Sarthi Associates logo
Sarthi Associates
Categories
Back to home
Sarthi Associates · Legal

Privacy Policy

Last updated: 10 February 2026

Sarthi Associates ("Sarthi", "we", "us" or "our") respects your privacy. This Privacy Policy explains how we collect, use, share and safeguard your personal data when you use https://www.sarthiassociates.com and any related mobile or web application (the "Platform"). This Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian laws.

1. Scope & consent

1.1 By registering, accessing or using the Platform, you confirm that you have read and understood this Policy and consent to the collection, storage, processing and disclosure of your personal data as described herein.

1.2 If you are under 18 years of age you must not use the Platform. Certain sections (e.g. industrial roles) may require you to be 21 or older per site regulations.

1.3 You may withdraw your consent at any time by writing to us at contact@sarthiassociates.com. Withdrawal may result in your inability to use certain features.

2. Data we collect

2.1 Personally Identifiable Information (PII)

  • 2.1.1 Name, mobile number, email address, WhatsApp opt-in preference
  • 2.1.2 Location (city, state) and address (for on-site mobilisation)
  • 2.1.3 Employer / Company name and GST number (for business partners)
  • 2.1.4 Photograph (optional, when you upload a profile picture)

2.2 Professional information

  • 2.2.1 Trade / skill category, years of experience, certifications
  • 2.2.2 Resumes, testimonials, past employer details (when uploaded)
  • 2.2.3 Salary expectations, current CTC (voluntarily submitted during job application)

2.3 Authentication & security data

  • 2.3.1 Password hashes (bcrypt — never stored in plain text)
  • 2.3.2 One-Time Passwords (OTPs) delivered via SMS / WhatsApp with a 5-minute time-to-live
  • 2.3.3 Session tokens and login attempts (used for brute-force protection)

2.4 Technical & usage data

  • 2.4.1 IP address, browser, operating system, device identifiers
  • 2.4.2 Pages visited, jobs viewed, applications submitted (aggregated analytics)
  • 2.4.3 Cookies and similar technologies (see our Cookie Policy)

3. How we use your data

  • 3.1 To operate the Platform — match candidates with employers, verify identities, prevent fraud
  • 3.2 To send transactional emails / SMS (OTP, application status, welcome, password reset, payment receipt)
  • 3.3 To send promotional communications where you have opted in — you can opt out at any time
  • 3.4 To publish anonymised industry insights (median salary per trade / city) — data is aggregated and never identifies individuals
  • 3.5 To comply with applicable law and respond to lawful requests by authorities

4. Legal basis for processing

4.1 We process your data on the basis of your consent (Section 6, DPDP Act), our legitimate business interests, and to comply with legal obligations under Indian law.

5. Data retention

5.1 Active account data is retained for as long as you use the Platform.

5.2 Inactive accounts are archived after 24 months of no login activity.

5.3 On account deletion, personal data is deleted within 30 days, except where retention is required by law (e.g. tax records for 8 years under Rule 6, Income Tax Rules).

5.4 OTPs are auto-deleted 24 hours after creation. Login-attempt records are auto-deleted 24 hours after the last failed attempt.

6. Data sharing & third-party disclosures

6.1 We do not sell your personal data. We share only the minimum information necessary with the following categories of trusted partners:

  • 6.1.1 Recruiters / employers — your profile is visible to verified business partners when you apply to their job
  • 6.1.2 Payment processors — Razorpay Software Private Limited and (where enabled) Stripe Payments India for premium plan and consultancy bookings
  • 6.1.3 Communication providers — Twilio Inc. (SMS / WhatsApp / OTP) and Twilio SendGrid (transactional email)
  • 6.1.4 Analytics & advertising — Google Analytics and Google AdSense (see Cookie Policy). Advertising cookies serve personalised ads via these providers subject to your consent
  • 6.1.5 File storage — Emergent Storage (resumes, uploaded documents)
  • 6.1.6 AI-assisted features — where you use AI resume-screening, AI-generated cover letters, or similar features, sanitized content may be transmitted to Anthropic, OpenAI or Google as model providers under enterprise data-processing terms
  • 6.1.7 Industrial certifications — with your explicit consent, we may share skill-verification data with certifying bodies (e.g. NSDC, ITI institutes) to fast-track your credentials

6.2 Future integrations. By continuing to use the Platform, you consent to Sarthi engaging additional third-party partners that support similar functions (advertising, payments, communications, AI, certifications), provided such partners commit to at least equivalent data-protection standards.

6.3 Legal disclosures. We may disclose data when required by a court order, regulatory authority, or to protect the safety of any person.

7. Data security

7.1 We use industry-standard safeguards — TLS 1.3 in transit, encrypted databases at rest, bcrypt-hashed passwords, httpOnly + Secure + SameSite=Lax authentication cookies, IP-based rate limiting and brute-force lockout (5 failed logins ⇒ 15-minute lockout).

7.2 Despite reasonable precautions no method of electronic storage is 100% secure. Should a breach occur, we will notify affected users and the Data Protection Board of India as required under Section 8(6) of the DPDP Act.

8. Your rights under the DPDP Act

  • 8.1 Right to access the personal data we hold about you
  • 8.2 Right to correction of inaccurate or incomplete data
  • 8.3 Right to erasure of your data (subject to legal retention obligations)
  • 8.4 Right to grievance redressal — see clause 12 below
  • 8.5 Right to nominate — you may designate another individual to exercise these rights in the event of your death or incapacity

To exercise any of these rights write to contact@sarthiassociates.com. We will respond within 30 days.

9. Cross-border transfers

9.1 Some of our processors (e.g. SendGrid, Google, Anthropic) may process data outside India. We ensure such transfers are subject to contractual safeguards consistent with the DPDP Act.

10. Cookies

10.1 We use essential, analytics and advertising cookies. See our detailed Cookie Policy. A consent banner is displayed on first visit.

11. Children

11.1 The Platform is not intended for individuals under 18. We do not knowingly collect data from minors. If we discover such data has been collected we will delete it promptly.

12. Grievance Officer

12.1 In accordance with Rule 5(9), IT Rules 2011 and Section 8(6), DPDP Act, our designated Grievance Officer is:

  • Name: Mr Sanjay Singh Yadav, Managing Director
  • Email: cmd@sarthiassociates.com
  • Phone: +91 91318 47732
  • Address: Sarthi Associates, Noida, Uttar Pradesh 201301, India
  • Response time: acknowledgement within 24 hours · resolution within 15 days

13. Changes to this Policy

13.1 We may update this Policy from time to time. The "Last updated" date at the top reflects the current version. Continued use after any change constitutes acceptance.

14. Governing law & jurisdiction

14.1 This Policy is governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of the courts at Noida, Uttar Pradesh.