> privacy_policy()

How we collect, use, and protect your personal data

Privacy Policy

Effective Date: August 15, 2025

Referly ("we," "our," "us") values your privacy. This Privacy Policy explains how we collect, use, and protect your personal data.

1. Data We Collect

  • Job Seekers: email address, resume, submitted applications, login activity.
  • Referrers: professional email, referral activity, login activity.
  • Automatically collected: IP address, device/browser information (for security).

2. How We Use Your Data

  • To provide authentication (magic links, codes).
  • To manage referrals between seekers and referrers.
  • To send service-related notifications.
  • If you explicitly opt in, to send newsletters and updates.

3. Legal Basis

  • Consent (when you sign up).
  • Contract (to deliver the platform services).
  • Legitimate interest (security, fraud prevention).

4. Data Retention

  • Applications remain active for a limited time, then archived or deleted.
  • Resumes are stored in secure storage (AWS S3) and deleted when accounts or applications are deleted.
  • Accounts may be deleted at any time by the user.

5. User Rights

Under GDPR and India's DPDP Act, you have the following rights:

  • Access your data: You may view your account information, applications, and referral history through your dashboard.
  • Delete your data: You may delete your account at any time, which will also delete your applications and resumes.
  • Correct your data: You may replace your resume with a new version. If other corrections are needed, you can fill the feedback form available after logging in.
  • Withdraw consent: If you have opted in to receive newsletters, you may unsubscribe at any time using the link in each email.

6. Sharing of Data

  • We do not sell your data.
  • Data may be shared with infrastructure providers (AWS, email provider) for service delivery.
  • Referrers see only your name and resume if you apply to their company.

7. Security

  • All data is encrypted at rest and in transit.
  • Access is restricted by role and purpose.

8. International Transfers

  • Data may be processed outside your country (including EU–India).
  • AWS provides GDPR-compliant Data Processing Agreements.

9. Changes

  • We may update this Privacy Policy. We will notify you of significant changes.

10. Contact

  • For questions or data requests, please use the feedback form available after logging in.