Privacy Policy- RecruFlex

Effective Date: September 29, 2025
Entity: ResourceMojo Business Outsourcing Pvt. Ltd.
Brand: RecruFlex
Contact: contact@recruflex.app

1. Introduction

ResourceMojo Business Outsourcing Pvt. Ltd. (“ResourceMojo”, “RecruFlex”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, transfer, and safeguard information when you use our platform — RecruFlex — including its website, mobile applications, and other digital services (collectively, “Platform”).

This Policy is framed in accordance with:

  • Indian Law — Information Technology Act, 2000 and SPDI Rules.
  • European Union Law — General Data Protection Regulation (GDPR).
  • Canadian Law — Personal Information Protection and Electronic Documents Act (PIPEDA).
  • United States Law — Federal and State privacy frameworks including the California Consumer Privacy Act (CCPA).

2. Scope and Applicability

This Policy applies to:

  • Platform Users — individuals who visit, register, or use our platform.
  • Clients — businesses or organizations availing RecruFlex’s services.
  • Candidates — job applicants, talent pool members, and individuals whose data is processed for recruitment.
  • Team Members — employees, consultants, and contractors of ResourceMojo.

This Policy does not apply to third-party websites, services, or applications not controlled by RecruFlex.

3. Information We Collect

We collect various types of information to provide and improve our services, including:

3.1 Account & Contact Data

  • Name, email address, phone number, job title, company name.
  • Login credentials and authentication tokens.
  • Account preferences and communications.

3.2 Recruitment & Profile Data

  • Résumés, skills, employment history, education, qualifications.
  • Assessment results, interview notes, candidate scores.
  • Background verification data and references.

3.3 Sensitive Personal Data

  • Government-issued identification (Aadhaar, PAN, SSN, SIN, Passport).
  • Data related to diversity & inclusion (only if voluntarily disclosed).
  • Background verification outcomes.

3.4 Technical & Device Data

  • IP addresses, device IDs, browser type, operating system.
  • Platform usage logs, session duration, referral URLs.
  • Cookies, tracking pixels, analytics data.

3.5 Communications & AI Interaction Data

  • Messages sent through chatbots, help desks, or AI features.
  • Voice/text data from support interactions.
  • Feedback, surveys, and support requests.

4. How We Collect Data

  • Directly from you — when you sign up, fill forms, upload documents, or communicate with us.
  • Automatically — through cookies, analytics, and usage logs.
  • Third Parties — e.g. LinkedIn APIs, background verification vendors, payroll providers, job boards, or clients.

5. Purposes and Legal Bases

We process data for the following purposes, relying on legal bases depending on jurisdiction:

Purposes Example Legal Basis
Account registration & authentication Creating user accounts , managing credentials Consent/ Contract
Recruitment & Placement Candidate evaluation, client submissions Contract/ Legitimate Interest
Communications Sending Notifications, responding to queries Contract/ Legitimate Interest
Platform Operation & Security Monitoring logs, fraud detection, troubleshooting Legitimate Interest/Legal Obligation
Compliance Record-Keeping,Legal disclosures Legal Obligation
AI -Driven Personalization Matching candidates to jobs,improving algorithms Consent/Legitimate Interest
Marketing(Permitted regions only) Newsletters, Offers, Updates Consent

6.Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable core site functionality.
  • Analyze traffic and usage patterns.
  • Personalize user experience.
  • Support security and authentication

Users can control cookie preferences through browser settings. Disabling some cookies may impact Platform functionality.

7. How We Use Data

We use the information collected to:

  • Operate and maintain the Platform.
  • Match candidates with opportunities using AI algorithms
  • Provide services to clients and users
  • Comply with legal obligations.
  • Improve our services through analytics and anonymized AI model training
  • Protect against fraud, abuse, and security threats

8. AI Data Processing and Transparency

RecruFlex uses AI to assist in recruitment processes. We may use anonymized and aggregated data to train and improve our models.

We do not use identifiable personal data to train AI models without either:

  • (a) Anonymizing it fully, or
  • (b) Obtaining clear, informed consent.

We follow GDPR’s Article 22 principles for automated decision-making. Users may request human intervention for automated screening decisions.

9.Disclosure and Data Sharing

We may share data with:

  • Clients — for recruitment submissions and interviews (with your consent).
  • Vendors & Service Providers — background check firms, payroll processors, analytics providers, hosting providers.
  • Affiliates — within ResourceMojo group entities for operational purposes.
  • Legal & Regulatory Authorities — as required by applicable laws.
  • Third Parties during Business Transactions — e.g. mergers, acquisitions, due diligence.

All third parties are bound by appropriate confidentiality and data protection agreements.

10. International Data Transfers

Your data may be transferred and processed outside your home country, including to India, the EU, the US, and Canada.

We implement appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) for EU data.
  • Adequacy decisions (for Canada).
  • Binding contracts ensuring equivalent protection.

11. Data Retention and Deletion

We retain data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by law.

Typical retention periods:

  • Candidate profiles: up to 24 months (unless extended by consent)
  • Client and contract data: statutory retention period (7–10 years)
  • Technical logs: 6–18 months depending on purpose

Upon request, and subject to legal allowances, data may be anonymized or deleted.

12. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • India (SPDI Rules) — access and correction.
  • GDPR (EU) — access, rectification, erasure, restriction, objection, data portability, withdrawal of consent.
  • PIPEDA (Canada) — access, correction, withdrawal of consent.
  • US (CCPA) — right to know, delete, opt-out of sale, non-discrimination.

To exercise your rights, please contact contact@recruflex.app. We may verify your identity before fulfilling requests.

13. Security Measures

We use administrative, technical, and physical safeguards including:

  • Encryption (in transit & at rest)
  • Role-based access controls (RBAC)
  • Regular audits and penetration testing
  • Incident detection and response mechanisms

14. Children’s Privacy

Our Platform is not directed at children under 18. We do not knowingly collect data from minors. If we become aware of such a collection, we will delete the data promptly.

15. Policy Updates

We may update this Policy periodically to reflect legal or operational changes. Updated versions will be posted on our website with a revised effective date.

Where required by law, we will notify users in advance and seek renewed consent.

16. Contact Information

For privacy questions, concerns, or rights requests:

Email:contact@recruflex.app

Address :
ResourceMojo Business Outsourcing Pvt. Ltd.,
210, 2nd Floor, Marian Paradise Avenue, Kadri Hills,
Nantoor Junction, Bikkarnakatte Main Road, Mangalore – 575005,
India.