Privacy Policy

We collect information necessary to provide, improve, and secure our job marketplace services. This includes:

We only collect data that is directly relevant to operating the platform and facilitating verified connections between hair fixing professionals and studios.

As part of our zero-tolerance policy for fake profiles, we collect government-issued identity and business documents. We treat these with the highest level of confidentiality:

• Aadhaar & PAN cards — collected for staff identity verification only. Original document numbers are masked (only last 4 digits displayed internally to our verification team). Aadhaar/PAN images are never shown publicly on any profile.
• GST / MSME certificates — collected for studio business verification. Used solely to confirm legal business existence.
• Selfie verification — a live selfie may be requested to match against uploaded ID photos and prevent impersonation.
• Studio photos & visiting cards — uploaded for studio profile display and physical location confirmation.

When you apply for a job through our platform, we collect and process application-specific information:

• Application history — jobs applied to, dates, and current status (pending, shortlisted, rejected, hired).
• Cover messages — personalised notes you send to studios along with your application.
• Resume / CV uploads — shared only with the specific studio(s) you choose to apply to.
• Interview notes — any feedback or scheduling data generated during the hiring process.

Studios can only access your contact details (name, city, skills, mobile) after you explicitly apply to their listing. Your Aadhaar, PAN, and home address remain confidential.

Studios registering on our platform provide business verification data to earn trust badges:

• Business registration — GST number, MSME certificate, or shop establishment license.
• Studio location proof — utility bill, rental agreement, or Google Business screenshot.
• Owner identity — Aadhaar or passport of the business owner for KYC purposes.
• Contact information — official email, WhatsApp business number, and landline.

Verified studio badges (Verified Studio, Premium Studio) are displayed publicly. However, sensitive underlying documents are kept strictly internal and reviewed only by our admin verification team.

We use cookies and similar technologies to enhance your browsing experience, analyse traffic, and personalise content:

You can disable non-essential cookies through your browser settings. Disabling essential cookies may prevent login and core platform features from functioning correctly.

We communicate with you via multiple channels to keep you informed about your applications, verification status, and relevant opportunities:

• WhatsApp messages — sent for verification updates, job alerts matching your profile, and studio inquiries. You may opt out of promotional alerts by replying STOP.
• Email notifications — application status changes, password resets, subscription receipts, and security alerts.
• In-app notifications — real-time alerts for messages, shortlists, and admin announcements.
• SMS — occasional OTPs and critical account notifications.

We do not send spam. Every communication includes an unsubscribe or opt-out mechanism where legally required. Your WhatsApp number and email are never sold to external marketing lists.

We implement technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction:

• Transport Layer Security (TLS) — all data transmitted between your browser and our servers is encrypted using HTTPS.
• Row-Level Security (RLS) — database access is restricted so users can only read/write their own data unless explicitly authorised.
• Encrypted storage — uploaded documents and sensitive fields are encrypted at rest.
• Access control — internal staff access is role-based and logged. No single employee has unrestricted access to all user data.
• Regular audits — we conduct periodic security reviews and penetration testing on our infrastructure.

You are responsible for maintaining the confidentiality of your account credentials:

• Use a strong, unique password and do not reuse it across other websites.
• Enable two-factor authentication (2FA) if available on your account settings page.
• Report any suspected unauthorised access immediately to hairfixingjobs@gmail.com.
• We will never ask for your password via email, WhatsApp, or phone. Be cautious of phishing attempts impersonating Hair Fixing Jobs India.

If we detect suspicious login activity (unusual location or device), we may temporarily lock your account and require identity confirmation before restoration.

We integrate with select third-party services to provide core functionality. Each integration operates under its own privacy policy:

• Razorpay — payment processing for studio subscriptions. Razorpay handles card and UPI data; we do not store complete card numbers.
• Supabase (Lovable Cloud) — our database and authentication backend. Data is stored in India-region data centres where possible.
• Google Analytics — anonymised traffic and behaviour analysis. No personally identifiable information is shared with Google.
• WhatsApp Business API / Meta — message delivery for notifications. Phone numbers are shared with Meta solely for message routing.
• Email service providers (Resend / AWS SES) — transactional email delivery.

We do not authorise any third party to use your personal data for their own marketing purposes beyond what is necessary to deliver the service.

We retain your data only for as long as necessary to fulfil the purposes outlined in this policy:

• Active accounts — data retained while your account remains active and in good standing.
• Inactive accounts — after 24 months of inactivity, we may archive or anonymise your profile data.
• Verification documents — retained for the duration of your active account plus 1 year for compliance and dispute resolution.
• Payment records — retained for 5 years as required by Indian tax and accounting laws.

You may request complete deletion of your account and associated data at any time by emailing hairfixingjobs@gmail.com. Deletion requests are processed within 30 days, subject to legal retention obligations.

Under applicable Indian data protection laws and best practices, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — update inaccurate or incomplete information through your profile settings or by contacting support.
• Right to erasure — request deletion of your account and personal data (see Data Retention section).
• Right to restriction — request that we limit processing of your data in specific circumstances.
• Right to portability — receive your data in a structured, commonly used format.
• Right to object — opt out of marketing communications and certain types of automated profiling.

To exercise any of these rights, please email us at hairfixingjobs@gmail.com with the subject line "Data Rights Request" and sufficient information to verify your identity.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be notified via:

• An in-app notification banner upon your next login.
• An email to the address associated with your account.
• A prominent notice on the privacy policy page itself.

The "Last updated" date at the top of this page indicates the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection Officer:

We aim to respond to all privacy-related inquiries within 48 business hours. For urgent security matters, please mention "SECURITY" in your subject line.