Privacy Policy

InstaRefer ("InstaRefer", "we", "our", or "us") is India's first structured job referral marketplace, connecting job seekers with verified employees at top companies. We operate the website instarefer.in and related services.

For the purposes of this policy, users fall into two categories:

• Referral Seekers — individuals looking to obtain a job referral at a target company.
• Referrers — verified employees who provide referrals through the platform.

2.1 Information you provide directly

• Full name, email address, and phone number
• PAN card details (for identity and employment verification)
• Resume / CV and professional experience
• Target companies and job roles
• Profile photo (optional)
• Payment information (processed securely via third-party gateways; we do not store card numbers)

2.2 Information collected automatically

• IP address, browser type, and device information
• Pages visited, time spent, and clickstream data
• Cookies and similar tracking technologies (see Section 8)

2.3 Information from third parties

• LinkedIn or Google OAuth data if you choose to sign in using those services
• Employment verification data from public professional sources

We use your personal information only for the following purposes:

• To create and manage your InstaRefer account
• To verify your identity and employment status (PAN verification for referrers)
• To run our AI compatibility matching engine (skill fit, experience relevance, role alignment)
• To facilitate referral requests between seekers and referrers
• To process token purchases and escrow transactions
• To send platform notifications, referral status updates, and service communications
• To improve our platform, features, and matching algorithms
• To comply with legal obligations and prevent fraud

We do not use your data for automated decision-making that has legal or similarly significant effects on you without human review.

We do not sell your personal data. We share your information only in the following limited circumstances:

4.1 Between platform users

When a referral request is accepted, the seeker's profile (name, resume, role preference) is shared with the referrer to enable the referral. The referrer's employer and department may be visible to seekers to help them target companies.

4.2 Service providers

We work with trusted third-party providers for payment processing, cloud hosting, email delivery, and analytics. These providers are contractually bound to protect your data and use it only for services they perform for us.

4.3 Legal requirements

We may disclose your information if required by Indian law, court order, or government authority, or to protect the rights and safety of InstaRefer, our users, or the public.

4.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained for the duration of your account plus 2 years after deletion for legal compliance.
• Transaction and escrow records are retained for 7 years as required by Indian financial regulations.
• PAN verification records are retained for 5 years per applicable KYC norms.
• Marketing preferences are retained until you opt out.

You may request deletion of your account and personal data at any time (see Section 7). Certain data may be retained longer if required by law.

We take the security of your personal data seriously. Our measures include:

• AES-256 encryption for data stored at rest
• TLS 1.2+ encryption for all data in transit
• Escrow-protected token transactions to safeguard payments
• Role-based access controls — only authorised personnel access personal data
• Regular security audits and vulnerability assessments

No method of transmission over the internet is 100% secure. While we use industry-standard protections, we cannot guarantee absolute security. Please use a strong, unique password and do not share your account credentials.

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA), you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your account and personal data.
• Portability — request your data in a structured, machine-readable format.
• Withdraw consent — withdraw consent for processing at any time (this may affect your ability to use certain features).
• Grievance redressal — lodge a complaint with our Grievance Officer (see Section 10).

To exercise any of these rights, email us at privacy@instarefer.in. We will respond within 30 days.

We use cookies and similar technologies to operate the platform, remember your preferences, and understand usage patterns. Types of cookies we use:

• Essential cookies — required for the platform to function (login sessions, security tokens).
• Analytics cookies — help us understand how users navigate the platform (e.g. Google Analytics).
• Preference cookies — remember your settings and choices.

You can control cookies through your browser settings. Disabling essential cookies will affect platform functionality. For more details, see our Cookie Policy at instarefer.in/cookies.

InstaRefer is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor has provided personal data, we will delete it promptly. If you believe a minor has registered on our platform, please contact us at privacy@instarefer.in.

In accordance with the Information Technology Act, 2000 and rules thereunder, the details of our Grievance Officer are:

We may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or applicable law. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you via email or a prominent notice on the platform
• For significant changes, seek fresh consent where required by law

Continued use of InstaRefer after the effective date of changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@instarefer.in
• Website: instarefer.in
• Address: India