Privacy Notice

Effective Date: 5 October 2026

This Privacy Notice is issued by Xtensity Training Services Pvt Ltd. ("Xtensity", "we", "us", or "our") to explain how we collect, use, process, and protect your personal data in compliance with the Digital Personal Data Protection (DPDP) Act of India.

1. Data We Collect & Why (Itemised Purpose)

We only collect personal data that is necessary to match candidates with job descriptions (JDs) and manage recruiter subscriptions.

A. For Candidates (Job Seekers)

·Identity & Contact Data: Full name, email address, phone number, and current city.

·Purpose: To build your professional profile and enable matched recruiters to contact you.

·Professional & Educational Data: Resume/CV, work experience, skills, educational history, and portfolio links.

·Purpose: To run our automated matching system against active JDs uploaded by recruiters.

·Compensation & Availability Data: Your expected salary and your notice period, which we ask you to provide. Your current salary is optional and you may leave it blank.

·Purpose: To match you only against roles whose budget and joining timeline fit, so that you are not put forward for roles you would decline. Your expected salary is never shown to an employer who has not subscribed.

·Device & Usage Data: If you install our mobile app and allow notifications, a push token issued by Apple or Google that lets us send a message to that device. We also record which parts of the service you use — that a resume was uploaded, that a role was answered — against your account.

·Purpose: To tell you when an employer opens your application, and to find and fix faults. A push token identifies a device rather than a person, and is removed when you turn notifications off or delete your account.

B. For Recruiters & Corporate Representatives

·Professional Identity Data: Full name, corporate email address, mobile number, company name, and designation.

·Purpose: To verify your corporate account, prevent fraudulent job postings, and attribute JDs.

·Financial & Billing Data: Billing address, GSTIN (if applicable), and transaction history.

·Purpose: To process and manage your paid corporate subscription. Note: We do not store credit card or net banking credentials on our servers; these are handled by RBI-authorized third-party payment gateways.

2. Where We Process Your Data

Your data is stored in our primary database hosted in Mumbai, India.

To provide the matching service we also share profile and job description content with specialist service providers located outside India. They process it on our instructions and are contractually prohibited from using it for their own purposes:

·Artificial intelligence providers, which read documents to extract structured information and to assess how closely a candidate fits a role.

·A search technology provider, which converts profile text into the mathematical representations that power our matching.

These providers do not receive your contact details where this is avoidable, and do not retain your data to train their own systems.

3. Who We Share Your Data With

We strictly enforce a policy against selling user data. Your information is shared only under these conditions:

·Recruiters & Employers: A candidate's professional profile is visible to active, subscribed recruiters when a profile matches their active JD.

·Subscribed Corporates: Recruiters see candidate contact information only when a profile match is established or an application is submitted.

·Service Providers: We use third parties for cloud database and file hosting, application hosting, artificial intelligence document processing, search technology, payment processing, email and push notification delivery, and error monitoring that records faults so we can fix them. Each processes data only on our instructions.

4. Automated Matching

We use automated systems, including artificial intelligence, to read your resume, structure it into a profile, and assess how closely you match the roles employers post. These systems influence which roles you are shown and whether your profile is presented to a particular employer.

This assessment is a shortlisting aid, not a hiring decision. Every decision to interview, reject or employ you is made by the employer, not by Xtensity and not by our software. You can ask us for a summary of the data we hold about you and correct anything inaccurate, which will change how you are matched.

5. If A Recruiter Uploaded Your Resume

An employer using Xtensity may upload a resume you sent them directly, so that they can manage your application on our platform.

When that happens your details are visible only to that employer, and only for the specific role they uploaded you against — not to any other employer, not to other roles at the same employer, and not in our searchable candidate pool.

We may contact you to tell you this has happened, and you can ask us to delete your details at any time. If you would like to be considered for other roles, you can create an account, at which point your profile becomes yours to control.

