• other feature state that you intentionally save or that is required to provide the requested feature.

Communications and requests:

• feedback, support messages, reviews, feature suggestions, bug reports, and related contact details;
• privacy or data requests and the workflow information required to review and respond to them;
• administrative notes and status information used for authorized support or request handling.

Resume Match data:

• a PDF or DOCX resume you choose to upload;
• extracted resume text used transiently for the requested comparison;
• a pasted job description or an eligible InverseHire job reference;
• the generated match result during the request;
• limited operational and legal-acknowledgement metadata described in the Resume Processing Notice.

Technical and operational data:

• request identifiers, timestamps, error and performance metadata, rate-limit state, and security logs necessary for reliability, troubleshooting, fraud prevention, and abuse prevention.

3. PURPOSES OF PROCESSING

We process personal data only for identified Service and operational purposes, including to:

• create and operate your account;
• authenticate you and secure sessions;
• provide profile, bookmark, learning, interview-preparation, mock-test, streak, dashboard, and job-discovery features;
• perform Resume Match when you request it;
• send account verification, password-reset, and other transactional communications;
• respond to feedback, support, grievances, and privacy requests;
• maintain security, prevent fraud and abuse, enforce rate limits, investigate incidents, and troubleshoot failures;
• maintain necessary legal and consent/acknowledgement records; and
• classify an account into an adult or minor age band and keep a minor account pending until required parental or guardian consent is genuinely verified; and
• comply with applicable legal obligations and lawful requests.

Where consent is required, we seek consent for the specified purpose. We may also process personal data where another use is permitted under applicable law.

We do not currently sell personal data. We do not use targeted advertising or behavioural profiling for users we know are under 18. Using Resume Match does not itself send your resume to an employer.

4. LEGAL NOTICES AND CONSENT

When you register, InverseHire records the version of the Terms and Privacy Notice you accepted or acknowledged where the Service requires that record.

A minor's acceptance or email confirmation is not treated as verified parental or guardian consent. Until a credible verification mechanism or process is available and completed, a minor account remains pending and cannot obtain a normal authenticated session or use personalized account features.

Resume Match separately requires affirmative acceptance of the current Resume Processing Notice before resume content is parsed. A false, missing, unknown, or stale notice version is rejected by the Service.

Where processing depends on your consent, you may withdraw that consent through the available privacy-request mechanism or by contacting us. Withdrawal applies prospectively and may make a related optional feature unavailable. It does not invalidate processing already lawfully completed or require deletion of data that must or may be retained for another lawful purpose.

5. COOKIES AND SESSION TECHNOLOGIES

InverseHire uses essential cookies or equivalent session technologies needed for authentication, account security, session continuity, and requested Service functions. Authentication credentials are designed to be handled through secure server-managed mechanisms rather than exposed to browser storage where the current architecture uses HttpOnly cookies.

If optional analytics, advertising, or other non-essential cookie technologies are introduced later, this Notice and any required consent controls will be updated before those uses are enabled.

6. RESUME MATCH

Resume Match is optional and is subject to the separate Resume Processing Notice.

The current Resume Match implementation accepts PDF and DOCX files only, performs bounded server-side parsing and deterministic comparison, and does not use OCR for scanned or image-only resumes.

The feature is designed not to persist the raw resume, extracted full resume text, raw pasted job description, generated match result, or a resume-analysis history as application records. Limited operational metadata and the legal acknowledgement may be retained. See the current Resume Processing Notice for details.

7. SERVICE PROVIDERS AND DISCLOSURES

We use service providers to operate and secure InverseHire. Current providers may include:

• Cloudflare for frontend/network infrastructure;
• Render for backend hosting;
• Neon for managed PostgreSQL database infrastructure;
• Brevo for transactional email delivery; and
• Google for Google Sign-In where you choose that sign-in method.

Providers process data only as needed for the services they provide to InverseHire and under their applicable contractual and security arrangements.

We may also disclose personal data when reasonably necessary to comply with applicable law, respond to a valid legal process, protect users or the Service from fraud or security threats, establish or defend legal claims, or respond to an emergency where permitted by law.

