Privacy Policy

This Privacy Policy explains what personal data Siddharth Sanjiv Verma, a sole proprietorship with its principal place of business at Row House No. F-1, Green Woods Society, Dhayari, Sinhagad Road, Pune, Maharashtra 411041, India ("Pivu", "we", "us") collects when you use pivu.io and our apps (the "Platform"), why we use it, who receives it, how long we keep it, and the choices and rights you have.

Pivu decides why and how this data is used, so it is the Data Fiduciary (or "controller") under India's Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them, and, where they apply to you, other laws such as the EU and UK General Data Protection Regulation.

To read this Policy in any language listed in the Eighth Schedule to the Constitution of India, write to legal@pivu.io.

1. The short version

• We use your data to run a hiring platform: your account and profile, matching people and jobs, scheduling and running interviews, payments, keeping the Platform safe, and understanding how it is used so we can fix and improve it.
• Recruiters on Pivu can find and view Candidate profiles in search, including work history, skills, and salary and notice-period details, even if you have not applied to them. Your résumé file is shown only to Recruiters whose job you applied to.
• We share data only with the people and companies needed to run Pivu: the users in your hiring process and the service providers listed in section 5. Another company or app will use your data for its own purposes only if you switch that on.
• We do not sell your personal data, and we do not share it for targeted advertising.
• You can see, correct and delete your data and withdraw consent (section 10).
• Pivu is free today but may introduce paid subscriptions (section 7A of our Terms of Service). Without an active subscription, you may be unable to access some or all of your data on the Platform. Your rights in section 10 never depend on paying.

2. Data we collect

Please share only what a job needs. Do not include health information, religion, caste, sexual orientation, biometric details, or government ID numbers other than the tax identifier we ask for payouts. If your résumé or messages contain such details, we store them only as part of that file or message, and we do not use them to match, rank or make decisions about you.

What you must provide. You must give your name, email address and a sign-in method to open an account. Payout and tax details are needed only to receive payouts. Everything else is up to you, but some features will not work without it.

3. How we use your data

We may also create statistics that do not identify anyone (for example "average time to hire in Bengaluru") and share or publish them. We will not try to identify anyone from them.

Withdrawing consent. You can turn off WhatsApp messages and optional notifications in Settings. To withdraw your consent to everything else, ask us to close your account (section 10). Withdrawal does not affect what we lawfully did before, and we stop, and make our service providers stop, within a reasonable time, except where a law requires us to keep data (section 8).

4. Automated tools

• What they do. We use automated tools, including machine-learning models, to read your résumé and suggest profile entries for you to review, to suggest and rank jobs, candidates and interviewers based on how well skills, experience, location, salary and availability match, to detect misuse, and, when you use the Pivu browser extension, to write suggested answers to the job application form you are filling. Some of these models run on servers Pivu controls; the extension's answers are written by the AI model providers listed in section 5.3.
• Application answers are suggestions. The extension fills a form only when you ask it to, never submits an application, and leaves demographic and consent questions to you. You review and can change every answer before you submit.
• How they affect you. Ranking changes the order in which people and jobs are shown. People, not Pivu's tools, decide whom to interview or hire.
• What they do not do. We do not analyse video or audio to judge people, infer emotions or personality, or create face or voice templates to identify anyone.
• Your options. You can ask us how an automated result that affects you was produced, give us your view, and ask a person at Pivu to review it (section 12). You can correct the profile data a result is based on at any time.

