Privacy Policy

Last updated: 1 November 2026

This policy explains what personal data EffJobs collects, why we collect it, who we share it with, and the choices you have. We have written it in plain English so it is easy to follow.

Who we are

effjobs.com ("EffJobs") is a job-search service run by Heurystix Technologies Private Limited ("Heurystix", "we", "us"). Heurystix is the Data Fiduciary for personal data collected through EffJobs. That means we decide how and why the data is used.

• CIN: U62011MR2026PTC478517
• Registered office: Shop-10, Bhoomi Acres Phase 2, Hiranandani Estate, Kasarvadavali, Thane 400615, Maharashtra, India
• Phone: +91 98338 33378
• Contact: Vinod Narasimhan, Director, vinod@heurystix.com

What EffJobs does, in short

You create an account and tell us about yourself and the jobs you want. Our AI tools look for matching jobs and draft a tailored cover note for each one. We add them to your private tracker, which only you can see when you are logged in. You decide whether to apply, and you always submit applications yourself. We never apply on your behalf.

What we collect

1. Account details. Your email address and a password. We store passwords only in hashed (scrambled) form, so we cannot read them.

2. Profile details from the onboarding form.

• your name;
• your phone number, if you choose to give it (optional);
• your CV (PDF or DOCX), and everything in it, such as your work history, education, skills and any other details you include;
• the roles you are targeting;
• the locations you want to work in, whether you are open to relocation, and whether you need visa sponsorship or have the right to work in a location (your visa or work-authorisation status);
• your expected salary and, only if you choose to share it, your current salary, with currency;
• your notice period; and
• your preferred work mode (for example, office, hybrid or remote).

Current salary is optional, and we never ask for your salary history. Please do not put details in your CV that we do not need, such as identity numbers, health information, religion or caste.

3. Tracker activity. The jobs added to your tracker, the cover notes drafted for you, the status you set for each job (such as Applied, Interview, Offer, Rejected or Skipped) and any notes you write.

4. Technical data. When you use the site, our servers record basic technical information, such as your IP address, browser and device type, the date and time of your visit, and login and security events. We need this to keep your account secure, to stop abuse and to fix problems.

Why we use it

We use your data only to run EffJobs for you:

• to create and secure your account and let you log in;
• to find jobs that match your roles, locations, salary, notice period, work mode and visa needs;
• to draft cover notes for those jobs, based on your CV and preferences;
• to show all of this in your private tracker and let you update it;
• to give you support and answer your questions;
• to check and improve the quality of our job matches and drafts for you; and
• to keep the service secure, prevent fraud and misuse, and meet our legal obligations.

If you tick the separate box for product updates, we will also email you about new EffJobs features. You can turn these off at any time in Settings.

We do not sell your personal data. We do not use it for advertising, and we do not use it for any purpose unrelated to helping you find a job.

Consent and the legal basis

We process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules). The Rules were notified on 13 November 2025 and come into force in phases. Most duties on Data Fiduciaries, including Rules 3 and 5 to 16 on notice, security, breach reporting, retention and your rights, apply from 13 May 2027. We follow them now.

Our legal basis is your consent (Section 6 of the DPDP Act). You give it by ticking clearly labelled boxes that are never ticked in advance:

• when you create your account: one box to accept our Terms of Use and this Privacy Policy and confirm you are 18 or older;
• on the onboarding form, where you share your CV and details: one box to allow us to process your CV and profile, including with AI, to find jobs and draft cover notes (we need this consent to provide the service), and an optional box for product update emails.

We do not collect your CV or profile details until you have given the onboarding consent.

We may also use limited data without consent where the law allows it, for example to comply with a legal obligation or a court order (Section 7 of the DPDP Act).

Withdrawing consent. You can withdraw your consent at any time, and doing so is as easy as giving it: one click and one confirmation in Settings. There you can withdraw consent to processing of your CV and profile, turn product emails off, or delete your account. If you can't log in, email vinod@heurystix.com for help, and we will do it for you once we have confirmed your identity. If you withdraw consent to processing of your CV and profile, we stop finding jobs and drafting notes for you straight away, and we delete that data as described under "How long we keep it". Withdrawal does not affect anything we did before you withdrew.

How we use AI

EffJobs uses AI models to read your CV and preferences, suggest jobs that may suit you, explain why each one fits, and draft a cover note for each job.

