Privacy Policy
Mappen Data Policy
Company: Grut Technologies & Services Pvt Ltd (Product: Mappen)
At Mappen, we take data privacy and security seriously. As India’s first Blockchain-based Job Portal with Pre-BGV & AI Interview Services, we handle sensitive personal and professional information. This policy outlines how Mappen collects, processes, stores, and safeguards data across all our services.
We comply with the Digital Personal Data Protection Act, 2023 (India) and align with global best practices (GDPR, ISO 27001).
1. Scope of Policy
This Data Policy applies to:
- Job Portal Users (Candidates & Employers)
- AI Interview Platform Users
- Background Verification (BGV) Services
- HRMS & Employer Dashboard Integrations
2. Data Collection
2.1 Candidates
We collect the following information:
- Personal Identity (Name, Contact, Govt ID)
- CV/Resume details (Education, Skills, Employment History)
- Interview Data (Video, Audio, Chat transcripts, AI scores)
- Verification Data (Address, Employment, Education, Reference Checks
2.2 Employers/Clients
- Organization details (Name, Contact, Billing info)
- Authorized HR/Recruiter profiles & activity logs
- API/Integration usage data
3. Data Usage
Data is used only for the intended purpose:
- Job Portal: Profile creation, employer discovery, candidate matching
- AI Interview: Skill assessment, soft-skill analysis, automated scoring
- BGV: Identity, address, education & employment verification
- HRMS: Workflow automation, employer dashboards
We strictly prohibit reselling or sharing data by clients or third parties
4. Data Storage & Retention
- All candidate & employer data is stored on secure, encrypted servers.
- Blockchain CV ID ensures tamper-proof verified records.
- Retention: Candidate verification & CV ID records are stored for lifetime validity, unless deletion is requested by the user.
- Interview data (video/audio) is retained for 12 months unless extended with employer consent.
- BGV records are retained as per legal & compliance requirements.
5. Data Sharing
We only share data under the following conditions:
- With employers, when a candidate applies or shares their CV ID.
- With verified third-party service providers for KYC/BGV checks.
- As required by law or government regulation.
We do not sell, trade, or rent personal data to any third party.
6. Data Security
- Encryption: AES-256 for stored data, TLS 1.2+ for transmission.
- Access Controls: Role-based restricted access for staff & clients.
- Blockchain Records: Immutable, tamper-proof verification data.
- Regular Security Audits & Compliance Reviews.
7. User Rights
Under the DPDP Act 2023, candidates & clients have rights to:
- Access their data.
- Correct inaccurate records.
- Request deletion (“Right to be Forgotten”), subject to compliance/legal requirements.
- Withdraw consent for processing
8. Client Responsibilities
- Employers using Mappen agree to not resell, redistribute, or misuse candidate data.
- Data provided via Mappen must be used only for recruitment and employment purposes.
- Clients must comply with applicable labor laws & data protection rules.
9. Compliance & Legal
- Adheres to DPDP Act 2023 (India).
- Aligns with GDPR principles for international clients.
- Data breach notifications will be provided as per the law.