5. Who receives your data

5.1 Other users

• Recruiters (including agency recruiters) can find Candidate profiles in search and view a Candidate's name, photo, reel, work history, education, skills, projects, achievements, time zone, current and expected salary, notice period and earliest start date. They see your résumé file and application only when you apply to a job they manage. They do not see your email address or phone number unless you share them.
• People a Recruiter asks for an opinion, such as a hiring manager, may see your name, work history, education, projects, achievements and skill match through a private link the Recruiter shares, which expires after 30 days or when revoked. The link does not show your salary, notice period, résumé, contact details or photo.
• Interviewers booked for your interview see your profile, without your salary, notice period, résumé or application status.
• Interviewers' profiles (name, photo, experience, skills, rates, ratings and reliability score) are shown to Recruiters. Recruiters' ratings are shown to Interviewers.
• Candidates see the public details of jobs and companies and, where relevant, the Recruiters and Interviewers involved.
• Job posts are public and may appear in search engines. Candidate and Interviewer profiles are not published to search engines.
• Photos and reels are stored at web addresses that are not listed anywhere public, but anyone who has the exact address can open them.

Each Recruiter or company decides for itself how it uses the data it receives, and is responsible under the law for that use. Our Terms allow them to use it only to consider you for roles they are recruiting for. Pivu remains responsible for its own handling of your data. Tell us if you think a user has misused your data, and we will act under our Terms.

5.2 Pivu group companies

Pivu has no group companies today. If that changes, we will list each group company by name, with the data it receives and why, before any sharing starts. A group company that only helps us run Pivu works on our instructions and may not use your data for itself. A group company will use your data for its own purposes only if you turn that on, and you can turn it off at any time. We never share data received from Google, Microsoft or Zoom accounts you connect with any group company.

5.3 Service providers

We use service providers that process data only to provide their service to us, under their terms and our instructions, and that must keep it secure:

We also share data with professional advisers (lawyers, auditors, accountants) where needed.

Bank, UPI and tax details are shared only with our payment partner to verify and pay you, and with tax authorities where the law requires. They are never published.

5.4 Your browser's speech service

When you dictate with the microphone, your browser handles the speech recognition. Depending on the browser, the audio may be sent to its speech service (for example Google in Chrome, or Apple in Safari) and handled under that company's privacy policy.

5.5 Accounts you connect

If you sign in with Google, we receive your name, email address and profile photo. If you connect a Google, Microsoft or Zoom account for interviews, we receive that account's email address and a token, stored encrypted, which lets us create, update and cancel the interview events and meeting links you schedule on Pivu. We use this data only for those scheduling features, and never for advertising, selling, sharing with group companies, or training AI models. You can disconnect an account at any time.

Pivu's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.6 Other disclosures

• Legal and safety: to courts, law enforcement agencies, regulators and other authorities when a law or a lawful order requires it, including government portals under labour and social-security laws for Interviewers; and where needed to prevent, detect or investigate fraud or crime, protect someone's safety, or establish or defend legal claims.
• Business transfers: if Pivu's business moves to a company formed to carry it on, or Pivu is merged, acquired, restructured or sells all or part of its business, your data may move to the new owner, who must use it only as this Policy allows unless you agree otherwise. We will tell you before that happens, and data received from Google APIs moves only with your explicit consent.
• At your request or with your consent.

6. Cookies and similar technologies

We use cookies and browser storage for two things:

• Necessary: keeping you signed in and your session secure, recognising your device, remembering your theme, time zone and country, completing Google sign-in, and returning you to the right page after a payment. Our payment partners' secure payment forms also run on the payment pages. Pivu cannot work without these.
• Referral: if you open a pivu.io link that names the person who shared it, a first-party cookie remembers that person's username (and any discount code in the link) for 30 days, so we can count who brought new people to Pivu. It gives nobody access to your data and is not used for advertising.
• Analytics: a random identifier in your browser and records of which pages and features you use. This data is collected and used only by Pivu, is linked to your account when you are signed in, and is never sold or used for advertising.

When you open the sign-in or jobs pages, our geolocation provider receives your IP address to tell us your country. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but you will not be able to sign in without the necessary ones.

7. International transfers

Our files are stored in India. Our service providers may process data in other countries, including the European Union and the United States. Where data leaves your country, we rely on the protections the law requires, follow any restriction the Government of India places on transfers to a particular country, and, for data from the EEA or UK, use Standard Contractual Clauses or another transfer tool the law recognises.