We do not send a resume to an employer merely because you run Resume Match. If you click an external job-application link, information you then provide to the third party is governed by that third party’s practices.

8. INTERNATIONAL / CROSS-BORDER PROCESSING

Some infrastructure providers may process or store data using systems located outside India. Where this occurs, we use those providers subject to applicable Indian law and any restrictions or requirements issued by the Government of India.

9. RETENTION

Retention depends on the type of data and why it is needed.

Account and saved activity data may be retained while your account is active and for a reasonable period afterward where needed to complete deletion, protect security, prevent fraud, resolve disputes, maintain required records, or comply with law.

Authentication, security, support, privacy-request, and legal-acknowledgement records may be retained for periods reasonably necessary for their operational, evidentiary, security, or legal purposes.

Resume Match transient content is handled as described in the Resume Processing Notice and is not designed to be retained as a completed-analysis history.

Where data is no longer required for an identified purpose and no legal, security, fraud-prevention, dispute, or other permitted reason requires retention, we will delete or de-identify it as reasonably practicable.

10. SECURITY

InverseHire uses technical and organizational safeguards appropriate to the current Service, which may include access controls, password hashing, secure session handling, HTTPS/TLS, authorization controls, bounded upload and parsing limits, file validation, database constraints, security logging, rate limiting, backup/recovery controls provided by infrastructure services, and least-privilege operational practices.

No internet service can guarantee absolute security. Use a strong, unique password and protect access to your email account and devices.

If we become aware of a personal-data breach, we will investigate, contain and remediate it and provide notifications to affected users and competent authorities where and when required by applicable law.

11. YOUR RIGHTS AND REQUESTS

Subject to applicable law, you may have rights to:

• obtain information about personal data processed about you and the processing activities identified by law;
• correct, complete, or update inaccurate or incomplete personal data;
• request erasure of personal data where legally available;
• withdraw consent where processing is based on consent;
• use the grievance-redressal mechanism;
• nominate another individual to exercise applicable rights in the event of your death or incapacity where the law provides that right; and
• exercise other rights that become applicable to the Service under data-protection law.

Submit a request through the privacy-request mechanism available on InverseHire or email sandeepkumarnarsing@gmail.com.

We may need to verify your identity before fulfilling a request. A privacy request does not automatically disclose, correct, or delete data at the moment of submission; authorized handling may be manual. We may refuse, limit, or retain data where permitted or required by law, necessary for security, or necessary to protect another person’s rights.

12. GRIEVANCES

For a privacy question or grievance:

Sandeep Kumar Narsing Individual developer operating InverseHire in India Email: sandeepkumarnarsing@gmail.com

Please provide enough information for us to understand the issue without sending unnecessary sensitive information. We will acknowledge and address grievances within the period required by applicable law and otherwise within a reasonable period.

Nothing in this Notice prevents you from approaching the Data Protection Board of India, another regulator, consumer forum, court, tribunal, or other authority where you have the legal right to do so, subject to any statutory process that applies.

13. CHILDREN

Learners aged 15, 16, or 17 may use public learning resources that InverseHire makes available without an account. A person under 18 may begin account registration, but the account is classified as a minor account and remains pending where parental or guardian consent is required for account-based processing.

InverseHire does not currently have a legally credible automated method to verify that a person providing consent is the minor's parent or guardian and is authorized to provide it. The Service therefore does not activate pending minor accounts through a child-controlled email confirmation or a simple parent checkbox. Until a genuine verification method or reviewed process is implemented, pending minor accounts cannot receive normal authenticated sessions or use personalized features, including Resume Match.

We do not use targeted advertising or behavioural profiling for users we know are under 18. If you have a question about a minor's data or believe a minor account was created incorrectly, contact sandeepkumarnarsing@gmail.com.

14. CHANGES TO THIS NOTICE

We may publish a new version when our Service, data practices, providers, or legal obligations materially change. The current version and effective date will be displayed through the Service.

Where a material change requires additional notice or renewed consent under applicable law, we will take the required steps. Historical versions may be retained to preserve legal and acknowledgement records.

15. CONTACT

Operator / Data Fiduciary contact: Sandeep Kumar Narsing Service: InverseHire Location: India Email: sandeepkumarnarsing@gmail.com