5a. Interview Requests

An employer who shortlisted you, or whose role you applied to, can ask to meet you through Xtensity. When they do:

·We tell you, and we tell you which company is asking — their name, not a description. You cannot sensibly decide whether to attend an interview without knowing who it is with.

·They are NOT given your phone number or email address in order to ask. The request and your answer travel through us.

·If you accept, we provide a calendar file to both sides containing the time, the place or joining link, and the company name.

·Your contact details are released to that employer only if they separately choose to unlock them, which is recorded with the date it happened.

Declining tells the employer that you declined, and nothing else about you.

6. How We Contact You

We send two kinds of messages.

Service messages are part of the platform working: that a recruiter has shortlisted you, that your profile is incomplete, interview scheduling, billing and security notices. You cannot opt out of these while your account is open, because the service cannot be delivered without them.

Optional messages include newsletters, market insights, course recommendations and promotional offers. You choose whether to receive these when you sign up, you can change your choice at any time in your account settings, and declining them has no effect on your account or on how you are matched.

We reach you by email, by push notification if you use our mobile app and allow them, and by SMS. Push notifications can be turned off at any time in your phone's settings or in the app, and turning them off does not affect your account — we will still send service messages by email.

Where we contact you by SMS or messaging applications, we do so in accordance with applicable Indian telecom regulations.

7. Aggregate Research and Market Insights

We analyse platform data in aggregate to produce statistical insights about hiring — for example, typical salary expectations for a role in a city, typical notice periods, and which skills employers are currently seeking. We may publish these insights, share them with customers, or use them in marketing.

Published insights are always aggregated and anonymised. We do not publish anything that identifies you, your employer, or any individual employer using the platform, and we apply a minimum group size so that no published figure can be traced back to a single person. Your resume, your profile and your individual salary expectation are never published or sold.

8. Your Rights as a Data Principal

Under the DPDP Act, you possess the following rights, which you can exercise through your account settings or by emailing our Grievance Officer:

·Right to Access & Summary: Request a summary of your personal data currently being processed by Xtensity.

·Right to Correction & Erasure: Update inaccurate information or request the complete deletion of your account and professional data.

·Right to Withdraw Consent: You can withdraw your consent at any time. Withdrawing consent to the processing of your professional data will result in the closure of your account, because our matching service cannot function without it. Withdrawing consent to optional messages does not affect your account or how you are matched.

·Right to Export: You can download your data at any time from your account, as a readable document or as a machine-readable file.

9. How Long We Keep Your Data

We keep your profile while your account is active. If you do not log in or update your profile for a period of 8 years, we will contact you, and if you do not respond we will delete your profile and the documents you uploaded.

When you delete your account we remove your profile and documents within 30 days, except where we must keep records longer to meet a legal obligation — invoices and tax records in particular, which we retain for the period Indian tax law requires.

We keep a record that you gave consent, and which version of this notice you agreed to, after your account is deleted. We are required to be able to show that consent was given, and that record cannot serve its purpose if it is deleted with the account it concerns. It contains your account identifier, the version, and the date — not your profile or your resume.

Aggregated and anonymised statistics that can no longer identify you are not affected by deletion, because they are no longer personal data.

10. Restrictions on Children’s Data

Xtensity is a professional recruitment platform. We do not knowingly collect or process data from individuals under the age of 18. If we discover a minor has created an account, the data will be deleted immediately.

11. Grievance Redressal Mechanism

For any questions, tracking requests, or complaints regarding your personal data, please contact our designated Grievance Officer:

·Name: Nigel Anchees

·Designation: Data Grievance Officer, Xtensity Training Services Pvt Ltd.

·Email: privacy@xtensity.in

·Operational Address: RK 503 Purva Riviera, Marathahalli, Bengaluru, Karnataka

·Registered Address: P 701 Jal Vayu Vihar Phase 2, Sector 20, Navi Mumbai, Maharashtra

We will acknowledge your grievance within 48 hours and resolve it within thirty (30) days.