Introduction

Welcome to RawBeacon! This Privacy Policy explains how RawBeacon ("RawBeacon," "we," "us," or "our") collects, uses, shares, and protects your personal data when you visit our website (www.rawbeacon.com), use our platform, or interact with our services (collectively, the "Services"). Our Services aim to provide unparalleled clarity in salary negotiation through unique, role-specific competency assessments.

This Policy applies to all users of our Services, including individual job seekers/employees and representatives of employer organizations.

By accessing or using our Services, you signify your understanding of the terms outlined in this Privacy Policy. This Policy is governed by the laws of India, including the Digital Personal Data Protection Act (DPDP Act), 2023.

Information We Collect

We collect various types of information in connection with the Services, including:

Personal Identification Information: Name, email address, phone number, city/state/country of residence, and other contact details you provide when you register, create a profile, or contact us.
Account Information: Your username, password (stored securely using hashing/encryption), profile preferences, and settings.
Competency Assessment Data: Information you provide during assessments, including answers, inputs, task performance, generated scores, detailed analysis, feedback, and the final Salary Worthiness Report.
Career and Salary Information: Your current and desired job title, industry, years of relevant experience, self-reported skills, educational background, current and desired salary or compensation expectations, and negotiation-related goals or information you choose to provide.
Employer-Provided Information: If you are using our Services as an employer representative, we may collect your company name, your job title, business contact information, job descriptions, required competencies, and salary bands for roles you are benchmarking or hiring for.
Technical and Usage Data: IP address, approximate location derived from IP address, browser type and version, operating system, device type and identifiers, website navigation paths, pages visited, time spent on pages, links clicked, usage patterns, and information collected through cookies and similar technologies (please see Section 8 for more details).
Communications: Records and copies of your correspondence if you contact us (e.g., support requests, feedback submissions).
Payment Information: If you make a purchase, payment details such as credit/debit card information are collected and processed directly by our secure third-party payment processor [Specify Payment Processor Name, e.g., Razorpay, Stripe]. We do not store your full payment card details on our servers.

How We Use Your Information

We use the information we collect for various purposes, based on lawful grounds as permitted under the DPDP Act, 2023, primarily your consent and legitimate interests:

To Provide and Operate the Services: To create and manage your account, administer competency assessments, generate your Salary Worthiness Report, provide salary insights and negotiation support, and enable platform functionalities.
To Improve and Personalize the Services: To understand how users interact with our platform, analyze usage trends (often using aggregated or anonymized data), improve our assessment methodologies and algorithms, enhance user experience, troubleshoot issues, and develop new features.
To Communicate With You: To send essential service-related notifications (e.g., account verification, assessment updates, policy changes), respond to your inquiries and support requests, and, with your explicit consent, send newsletters, promotional materials, or information about features we think may interest you (you can opt-out at any time).
For Security and Fraud Prevention: To monitor for and prevent potentially prohibited or illegal activities, enforce our Terms & Conditions, and protect the security and integrity of our platform and users.
To Comply with Legal Obligations: To meet applicable legal requirements, regulations, court orders, or governmental requests.

How We Share Your Information

We do not sell your personal data. We share your information only in the following circumstances, in compliance with the DPDP Act, 2023:

With Your Explicit Consent: We will share your personal data, such as your Salary Worthiness Report or assessment results, with third parties (like a potential employer) ONLY when you provide clear, specific, and informed consent for us to do so.
With Service Providers (Data Processors): We engage trusted third-party companies and individuals to perform certain functions on our behalf, such as cloud hosting (e.g., [Specify Hosting Provider like AWS, Google Cloud]), data analytics (e.g., Google Analytics), payment processing (e.g., [Specify Payment Processor Name]), email delivery, and customer support tools. These service providers only have access to the personal data needed to perform their specific functions and are contractually obligated to process your data securely and only based on our instructions, in compliance with the DPDP Act.
Aggregated or Anonymized Data: We may share aggregated or anonymized data (which cannot reasonably identify you) for purposes like statistical analysis, research, industry reporting, or improving our Services.
Business Transfers: If RawBeacon is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal data.

Data Security

We implement appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, use, alteration, or disclosure. These measures include, but are not limited to, encryption of data in transit and at rest, access controls, secure server infrastructure, and regular security assessments. However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including providing the Services, complying with our legal obligations (e.g., tax, accounting), resolving disputes, and enforcing our agreements.

Account information is typically retained for as long as your account is active and for a reasonable period thereafter [Specify Period, e.g., 6 months] in case you decide to re-activate, or as required by law.
Assessment data and reports may be retained for [Specify Period] to allow you access and for us to improve our models (often in anonymized form).
Anonymized or aggregated data may be retained indefinitely for research and analysis purposes.

When retention is no longer necessary, we will securely delete or anonymize your personal data.

Your Rights under the DPDP Act, 2023

As per the DPDP Act, 2023, you have certain rights regarding your personal data:

Right to Access: You have the right to obtain confirmation about whether we process your personal data and access a summary of such data.
Right to Correction and Erasure: You have the right to request correction of inaccurate or incomplete personal data and erasure of personal data that is no longer necessary for the purpose it was collected, subject to certain conditions.
Right to Grievance Redressal: You have the right to register a grievance with us regarding our data processing activities. We will respond to your grievances promptly.
Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

Cookies and Tracking Technologies

We use cookies (small text files placed on your device) and similar technologies (e.g., web beacons, pixels) to operate our website, analyze performance, personalize your experience, and for marketing purposes (where consent is obtained). You can manage your cookie preferences through our cookie consent banner and your browser settings. For more detailed information, please refer to our [Link to Cookie Policy - Recommended to create a separate one].

International Data Transfers

Your personal data may be processed and stored in servers located outside of India where our service providers operate. If we transfer your personal data outside India, we will ensure that the transfer complies with the DPDP Act, 2023, typically by ensuring the destination country provides adequate protection, implementing appropriate safeguards like Standard Contractual Clauses, or obtaining your explicit consent for the transfer.

Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on our website, updating the "Effective Date," and/or sending you an email notification. We encourage you to review this Policy periodically.

Contact Information / Grievance Redressal

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, or if you wish to exercise your rights, please contact us at:

RawBeacon [Your Company's Registered Address] Email: privacy@rawbeacon.com [Optional: Grievance Officer Name and Contact Details if appointed - Required under DPDP Act] Grievance Officer Email: grievance.officer@rawbeacon.com

We are committed to addressing your concerns in a timely and effective manner. You also have the right to lodge a complaint with the Data Protection Board of India if you believe your rights have been violated.