> privacy_policy()
How we collect, use, and protect your personal data
Privacy Policy
Effective Date: August 15, 2025
Referly ("we," "our," "us") values your privacy. This Privacy Policy explains how we collect, use, and protect your personal data.
1. Data We Collect
- Job Seekers: email address, resume, submitted applications, login activity.
- Referrers: professional email, referral activity, login activity.
- Automatically collected: IP address, device/browser information (for security).
2. How We Use Your Data
- To provide authentication (magic links, codes).
- To manage referrals between seekers and referrers.
- To send service-related notifications.
- If you explicitly opt in, to send newsletters and updates.
3. Legal Basis
- Consent (when you sign up).
- Contract (to deliver the platform services).
- Legitimate interest (security, fraud prevention).
4. Data Retention
- Applications remain active for a limited time, then archived or deleted.
- Resumes are stored in secure storage (AWS S3) and deleted when accounts or applications are deleted.
- Accounts may be deleted at any time by the user.
5. User Rights
Under GDPR and India's DPDP Act, you have the following rights:
- Access your data: You may view your account information, applications, and referral history through your dashboard.
- Delete your data: You may delete your account at any time, which will also delete your applications and resumes.
- Correct your data: You may replace your resume with a new version. If other corrections are needed, you can fill the feedback form available after logging in.
- Withdraw consent: If you have opted in to receive newsletters, you may unsubscribe at any time using the link in each email.
6. Sharing of Data
- We do not sell your data.
- Data may be shared with infrastructure providers (AWS, email provider) for service delivery.
- Referrers see only your name and resume if you apply to their company.
7. Security
- All data is encrypted at rest and in transit.
- Access is restricted by role and purpose.
8. International Transfers
- Data may be processed outside your country (including EU–India).
- AWS provides GDPR-compliant Data Processing Agreements.
9. Changes
- We may update this Privacy Policy. We will notify you of significant changes.
10. Contact
- For questions or data requests, please use the feedback form available after logging in.