Privacy Policy

Your CV and what we read from it. The file you upload and the text taken out of it, plus the skills, seniority, target roles and locations a model derives from it. The text is what jobs are ranked against; the file is kept so that applying for a job, or adding your CV to your Verification Passport, does not ask you to upload it again.

One contact detail. The email address on the Google, LinkedIn or GitHub account you signed in with. Nothing else about that account, and no other address. We ask each of them for the smallest thing that answers who you are: signing in gives us nothing that can read a GitHub repository, or a LinkedIn connection, message or feed, and nothing can post anywhere.

Your Verification Passport, if you use it. On Parakh AI Jobs you can verify things about yourself, one at a time, and we keep what you add and what each check found: your phone number, whether you confirmed it by SMS or only typed it in — an unconfirmed one is kept and shown as self-declared, and a recruiter sees only that it was not checked, never the number; the jobs and qualifications you declare; the text of the resume you give the passport and a one-way hash of it, which our reviewers use to notice the same resume on two accounts; the website you prove is yours; and, if you connect GitHub or LinkedIn, that account's name and public details — for GitHub, your public repositories and their languages, which is public information, never private code. A dated record of every check and every review is kept as an audit trail.

If you recruit. Recruiters have a separate account on Parakh for Recruiters, signed in with a work email and a one-time code we email to it, never mixed with a candidate account. We keep that address, your company and job title, the jobs you post and what you bought, and a record of every candidate you open. If you paste or upload a job description, or type a line about the job, to fill the posting form, that text is sent to Anthropic's API (or, when that is unavailable, Google's Gemini API) to be read, and is not kept by us unless you save or submit the job. The same goes for the job title, skills and description sent when you ask for screening questions, and for the job title, company name and reason sent when you ask for a draft message to a candidate you are not taking forward; no candidate's name, contact details or CV goes with either. How quickly you answer applications is counted from the statuses you set on them, and shown on your jobs' pages as a rate once there are at least five applications that have had a full week to be answered.

Documents you send as evidence. If you ask us to verify a job or a qualification, you can upload a document such as a relieving letter or a degree certificate. Only Parakh's reviewers can open it, every time they do is recorded, and it is deleted 30 days after the decision on it. Please cover any photograph and any ID number on it first — we never need them. We never ask you to upload Aadhaar, a PAN card or a passport, and we never store a government ID number. The one identity check we offer does not work that way either: with your permission DigiLocker confirms your name, and what reaches us is that name and a result — see “Who else sees it”.

If you use the Referral Marketplace. A candidate who asks for a referral gives us the job link, company, role and location, may add skills, experience and a note, and pays through Razorpay; we keep those, the payment references and the refund or payout record for the request. A referrer registers with a legal name, company, job title, years of experience, skills and an optional LinkedIn link, and, to be paid, a UPI ID or bank details, of which we keep the account holder, IFSC code and only a masked account number. Messages and files exchanged in a conversation between a candidate and a referrer, or a candidate and a recruiter, are stored so both sides can read them, and our reviewers can open them if one side reports the conversation.

If you join the early list for Parakh Talent. Parakh Talent is a planned way for verified recruiters to find people who chose to be found. It is not open, and no recruiter can see anything about anyone today. If you join the early list we keep what you enter: a line about what you do, the regions and ways of working you would accept, your notice period, whether to show your verified checks, and the companies that must never see you. The card you are shown in Settings is the card a recruiter would see: never your name, email, phone number, CV or employer. Joining is not agreeing to be searched. Before any recruiter can search we will ask you again, with the real screen in front of you, and nothing is shown to anyone until you say yes. Once you have said yes, a recruiter shown your card may invite you to talk about one of their live jobs. Only if you accept that invite do we share your name, email and phone number, with that recruiter, for that job, and open a conversation with them here. If you decline, they are told only that you declined; you can also block the company, and it is added to the companies that must never see you. You can report an invite, for example if it asks you for money; we keep the report and anything you write with it, the recruiter cannot search or invite anyone while we look into it, and they are not told who reported. We keep each invite, your answer and any report for as long as you have an account.

