Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to job seekers, referrers, employers, and visitors who use TymblHub's website, mobile apps, and related services (collectively, the "Platform"). It covers information we collect through the Platform and how that information is used, shared, and protected. It does not cover information practices of third-party sites that we may link to, which are governed by their own privacy policies.

2. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Name, email address, and contact information
• Professional details including work experience, skills, and education
• Resume, cover letters, and other documents you upload
• Job preferences and career objectives
• Communication preferences and settings

Automatically Collected Information

We automatically collect certain information when you use our platform:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Cookies and similar tracking technologies
• Log files and analytics data

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our job referral platform
• Match you with relevant job opportunities
• Connect you with potential employers and referrers
• Send you job alerts and career-related communications
• Improve our services and user experience
• Ensure platform security and prevent fraud
• Comply with legal obligations

4. Legal Basis for Processing

Depending on where you are located, we rely on the following legal grounds to process your personal information:

• Consent: Where you have given clear consent, such as when uploading your resume or subscribing to job alerts
• Contractual necessity: To provide the referral and job-matching services you sign up for
• Legitimate interests: To improve the Platform, prevent fraud, and keep it secure, balanced against your rights
• Legal obligation: To comply with applicable law, including India's Digital Personal Data Protection Act, 2023 (DPDPA)

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• With your consent: When you explicitly agree to share information
• With employers: To facilitate job applications and referrals
• With referrers: To enable the referral process
• Service providers: With trusted third-party services that help us operate our platform (e.g. hosting, analytics, communications)
• Legal requirements: When required by law, court order, or to protect our rights, users, or the public

We do not sell your personal information to third parties.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy:

• Account and profile data is retained while your account remains active
• Resumes and application data are retained for the duration of the referral process and for a reasonable period afterward to support follow-up hiring
• Data may be retained longer where required to comply with legal, tax, or regulatory obligations, or to resolve disputes

You may request deletion of your account and associated data at any time — see Your Rights and Choices below.

7. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security audits and assessments
• Access controls and authentication measures
• Secure data centers and infrastructure
• Employee training on data protection

No method of transmission or storage is 100% secure. While we work hard to protect your information, we cannot guarantee its absolute security.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time
• Grievance redressal: Lodge a complaint with our Grievance Officer, or the relevant data protection authority in your jurisdiction (e.g. the Data Protection Board of India under the DPDPA, a supervisory authority under the GDPR, or the California Attorney General under the CCPA/CPRA)

To exercise any of these rights, email us at support@tymblhub.com or submit a request through our Grievance Redressal page. We aim to respond to verified requests within the timelines required by applicable law.

9. Cookies and Tracking

We use cookies and similar technologies, including Google Analytics, to enhance your experience:

• Essential cookies: Required for basic platform functionality
• Analytics cookies: Help us understand how users interact with our platform (e.g. Google Analytics)
• Preference cookies: Remember your settings and preferences
• Marketing cookies: Deliver relevant content and advertisements

You can control cookie settings through your browser preferences, and can opt out of Google Analytics tracking using Google's browser opt-out add-on. Disabling non-essential cookies will not affect your ability to use core Platform features.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including India and jurisdictions where our service providers operate. We ensure appropriate safeguards — such as standard contractual clauses and equivalent contractual protections with our processors — are in place to protect your data in accordance with applicable data protection laws, including the GDPR, India's DPDPA, and the CCPA/CPRA.

11. Third-Party Links

Our Platform may contain links to employer websites, job boards, or other third-party services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policy of any external site you visit.

12. Children's Privacy

Our platform is intended for use by working professionals and job seekers and is not directed at children. We do not knowingly collect personal information from individuals under 18 years of age without verifiable parental or guardian consent, as required under India's DPDPA. If you believe we have collected such information, please contact us immediately so we can take appropriate action.

13. Data Breach Notification

In the event of a security breach that affects your personal data, we will notify affected users and, where required, the relevant regulatory authority, without undue delay and in line with applicable law. Notifications will describe the nature of the breach and the steps we recommend you take.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our platform after such changes constitutes acceptance of the updated policy.

15. Contact Us & Grievance Officer

If you have any questions about this Privacy Policy or our data practices, or wish to raise a grievance regarding your personal data, please contact us: