This policy explains what personal data AcadeXMatch collects, why, and the choices you have. It follows the principles of the Digital Personal Data Protection Act, 2023 (DPDP Act).
What we collect
- Account details: name, email address, mobile number, role, and for institution staff the institution you work for.
- Sign-in data: a salted hash of your password (never the password itself); if you use Google or Microsoft, their account id and the email they share (never your Google or Microsoft password); the browser type and network address of sign-ins, used for security alerts.
- Profile and applications: the qualifications, experience, publications, documents and answers you add, and the applications you make.
- Payments: payment records from Razorpay (we do not receive or store card numbers).
- Messages: a record of the emails and SMS codes we send you (without the codes or links themselves).
Why we use it
- To run your account, keep it secure and let you sign in and recover it.
- To match candidates with vacancies and to share your application with the institution you apply to.
- To send the emails you need (confirmations, application and interview updates) and the alerts you choose. News and offers are sent only if you opt in.
- To meet legal obligations and to prevent fraud and abuse.
Who receives it
- The institution you apply to (and its selection committee) sees your application and profile. If you switch on talent search, verified institutions can find your profile.
- Service providers who process data for us: our hosting provider (GoDaddy), our email delivery provider, our SMS provider, Razorpay for payments, and Google or Microsoft if you choose to sign in with them.
- We do not sell personal data.
Your choices and rights
- Change which emails you receive on your notification settings page. Every optional email has an unsubscribe link. Security emails (for example password changes) are always sent.
- Access, correct or erase your data, or withdraw consent, from your account or by writing to info@acadexmatch.com. You may also complain to the Data Protection Board of India.
Security and retention
Data is sent over HTTPS and stored in a managed database. Passwords, one-time codes and reset links are stored only as one-way hashes. We keep account data while your account exists and delete or anonymise it when you ask us to erase it, except where the law requires us to keep records (for example invoices).
Cookies
We use one essential cookie to keep you signed in, and a short-lived cookie during Google or Microsoft sign-in. Analytics cookies are used only if analytics is switched on for the site.
Contact
Questions or requests: info@acadexmatch.com.