What you did here. Which jobs were matched to you, and any applications you track. Nobody else sees these.

New jobs we sent you. Each morning we look for new jobs that fit your profile and keep a list of the ones we showed or emailed you, so none is sent twice, along with how often you want these emails and any job you marked as not relevant.

Applications you send through Parakh. When you apply to a Verified by Parakh job, the name, email, phone number, city and note you give us for that job, and the CV file you upload with it — the file itself, because the recruiter needs it. If that file has a photograph in it, it goes with the file; recruiters do not need one, and we suggest leaving it off. The recruiter also sees how well your profile fits that job: a score worked out by fixed rules from the skills, years of experience and city on your Parakh profile, with the reasons written beside it. It is never worked out from your name, age, gender, caste, religion or photograph, it is advice to the recruiter and not a decision, and nobody is turned down by it automatically. If your profile has nothing to compare, no score is shown.

Payment references. A Razorpay order and payment id, and what the amount was. Enough to answer "did my payment go through".

A fingerprint of your CV. A one-way hash of its text, plus the email and phone printed on it. Used for one thing only: the free analysis is one per CV rather than one per sign-up, and this is how the same CV is recognised on a second account. It is never matched against jobs, never shown to anyone, and never sold. It outlives a deleted account on purpose — otherwise deleting the account would be the way around the limit.

Passwords and one-time codes. Signing in happens at Google, LinkedIn or GitHub: your password is typed on their page and we are handed a token afterwards, never the password itself. We do not receive it, and we do not store a hash of it either — there is nothing here for anyone to steal. That is true of a job-seeker account. A referrer account on the Referral Marketplace signs in with its own email and password, which is kept only as a salted scrypt hash, never in readable form.

Card, UPI or bank details. Razorpay's checkout collects these inside their own page. They never reach our servers.

Your photograph. If you signed in with Google, LinkedIn or GitHub we show the picture already on that account, and we store the link to it, never the image. Your browser fetches it from them, which does mean they can tell you opened the page. Nothing is uploaded to us and nothing is kept if you remove it there.

Caste, religion, gender, age or photograph. These are never asked for, never inferred, and never used in matching. Storing them would create a discrimination risk in hiring that no feature justifies.

Anyone's data but yours. We read public job postings from company career pages. We do not scrape candidate profiles from LinkedIn, Naukri or anywhere else.

Your CV text is sent to Anthropic's API to be read and to rank jobs against it, or to Google's Gemini API on the free plan and whenever Anthropic's is unavailable. Anthropic does not use it to train its models.

Sign-in is handled by Google, LinkedIn and GitHub, and payments by Razorpay. Hosting is Railway, and the database is Neon, in Singapore.

Google Analytics sees which pages were visited and where the visit came from. It does not see your CV, your matches, your email or anything you bought — those never leave our own database except to be read by the model that ranks jobs.

We do not sell your data, and we never share it with recruiters or employers on our own. The one exception is the one you ask for: when you apply to a Verified by Parakh job through us, we send that job's recruiter the details and CV you gave for that application and, for applications made since the passport existed, your Verification Passport as your privacy settings allow — with your phone and email masked, and never your evidence documents. You tick a box saying so, every time. Recruiters see this only after Parakh has checked who they are, only for their own company's jobs, and every time one opens your passport it shows on your timeline. No employer can look you up here.

If you are on a paid plan, the new jobs that match you each morning are ranked by Anthropic's API (or, when that is unavailable, Google's Gemini API), which reads your profile and those jobs to do it. Anthropic does not use it to train its models.

AI summary of an application. A recruiter can press a button to have one applicant's CV summarised. Nothing of the kind runs by itself. The text of that CV, with the name, email address, phone number and links taken out, is sent to Anthropic's API with the job's description to be read. It is not used to train their models. The summary is shown to that recruiter and is not kept by us.

Emails — job matches and passport updates — are sent through Resend, and one-time codes to your phone through MSG91. Each receives only the address or number it is sending to and the message itself.