• Suggestions, not decisions. The AI only suggests jobs and drafts text. Heurystix does not use it to make decisions about you, such as rating you for employers. Employers make their own hiring decisions on their own systems.
• You stay in control. Every cover note is a draft. Please review and edit it before you use it, because AI can get facts wrong. You choose whether to apply and you click submit yourself.
• People may check the output. Authorised Heurystix staff may look at your profile, tracker and drafts to check quality, fix errors and help you. Access is limited to people who need it.
• No training of third-party models. We do not allow the AI model providers we use to train their models on your data. We do not sell your data or license it for training.
• AI model providers. We send your CV and preferences to AI model providers through their business services, under terms that limit their use of the data to processing it for us. You can ask us at any time which providers we currently use.

Who we share data with

We do not share your CV or profile with employers, recruiters or anyone else unless you choose to apply for a job (in which case you send your application yourself) or you specifically ask us to share it.

We share data only with service providers (Data Processors) that help us run EffJobs, under contracts that require them to protect it and use it only on our instructions:

• Railway: hosts the EffJobs website, database and file storage, including uploaded CVs.
• Google: Google Workspace, our email provider. It handles emails between you and us, and internal notices to our team when a new account is created.
• AI model providers: process your CV and preferences to match jobs and draft cover notes, as explained above.

We may also disclose data if the law, a court or a government authority requires it, or to protect the rights, safety or property of our users or Heurystix.

Data stored outside India

Railway and our AI model providers may store or process data outside India. Section 16 of the DPDP Act allows this unless the Government of India restricts transfers to a particular country. We will follow any such restriction.

How long we keep it

• While your account is active: we keep your account, profile, CV and tracker so we can provide the service.
• When you delete your account or withdraw consent in Settings: we delete your account, profile, CV and tracker within 30 days. Copies in our backups are deleted within 90 days.
• Inactive accounts: if you do not log in for 24 months, we will delete your account. We will email you at least 30 days before we do, so you can log in to keep it.
• Records we must keep: the DPDP Rules (Rule 8(3)) require us to keep logs of processing, such as security and access logs, for at least one year. We keep these logs only for that purpose and then delete them. We may also keep data for longer if another law requires it or to deal with a legal claim.

How we protect it

We use reasonable security safeguards, as Section 8(5) of the DPDP Act and Rule 6 of the DPDP Rules require. These include encrypted (HTTPS) connections, hashed passwords, private storage for CVs, rate limiting and other protections on logins and forms, access limited to the people who need it, staff accounts protected by strong passwords and two-factor authentication, and logs of access to personal data.

No system is completely secure. If a personal data breach affects you, we will tell you without delay, explaining what happened, the likely impact and what you can do. We will also report it to the Data Protection Board of India, as Rule 7 of the DPDP Rules requires.

Your rights

Under the DPDP Act, you have the right to:

• Access: ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
• Correction and updating: fix inaccurate or incomplete data. You can update your profile, CV and tracker yourself in your account, or ask us to do it.
• Erasure: delete your account in Settings, and we delete your data unless the law requires us to keep it.
• Withdraw consent: at any time in Settings, as explained above.
• Nominate: name someone who can exercise your rights if you die or become unable to act.
• Grievance redressal: complain to us about how we handle your data.

You can correct your details, withdraw consent and delete your account yourself in Settings. To ask for a summary of your data, nominate someone or raise a grievance, or if you can't log in, email our grievance officer below. We may need to confirm your identity first.

Grievance officer

Vinod Narasimhan, Director Email: vinod@heurystix.com Phone: +91 98338 33378 Address: Shop-10, Bhoomi Acres Phase 2, Hiranandani Estate, Kasarvadavali, Thane 400615, Maharashtra, India

We will acknowledge your request or complaint within 7 days and resolve it within 30 days. In any case, we will respond well within the 90-day maximum set by the DPDP Rules, 2025.

If you are not satisfied with our response, you can complain to the Data Protection Board of India. The law asks you to raise the issue with us first.

Your duties

The DPDP Act also asks users not to give false information and not to impersonate anyone. Please upload only your own CV and details. Do not upload anyone else's personal data.

Children

EffJobs is only for people aged 18 or over. You must confirm that you are 18 or older when you sign up. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has created an account, we will delete it. If you think this has happened, please contact us.

Cookies

EffJobs uses only essential cookies. These keep you logged in, protect forms against forgery (CSRF) and remember basic security settings. The site cannot work without them, so we do not ask for consent to use them. We do not use analytics, advertising or tracking cookies. If that changes, we will update this policy and ask for your consent first.

Changes to this policy

We may update this policy from time to time, for example when we add new features or the law changes. We will post the new version on this page and change the "Last updated" date. If a change is significant, such as a new purpose for your data, we will tell you by email or in your account, and we will ask for your consent again where the law requires it.

Contact us

Questions about this policy? Email vinod@heurystix.com or call +91 98338 33378.