Privacy Policy

1. Who We Are

BraveLight Systems ("we", "us", "our") operates the hiring platform at bravelightsystems.com. We connect companies seeking technical talent with qualified candidates through structured, expert-led interview processes.

For the purposes of applicable data protection law, including India's Digital Personal Data Protection Act, 2023 (DPDP Act), BraveLight Systems is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.

2. What Data We Collect

2.1 Candidate Data

When you register as a candidate or use our platform, we may collect:

2.2 Employer / Company Data

2.3 Data we do NOT collect

• Raw credit/debit card numbers — only tokenised references from our payment processor
• Government ID numbers (Aadhaar, PAN) unless you voluntarily provide them
• Sensitive personal data such as religion, caste, political affiliation
• Health or medical information

3. How We Use Your Data

For candidates, we use your data to:

• Create and maintain your candidate profile
• Match your profile with relevant job openings
• Allow verified employers to view your profile and reach out
• Send you application status updates and notifications
• Improve our job recommendation algorithms
• Send service-related emails (account verification, password reset)

For employers, we use your data to:

• Create and verify your company account
• Process payments and manage your subscription
• Enable posting of job listings and receiving applications
• Send billing reminders (including trial expiry notifications)
• Provide team collaboration features

Legal basis for processing (DPDP Act 2023)

We process your personal data on the following lawful bases:

4. Who Sees Your Data

Candidate data visibility

Third-party service providers

We share limited data with trusted service providers who help us operate the platform:

• Payment processors (Razorpay) — billing data only, under their own privacy policy
• Email service providers — name and email for transactional emails
• Cloud hosting — encrypted data stored on servers located in India

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

Legal disclosures

We may disclose your data if required by Indian law, court order, or to protect the rights, property or safety of BraveLight Systems, our users or the public. We will notify you where legally permitted.

5. Data Storage & Security

• All data is stored on servers located in India
• Passwords are hashed using bcrypt — we cannot read your password
• All data in transit is encrypted using TLS 1.2+ (HTTPS)
• Payment data is tokenised — raw card numbers never touch our servers
• Access to personal data is restricted to authorised BraveLight staff only
• We conduct regular security reviews and vulnerability assessments
• Database access is logged and monitored

6. How Long We Keep Your Data

After retention periods expire, data is permanently and securely deleted or anonymised.

7. Your Rights

Under India's Digital Personal Data Protection Act 2023, you have the following rights:

Right to Access

You can request a copy of all personal data we hold about you. We will respond within 30 days.

Right to Correction

You can update most of your data directly through your profile settings. For data you cannot edit yourself, contact us and we will correct it within 15 days.

Right to Erasure (Right to be Forgotten)

You can delete your account at any time from your profile settings. This permanently removes your profile from employer searches. We retain only what we are legally required to (billing records, consent logs).

Right to Withdraw Consent

You can withdraw consent for data processing at any time by deleting your account. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Data Portability

You can request a machine-readable export (JSON or CSV) of your profile data by emailing privacy@bravelightsystems.com.

Right to Grievance Redressal

If you believe your data rights have been violated, you can raise a grievance with our Data Protection Officer. If unresolved, you may contact the Data Protection Board of India once established under the DPDP Act.

8. Cookies

We use cookies and similar technologies to operate and improve our platform.

We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but this may affect platform functionality.

9. Children's Privacy

BraveLight Systems is a professional recruitment platform intended for adults. We do not knowingly collect personal data from anyone under the age of 18.

If you believe a minor has created an account, please contact us immediately at privacy@bravelightsystems.com and we will delete the account promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all registered users at least 14 days before the change takes effect
• Show a notice on the platform dashboard

Your continued use of the platform after changes take effect constitutes acceptance of the revised policy. If you do not agree, you may delete your account before the effective date.

11. Contact Us

For any questions, concerns or data rights requests, please contact our Data Protection Officer: