How we handle candidate data
Privacy notice for job applicants · Last updated 30 July 2026
This page explains, in plain language, what happens to the information you give us when you apply for a role at Pinaca. It is written for candidates — not lawyers — and it is the notice required by India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Who is collecting your data
Pinaca Labs Private Limited, 1st floor, Orchid Center, Golf Course Road, Sector 53, Gurugram, Haryana, 122002. When we say “we” on this page, that is who we mean.
What we collect, and why
| What | Why |
|---|---|
| Name, email, phone | To identify your application and to reach you. |
| Resume, or a profile link you choose to share | To assess your fit for the role you applied to. |
| Your answers on the form — compensation expectation, notice period, location, and the role question | So we can shortlist from what you told us, rather than making you repeat it on a call. |
| Technical basics (a hashed network identifier, browser type) | To keep the form working and to stop abuse. We store a one-way hash, not your raw IP address. |
We collect this with your consent, which you give by ticking the consent box before submitting. We do not buy data about you, and we do not use your application for anything other than hiring.
How long we keep it
Twelve months from the date we make a decision on your application. If you are hired, your application becomes part of your employment record instead. If you ticked the box asking us to keep you in mind for future roles, we keep it for twenty-four months and then delete it. Copies inside backups expire within six months of deletion.
Who sees it
- The Pinaca hiring team — the people interviewing you for the role you applied to. Nobody else at the company browses applications.
- Our infrastructure providers, as processors: Google Cloud (storage, in the Delhi region) and Google Workspace (email and the team's working view of the pipeline). They store it; they have no right to use it.
- Nobody else. We do not sell, share, or transfer candidate data to anyone for their own purposes.
Your rights
Under the DPDP Act you can ask us, at any time:
- What we hold about you — we will send you a copy.
- To correct it — reply to any email from us with the correction.
- To delete it — we remove your resume and personal details from our systems. Some routine processing logs persist for up to a year, as the law's record-keeping rules require.
- To withdraw consent — same effect as deletion; your application simply stops being considered.
Write to privacy@pinaca.org for any of these. Mehak Gupta is our grievance contact — deliberately not the person who makes hiring decisions, so a complaint about a decision is never reviewed by the person who made it. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
One honest caveat: if you email us your resume directly or send it over LinkedIn instead of using this form, it arrives outside these systems. We bring it into the same pipeline — same retention clock, same rights — as soon as a human sees it, but the clock starts when we log it, not when you sent it.
No automated decisions
No application is rejected by software. Every decision on this pipeline is made by a person — usually the person you would be working for.