Privacy Policy & Statutory Disclosures
Governing Standards: Indian Digital Personal Data Protection (DPDP) Act 2023, GDPR, and Global Payment Security. Effective: September 2026.
All online payments, UPI transactions, cards, and NetBanking on Role Nest are securely handled through Cashfree Payments India Pvt. Ltd., an RBI-authorized Payment Aggregator. Role Nest never stores your sensitive payment credentials.
We never sell your email, phone, resume, or GitHub code to commercial brokers, spammers, or ad networks.
Your uploaded PDF resumes are stored on private NVMe storage with HMAC-SHA256 authenticated streaming tokens.
Under DPDP Sec. 12 & GDPR Art. 17, purge your account anytime and all database records are irreversibly wiped.
This notice accompanies the collection of personal data by Role Nest (Operated by RitualDev Lab / Divyanshu Jethi), acting as a Data Fiduciary. Registered Office: Sector 62, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301, India. Email: [email protected] / [email protected].
1. Itemised Personal Data We Collect
When you access Role Nest as a student, fresher, or recruiter, we collect only strictly necessary data:
- Identity & Authentication: Full Name, email address, and profile picture (retrieved via authenticated OAuth providers Google, GitHub, or LinkedIn).
- Candidate Profile: Technical skills, target roles, preferred work locations, and educational history.
- Proof-of-Work & GitHub Metadata: When authenticating via GitHub or verifying project ownership, we store read-only public repo metadata (commits, PRs, languages) to compute your tamper-proof Dev Score. We never request write permissions or access private repositories without explicit consent.
- Resume Files & Extracted Data: Uploaded PDF resumes and ATS builder outputs are encrypted on private NVMe storage with HMAC-SHA256 authenticated streaming tokens. Resumes are NEVER shared with third-party data brokers, ad networks, or scrapers.
- Code Submissions & Sandboxing: Daily Coding Problems (POTD) and Monaco code runs are executed in client-side Web Worker sandboxes. Your code submissions are evaluated locally and are never harvested to train commercial AI systems.
- Course Completion Data: Course milestones, completion timestamps, and generated cryptographic certificate hashes.
2. Payment Data & Payment Aggregator (Cashfree Payments)
Payment Aggregator: All digital transactions on Role Nest are processed securely by Cashfree Payments India Pvt. Ltd., an RBI-licensed Payment Aggregator operating in compliance with Reserve Bank of India (RBI) payment and settlement directives.
Zero Card Storage on Role Nest: When you purchase Role Nest Pro or an Employer Boost, your payment credentials (credit/debit card numbers, CVV, expiry dates, NetBanking credentials, and UPI information) are entered directly into Cashfree's RBI-compliant and PCI-DSS Level 1 certified secure checkout component.
Role Nest NEVER receives, processes, or stores your raw card numbers, CVVs, or UPI PINs. Role Nest only receives an encrypted customer ID, payment session token, order ID, and transaction confirmation from Cashfree via secure server webhooks to activate your digital features.
Cashfree's processing of your data is governed by the Cashfree Privacy Policy. Cashfree Payments India Pvt. Ltd. is headquartered in Bengaluru, Karnataka, India.
3. Specified Purpose of Processing (DPDP Sec. 5(1)(a))
Your personal data is processed solely for explicit, lawful purposes:
- Matching your skill profile to verified fresher job and internship postings.
- Conducting automated skill diagnostic tests and gap-to-offer roadmaps.
- Delivering your application securely to the hiring manager when you click “Apply”.
- Issuing cryptographic proof-of-work completion diplomas for Role Nest curricula.
- Sending transparent application status alerts (Anti-Ghosting Wall).
4. Data Principal Rights (DPDP Sections 11, 12, 13 & 14 & GDPR)
You can request a summary of your personal data processed by Role Nest. You can instantly download a complete JSON export of your profile, applications, and certificates via Settings > Account > Download My Data.
You have the right to correct inaccurate data or completely erase your personal data once the purpose of processing is fulfilled. 1-click permanent erasure is accessible at Settings > Account > Delete My Account.
Under Section 14 of the DPDP Act 2023, you can nominate an individual who shall exercise your Data Principal rights in the event of death or incapacity. You can register your nominee in Account Settings.
5. Protection of Children and Minors (DPDP Sec. 9)
Role Nest is an engineering career platform intended for adults, college students, and aspiring software professionals. We do not engage in targeted advertising directed at children, nor do we track behavior or process personal data of individuals under 18 years without verifiable parental/guardian consent.
6. Grievance Redressal Officer & Contact SLA (DPDP Sec. 13)
In compliance with Section 13 of the Digital Personal Data Protection Act, 2023, Role Nest has appointed a designated Grievance Redressal Officer to address complaints, data rights requests, and security disclosures.
Data Protection & Grievance Redressal Officer
• Acknowledged within: 72 Hours
• Final Resolution within: 30 Days
Sector 62, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301, India
7. Technical Safeguards & Security Standards
We maintain state-of-the-art organizational and technical measures: AES-256 and HMAC-SHA256 encryption, role-based database permissions, NVMe private token gating, and automated threat logs. In the unlikely event of a personal data breach, Role Nest will notify the Data Protection Board of India and affected Data Principals in the prescribed statutory format.