Identity checks are done by DigiLocker, through Cashfree. A recruiter you applied to may ask you to confirm your identity. It happens only if you agree: you sign in to DigiLocker yourself and give your permission there. What comes back to us is your name and whether the check completed, which we compare with the name on your profile. We keep only the result, the provider's reference and the date — never the document, and never a number from it. Saying no changes nothing about your application, and the recruiter is told only that the check was not done.

We set no advertising cookies, and nothing here follows you to another site.

We do use Google Analytics. It tells us how many people arrived, which page they came from, and which pages they read — nothing about who you are, and it is never joined to your account, your CV or anything you have paid for. Your IP address is shortened before it reaches Google, so it does not identify a household. If you would rather not be counted, any browser setting or extension that blocks it works here and nothing on this site breaks.

parakh_session — set when you sign in, so you stay signed in. Expires after 30 days.

parakh_token — identifies your CV and tracked applications to us. Set on first use and kept for 180 days.

parakh_oauth — set for ten minutes while you are away at the provider signing in, and deleted the moment you come back. It holds two random strings that let us check the reply is the one we sent you for — and, when you are connecting an account to your Verification Passport, which Parakh account started it.

parakh_hire — the recruiter site's own sign-in, set only on hire.parakhwork.com and readable on no other Parakh site. Expires after 30 days; a job seeker never has one.

parakh_hub — set once, to record that your sign-in cookie has moved to the shared parakhwork.com domain so one sign-in covers every Parakh site. It holds the digit 1.

parakh_lang — set only if you choose Hindi or English on your account page, so it stays in that language. Kept for a year.

parakh_error — carries an error message across one page load. Gone in 30 seconds.

_ga and _ga_<id> — set by Google Analytics to tell a returning visitor from a new one. Two years, and nothing in them names you.

Your light-or-dark preference is kept in your browser's own storage and never sent to us.

Your CV, profile and matches: while your account exists. Delete the account and they go with it.

Tracked applications: the same. What they teach the scoring survives as a count, with nothing in it that points back at you.

Applications sent through Parakh: until you withdraw the application on the job page or delete your account. Either deletes it, and the CV file with it, at once. Until 28 October 2026 these were deleted 180 days after you applied; they are now kept the same way as everything else here, and you can delete them whenever you choose.

Job-match emails: sent only if you agreed to them when you uploaded a CV or turned them on yourself, at most once a day. Every one has a link that stops them in one click, and you can switch between daily, weekly and never on your account page. The list of jobs we sent you is kept while your account exists.

Your Verification Passport: while your account exists, and you can remove any item from it yourself. Evidence documents go 30 days after the decision on them. Delete the account and the passport goes with it; the audit trail of checks and reviews stays, with nothing in it that points back at you.

The Parakh Talent early list: while you stay on it. You are asked every 90 days whether you are still looking, with a reminder at 60; if you do not answer you are taken off. Leaving deletes everything you entered, and so does deleting your account. The audit trail keeps only that you joined and that you left, with none of your choices in it.

Payment records: eight years, because Indian tax law requires books to be kept that long. These are an order id, a payment id and an amount — not card details, which we never receive.

The CV fingerprint: indefinitely, and deliberately. It is what makes the free analysis one per CV instead of one per sign-up, so deleting it would make deleting your account the way around that.

There is a delete button on your account page. It signs you out immediately and stops all use of your data at once; the rows are erased within 30 days, including from backups as they roll over.

You can also ask us at support@parakhwork.com and we will do it for you.

This is your right under India's Digital Personal Data Protection Act, 2023. You do not have to give a reason.

Write to the grievance officer. Indian law requires one to be named and reachable, and on a business this size that is the person who runs it:

Harshit Patel, Grievance Officer · admin@parakhwork.com

T-11, Signature Global Millennia-1, Sector 37C, Gurugram, Haryana 122006, India

We acknowledge within 48 hours and resolve within 30 days. If that does not settle it, you can take the complaint to the Data Protection Board of India.

This site is for adults. It is a job-search service, so we do not knowingly accept a CV from anyone under 18. Tell us if one has been uploaded and we will delete it.

If this policy changes, the date at the top changes with it. A change affecting data already collected is emailed to the people it applies to before it takes effect.