8. How long we keep data

We keep personal data only as long as we need it for the purposes in section 3 or as a law requires, and then delete it or make it anonymous.

9. Security

We protect personal data with safeguards that include: encrypted connections between your device and our servers; passwords stored only as one-way hashes; one-time codes and link tokens stored only in scrambled form; encryption of tokens for accounts you connect; limiting staff access to the people who need it; and card details handled only by our payment partner. No system is completely secure, so we cannot guarantee that data will never be accessed without permission.

If a personal data breach affects you, we will tell you without delay what happened, what it may mean for you, what we are doing and what you can do, and report it to the authorities as the law requires.

10. Your rights

You can:

• access a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
• correct, complete or update it, much of it directly in your profile and Settings;
• erase it, by deleting content or asking us to close your account. We erase your data unless we must keep it for a purpose you are still using or by law (section 8);
• withdraw consent (section 3);
• stop appearing in Recruiter search, by asking us;
• nominate another person to use these rights if you die or become unable to act, by writing to us with their name and email address;
• raise a grievance with us (section 12), and if you are not satisfied with our answer, complain to the Data Protection Board of India.

These rights do not depend on a subscription. If Pivu introduces paid plans, not having an active subscription can limit what you can use or see on the Platform (section 7A of our Terms), but it never limits the rights in this section or in sections 13 and 14, and we do not charge you for using them.

How to ask. Email legal@pivu.io from the email address registered to your account. We may ask you to confirm a one-time code before acting.

How fast. We reply to rights requests within 30 days, and never later than the time the law allows. Complaints about content follow the faster times in section 20 of our Terms.

You also have duties: give authentic information, do not impersonate anyone, and do not make false or frivolous complaints.

11. Children

Pivu is only for people aged 18 or over, and everyone confirms this when signing up. If we learn that an account belongs to someone under 18, we will close it and delete its data. If you believe someone under 18 is using Pivu, tell us at support@pivu.io.

12. Contact and grievances

Grievance Officer and data protection contact: Siddharth Sanjiv Verma, Proprietor, Row House No. F-1, Green Woods Society, Dhayari, Sinhagad Road, Pune, Maharashtra 411041, India. Email: legal@pivu.io. Phone: +91 96579 34528.

We acknowledge complaints within 24 hours and resolve them within the times set out in section 20 of our Terms of Service. If you are not satisfied, you may appeal to the Grievance Appellate Committee or complain to the Data Protection Board of India as described there.

13. If you are in the EEA or the UK

• Controller: Siddharth Sanjiv Verma, Row House No. F-1, Green Woods Society, Dhayari, Sinhagad Road, Pune, Maharashtra 411041, India, legal@pivu.io. Pivu has not appointed a representative in the EU or the UK. Contact us directly at the same address.
• Legal bases for each purpose are listed in section 3. Where we rely on legitimate interests, those interests are keeping the Platform safe, giving relevant matches, understanding and fixing how the service works, and defending legal claims.
• Your rights: access, correction, erasure, restriction, a portable copy of data you gave us, and withdrawing consent at any time. You can object at any time to processing based on legitimate interests, and to direct marketing.
• Complaints: contact us first. You may also complain to your local data protection authority, or in the UK to the Information Commissioner's Office.

14. If you are in the United States

If you live in a US state whose consumer privacy law applies to Pivu, you may have the right to know, access, correct and delete your personal data, and to opt out of its sale, of sharing for targeted advertising, or of certain profiling. We honour these rights as described in section 10, and we will not treat you differently for using them. We use sensitive data, such as tax identifiers and financial account details, only to provide the services you ask for, such as payouts.

15. Changes to this Policy

The version and effective date at the top show when this Policy last changed. We tell you about changes at least once a year. For a material change, we notify you in the app or by email before it applies. If a change adds a new purpose that needs your consent, we ask for it separately and do nothing new until you agree.