Privacy Policy.

01 Who this applies to

This Privacy Policy applies to Kaam Hire, a product operated by Kaam.com at hire.kaam.com. We are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDPA”) for the personal data described below.

The policy covers three groups:

• Customers — the organisations and their users who hold an account with us (HR managers, recruiters, hiring leads).
• Candidates — individual hospitality professionals whose profiles appear in the Talent Pool or are uploaded into a Customer’s private workspace.
• Website visitors — anyone browsing our public pages without an account.

02 What we collect

From Customers

From and about candidates

Candidate data may reach us in three ways: (i) uploaded directly by a Customer into their private workspace, (ii) entered by the candidate themselves through a public career page, status portal, or assessment link, or (iii) sourced by Kaam Hire from public hospitality talent feeds and added to the shared Talent Pool.

From visitors

On public pages we use a session cookie strictly necessary to operate the signup form and remember language / display preferences. We do not deploy advertising or cross-site tracking cookies.

03 How we use it

We use personal data to:

• Create and operate your Customer account, including verifying your email address.
• Provide the ATS workspace: store your jobs, candidates, pipeline, communications, interviews, offers, and onboarding records.
• Surface candidates from the Talent Pool that match your job requirements, using AI-assisted scoring.
• Send transactional messages (verification, payment receipts, password resets, digest emails, system notifications) via Brevo.
• Process subscription payments and renewals via Razorpay, and issue GST invoices.
• Detect, investigate, and prevent abuse, fraud, or security incidents.
• Comply with legal obligations and respond to lawful requests from public authorities.
• Improve the platform — in aggregate or de-identified form — for example, refining matching algorithms or measuring feature usage.

We do not sell personal data, and we do not use Customer Data or candidate data to train external AI models that are not part of providing the service to you.

04 Lawful basis

Under the DPDPA, we process personal data on the following bases:

• Consent — you agree to these Terms and Privacy Policy at signup; candidates who self-submit through career pages or assessment links consent at that point.
• Performance of a contract — we need to process your account, payment, and workspace data to provide the service you subscribed to.
• Legitimate use — to secure the platform, prevent abuse, and operate the shared Talent Pool that is the core value of the product.
• Compliance with law — tax, accounting, and any cooperation with lawful regulatory or judicial requests.

05 The shared candidate pool

A defining feature of Kaam Hire is that some candidate profiles are shared across all Customers within their access tier. This is how the product delivers value — you can search and surface candidates contributed across the whole hospitality ecosystem rather than only your own pipeline.

However, the boundary is clear:

• A candidate’s profile attributes in the Talent Pool are visible to other Customers within their access tier (VIP-tier profiles are gated to VIP-eligible Customers).
• Your interactions with a candidate — whether you revealed their contact, your notes, your messages, your pipeline stage, your scorecards — are private to your workspace. Other Customers cannot see them.
• Candidates that you upload yourself into your own workspace remain private to your workspace and are not contributed to the Talent Pool, unless you explicitly choose to publish them.

06 Third-party processors

We use the following sub-processors. Each is bound by its own privacy and security commitments; we share only the data each needs to perform its function:

We review our sub-processor list periodically. Where a change is material we will update this page.

07 International transfers

Kaam Hire primary infrastructure (the application, the database, file uploads) is hosted in India by Hostinger. Some sub-processors operate from outside India — notably OpenAI (United States) and Brevo (European Union / France).

Where personal data is transferred outside India we rely on the receiving processor’s contractual commitments to handle data to a comparable standard. The DPDPA does not currently restrict the countries to which personal data may be transferred, subject to any future notification by the Central Government.

08 Retention

We retain personal data only for as long as it is needed:

• Active accounts — for the duration of your subscription.
• Customer Data after termination — available for export for 30 days after termination, after which it is deleted or anonymised, except where we are required by law to keep specific records (for example, invoices for 8 years under the Goods and Services Tax law).
• Email logs and security logs — up to 12 months.
• Talent Pool profiles — for as long as the profile remains useful to Customers, subject to a candidate’s right to request erasure under section 11.
• Backups — may persist for an additional period until rotated.

09 Security

We take reasonable and proportionate measures to safeguard personal data, including:

• HTTPS for all traffic to and from the platform.
• Passwords stored as one-way hashes; never in plain text.
• Session cookies marked secure and HTTP-only, scoped to hire.kaam.com.
• Database-backed sessions with rotating IDs.
• Role-based access controls inside the application; staff access is limited to a small operations team.
• Audit logs of significant events.

No system is perfectly secure. In the event of a data breach involving personal data of significant impact we will notify affected Customers and the Data Protection Board of India as required by law.

10 Cookies & analytics

Kaam Hire uses only strictly necessary cookies to operate the service — primarily the session cookie kaamhire_session that keeps you logged in. We do not use third-party advertising cookies, fingerprinting, or cross-site tracking. We may use lightweight first-party logs to measure aggregate platform usage and detect errors.

11 Your rights

Under the DPDPA you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is being processed.
• Correction & update — request that inaccurate or incomplete data be corrected.
• Erasure — request that we delete personal data we no longer need to hold, subject to legal retention obligations.
• Withdraw consent — where processing relies on your consent, you may withdraw it at any time.
• Nominate — appoint a nominee to exercise these rights on your behalf in the event of your death or incapacity.
• Grievance redressal — raise a complaint with our grievance officer (see section 15), and escalate to the Data Protection Board of India if you are not satisfied.

To exercise any of these rights, write to rishi@kaam.com with the subject “Data Request” and enough information for us to identify you. We aim to respond within 30 days.

12 Notice to candidates

If you are a hospitality professional and your profile appears in the Kaam Hire Talent Pool, this notice is for you.

• Your profile may have been sourced from public hospitality talent listings, uploaded by an employer or agency, or submitted directly by you through a Kaam Hire career page, status portal, or assessment link.
• Kaam Hire Customers (employers and recruiters) may search and view your profile attributes within their access tier. They unlock your contact details only by spending a paid unlock from their quota, at which point they may contact you about a job opportunity.
• You may request to view, correct, or remove your profile at any time by writing to rishi@kaam.com. We will action verified requests within 30 days.
• If you receive a message from a Customer through Kaam Hire that you consider unwanted, you may report it to us at the same address and we will investigate.

13 Children

Kaam Hire is not intended for individuals under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you become aware of a profile that belongs to a minor, please notify us at rishi@kaam.com and we will remove it.

14 Changes

When we materially change this policy we will update the “Last updated” date at the top of the page and, where appropriate, notify Customers by email at least 14 days before the change takes effect.

15 Contact & grievance officer

For privacy questions, data requests, or to file a grievance:

If you remain dissatisfied with our response you may approach the Data Protection Board of India as constituted under the DPDPA.