Back

Privacy Policy

Last updated: March 21, 2026

1. About This Policy

VerdeShell ("we", "us", "our") operates a cloud-based Talent Acquisition and Interview Management Platform. The Career Portal ("Portal") is the candidate-facing side of this platform. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Portal.

By creating an account or using the Portal, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, and password (encrypted).
  • Profile Information: Professional summary, work experience, education, skills, certifications, languages, and portfolio links.
  • Documents: Resumes, cover letters, certificates, and other files you upload.
  • Application Data: Job applications you submit, answers to screening questions, and messages to employers.
  • Interview Data: Interview availability, responses, and any feedback you provide.
  • Demographics (Optional): Date of birth, gender, citizenship country, and work authorization status.
  • Career Preferences: Expected salary, preferred work locations (multiple), work mode, notice period, and job type preferences.
  • Messages: Messages you send to recruiters through the in-app messaging feature.

2.2 Automatically Collected Data

  • Usage Data: Pages visited, features used, search queries, timestamps, and interaction patterns.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Log Data: Server logs for security monitoring and debugging.
  • Push Notification Tokens: Device tokens for delivering notifications on mobile devices (only when you grant permission).

3. How We Use Your Information

  • Facilitating Applications: To share your profile and application with the specific employer whose job you applied to.
  • Portal Operations: To provide, maintain, and improve the career portal services including job discovery, application tracking, and interview scheduling.
  • Authentication & Security: To verify your identity, manage your session, and protect against unauthorized access and fraud.
  • Communications: To send you application status updates, interview invitations, and service-related notifications.
  • Analytics & Improvement: To understand usage patterns and improve the Portal's features and experience.
  • Legal Compliance: To comply with applicable laws, enforce our terms, and respond to legal requests.

4. How Your Data Is Shared

We do not sell your personal information to anyone.

4.1 With Employers — When You Apply

When you apply for a job, the following data is shared with the specific organization that posted the job:

  • Your profile information (name, contact details, professional summary)
  • Your resume and uploaded documents
  • Your application responses and any screening question answers
  • Interview feedback and assessment data related to that application

Your data is only shared with the organization you applied to. It is not visible to any other organization on the platform.

4.2 Important: What Happens After Employers Access Your Data

Employers who access your data through the Platform are contractually bound by our Terms & Conditions to use it only for legitimate hiring purposes. However:

  • VerdeShell cannot control how an Employer uses, stores, or handles your data within their own internal systems after they have accessed it through the Platform.
  • We cannot guarantee that every Employer will comply with their data handling obligations.
  • You should review the Employer's own privacy policy and practices before sharing sensitive personal information.

If you believe an Employer has misused your data, report it to report@verdeshell.com.

4.3 With Service Providers

We use trusted third-party providers to operate the Portal:

  • Cloud hosting and document storage (AWS)
  • Email delivery services

These providers process data only on our instructions and are contractually bound to protect it.

4.4 Legal Requirements

We may disclose information when required by law, court order, government request, or to protect the rights, safety, or property of VerdeShell, our users, or the public.

5. Data Storage & Security

  • Data is stored on secure servers hosted on AWS (Amazon Web Services) with encryption at rest and in transit (TLS/SSL).
  • Passwords are stored using industry-standard one-way hashing — we never store plain-text passwords.
  • Authentication uses JWT (JSON Web Tokens) with RSA-256 encryption, short-lived access tokens (15 minutes), and long-lived refresh tokens (30 days).
  • Documents (resumes, certificates) are stored on AWS S3 with strict access controls and bucket policies.
  • Access to production systems and personal data is restricted to authorized personnel only, with audit logging.

6. Data Retention

  • Active Accounts: We retain your data for as long as your account is active and as needed to provide services.
  • Deleted Accounts: Upon account deletion, your personal data is removed within 30 days. Some data may be retained longer if required by law (e.g., fraud prevention).
  • Applications: Your application data is retained for the duration of the hiring process and for a reasonable period thereafter, unless you request earlier deletion.
  • Shared Data: Data that has already been accessed by Employers through the Platform cannot be recalled or deleted from their systems by VerdeShell.
  • Logs & Analytics: Anonymized usage data may be retained indefinitely for analytics and platform improvement.

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data held by us.
  • Correction: Update or correct inaccurate personal information through your profile settings or by contacting us.
  • Deletion: Request deletion of your account and associated personal data.
  • Portability: Request your data in a machine-readable format.
  • Withdraw Consent: Withdraw consent for data processing at any time. Note: withdrawing consent may affect your ability to use the Portal.
  • Opt-Out: Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at privacy@verdeshell.com. We will respond within 30 days.

Account & Data Deletion

You can request deletion of your account and all associated personal data at any time. Upon deletion:

  • Your profile, resume, documents, and all personal information will be permanently deleted within 30 days.
  • Your applications and interview data will be anonymized and disassociated from your identity.
  • Data already accessed by employers cannot be recalled from their systems.
  • Anonymized, aggregated analytics data may be retained.

To request account deletion, email privacy@verdeshell.com with the subject "Account Deletion Request" from your registered email address.

8. Cookies & Local Storage

  • We use essential cookies and localStorage for authentication, session management, and remembering your preferences.
  • We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.
  • You can clear cookies and localStorage through your browser settings, though this will require you to log in again.

9. Children's Privacy

The Portal is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected data from a minor, we will delete it promptly.

10. International Data Transfers

Our servers are located in India (AWS ap-south-1 region). If you access the Portal from outside India, your data will be transferred to and processed in India. By using the Portal, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Portal at least 15 days before they take effect. Continued use of the Portal after such notice constitutes acceptance.

12. Contact Us

For privacy-related inquiries or to exercise your data rights: