Privacy Policy

1. Introduction and Applicability

Stork Innovation Private Limited ("Stork", "we", "us", or "our") is committed to protecting the privacy and security of personal data collected through our Platform. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access or use our artificial intelligence-powered human resources technology platform, including our website, mobile applications, and all associated services (collectively, the "Platform").

This Privacy Policy applies to all users of the Platform, including students, graduates, early-career professionals seeking employment opportunities ("Candidates"), and organizations seeking to recruit talent ("Employers" or "Recruiters"), collectively referred to as "Users", "you", or "your".

By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately discontinue use of the Platform.

This Privacy Policy should be read in conjunction with our Terms and Conditions of Use, which govern your use of the Platform and are incorporated herein by reference.

2. Legal Basis and Compliance Framework

Stork collects, processes, and stores personal data in strict compliance with:

The Information Technology Act, 2000, and all amendments thereto.

The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules").

The Digital Personal Data Protection Act, 2023 ("DPDP Act"), and all rules, regulations, and notifications issued thereunder.

The Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, as amended by the Cyber Security Directions issued by CERT-In in April 2022.

The Consumer Protection (E-Commerce) Rules, 2020.

Any other applicable central or state legislation governing data protection, electronic commerce, and consumer rights.

We also align our practices with internationally recognized privacy principles, including those established by the Organisation for Economic Co-operation and Development (OECD) and the International Organization for Standardization (ISO).

As our operations scale, we are prepared to comply with obligations applicable to "Significant Data Fiduciaries" as defined under the DPDP Act, including enhanced transparency, data protection impact assessments, and appointment of independent data auditors.

3. Categories of Data Collected

We collect personal data directly from Users, automatically through Platform usage, and from third-party sources where Users have authorized such collection.

3.1. Data Collected Directly from Users

For Candidates:

Identity and contact information: full legal name, date of birth, gender, email address, mobile number, residential address, and profile photograph.

Educational information: academic qualifications, institutions attended, courses of study, grades, certifications, and transcripts or supporting documents uploaded by the Candidate.

Professional information: work experience, employment history, skills, languages, professional certifications, project portfolios, references, and resume documents.

Preferences and aspirations: job search preferences, desired roles, location preferences, salary expectations, and career objectives.

Account credentials: username, password (stored in encrypted form), and two-factor authentication details.

Communication data: messages sent through in-application chat systems, application letters, interview feedback, and correspondence with Employers or Stork support.

For Employers:

Organization information: company name, business registration details, GST identification number, industry sector, company size, and registered office address.

Representative information: name, designation, email address, and mobile number of authorized personnel managing the recruiter account.

Job listing details: position titles, descriptions, qualifications required, compensation ranges, location, and employment terms.

Billing information: payment card details, billing address, tax information, and transaction history.

Account credentials and communication data as applicable to Candidates.

For Users Aged 16-18:

In addition to the above categories, we collect verifiable parental consent documentation, including parent or guardian contact information, relationship verification, and consent acknowledgment records.

3.2. Data Collected Automatically

When you access or use the Platform, we automatically collect:

Device and technical information: IP address, device type, operating system, browser type and version, unique device identifiers, screen resolution, and hardware specifications.

Usage analytics: pages or screens viewed, features accessed, time spent on pages, navigation paths, click patterns, search queries, application submissions, and interaction with AI Features.

Location data: approximate geographic location derived from IP address or, with your explicit consent, precise geolocation data from mobile devices.

Cookies and similar technologies: session identifiers, authentication tokens, preference settings, and tracking pixels for analytics and functionality purposes, as further described in Section 17.

Performance and diagnostic data: error logs, crash reports, performance metrics, and debugging information.

3.3. Data from Third-Party Sources

We may receive personal data from:

Identity verification services that confirm age, identity, or educational credentials where Users have authorized such verification.

Payment processors that provide transaction confirmation and fraud prevention data.

Integrated third-party platforms where Users choose to import profile information, such as LinkedIn or educational credential verification services, subject to separate consent.

Publicly available sources, including professional networking platforms and institutional directories, only where Users have made such information publicly accessible and for the limited purpose of enhancing profile accuracy.

Employers who provide Candidate data through referral programs or collaborative hiring initiatives, subject to the Employer's lawful basis for sharing such data.

4. Purpose of Processing and Lawful Basis

We process personal data only for specified, explicit, and legitimate purposes and do not process data in a manner incompatible with those purposes.

4.1. Account Creation and Management

To create, maintain, and administer User accounts, verify identity and age, authenticate Users, and provide customer support.

Lawful Basis: Necessary for the performance of the contract between you and Stork (Terms and Conditions of Use). For Users aged 16-18, we rely on verifiable parental consent.

4.2. Service Delivery

To provide core Platform features including profile creation, job search and matching, AI-assisted resume building, candidate-employer communication, application tracking, and recruiter analytics.

Lawful Basis: Necessary for the performance of the contract and legitimate business interests in providing an effective recruitment platform.

4.3. AI-Powered Personalization and Matching

To deploy artificial intelligence and machine learning algorithms that analyze User profiles, job requirements, and interaction patterns to generate personalized job recommendations, optimize resume content, match Candidates with suitable opportunities, and provide predictive analytics to Employers.

Lawful Basis: Consent obtained through acceptance of this Privacy Policy and explicit opt-in for AI personalization features. Users may withdraw consent and opt out without affecting basic Platform functionality.

4.4. Platform Improvement and Research

To analyze aggregated and anonymized usage patterns, conduct product research, develop new features, train and improve AI models, and enhance user experience and algorithmic accuracy.

Lawful Basis: Legitimate business interests in improving our services, provided that data is anonymized or aggregated such that individuals cannot be re-identified.

4.5. Communication and Notifications

To send transactional communications regarding account activity, application status, messages from other Users, service notifications, security alerts, policy updates, and customer support responses.

Lawful Basis: Necessary for the performance of the contract and compliance with legal obligations.

4.6. Payment Processing and Billing

To process subscription payments, per-listing fees, refunds, and to maintain transaction records for accounting and tax compliance purposes.

Lawful Basis: Necessary for the performance of the contract and compliance with tax and accounting laws requiring retention of financial records for eight (8) years.

4.7. Security and Fraud Prevention

To detect, prevent, and investigate fraudulent accounts, security threats, unauthorized access, policy violations, and illegal activities, and to maintain audit logs as required by CERT-In cybersecurity directives.

Lawful Basis: Legitimate business interests in protecting the Platform, Users, and our operations, and compliance with legal obligations under CERT-In rules requiring retention of security logs for one hundred eighty (180) days.

4.8. Legal Compliance and Regulatory Reporting

To comply with applicable laws, respond to lawful requests from government authorities, law enforcement, or courts, and to enforce our Terms and Conditions of Use.

Lawful Basis: Legal obligations under Indian law, including the Information Technology Act, 2000, and relevant procedural codes.

4.9. Marketing and Promotional Communications

To send newsletters, product updates, promotional offers, and information about new features or services, only where you have provided explicit consent or have not opted out.

Lawful Basis: Consent, which may be withdrawn at any time through the unsubscribe mechanism or account settings.

5. AI Processing and Human Oversight

Stork utilizes proprietary and third-party artificial intelligence technologies, including natural language processing, machine learning, and predictive analytics, to deliver AI Features as described in our Terms and Conditions of Use.

5.1. Types of AI Processing

Resume optimization: analyzing resume content to suggest improvements in language, formatting, keyword optimization, and completeness.

Job matching: evaluating compatibility between Candidate profiles and job requirements using algorithmic scoring and ranking.

Automated screening assistance: providing Employers with AI-generated Candidate summaries, skill extraction, and preliminary fit assessments.

Conversational interfaces: AI-powered chatbots providing automated responses to common queries and guidance through Platform features.

Predictive analytics: generating insights on hiring trends, talent availability, and recruitment metrics for Employers.

5.2. Data Used for AI Processing

AI Features process data including resume text, job descriptions, User interaction history, application outcomes, profile completeness, skill endorsements, and anonymized aggregate data from the broader User base.

User Content may be used to train, test, and improve AI models on an anonymized and aggregated basis unless you explicitly opt out through your privacy settings or by contacting privacy@storkinnovation.com.

5.3. Limitations and Disclaimers

AI-generated outputs are probabilistic and may contain errors, inaccuracies, or biases. Stork does not guarantee the accuracy, completeness, or suitability of AI-generated content.

AI Features are advisory tools intended to augment, not replace, human judgment. Candidates are responsible for reviewing and customizing AI-generated content before use. Employers remain solely responsible for all hiring decisions.

5.4. Human Oversight and Bias Mitigation

We employ human oversight mechanisms including regular audits of AI model performance, monitoring for discriminatory patterns, fairness testing across demographic groups, and manual review of high-stakes automated decisions.

We implement bias detection and mitigation techniques in AI model design and training, including diverse training datasets, fairness-aware algorithms, and periodic bias impact assessments.

5.5. Opting Out of AI Processing

You may opt out of AI-powered personalization and the use of your data for AI model training by adjusting your privacy settings in your account dashboard or by emailing privacy@storkinnovation.com.

Opting out of AI Features may result in reduced functionality, less personalized recommendations, and limited access to certain Platform features that inherently rely on algorithmic processing.

6. Consent, Withdrawal, and Data Minimization

6.1. Notice and Consent at Point of Collection

We provide clear notice about data collection at the point of collection, including the purpose for which data will be used and the categories of data being collected, in compliance with Rule 5 of the SPDI Rules.

Consent for data processing is obtained through affirmative action, including acceptance of this Privacy Policy during account registration, explicit opt-in for marketing communications, and granular consent prompts for sensitive features such as geolocation access.

6.2. Withdrawal of Consent

You may withdraw consent for data processing at any time by:

Adjusting privacy settings in your account dashboard to disable specific processing activities such as AI personalization or marketing communications.

Emailing privacy@storkinnovation.com with a withdrawal request specifying the type of processing you wish to discontinue.

Deleting your account entirely through the account settings interface, which terminates all processing except where retention is legally required.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. However, withdrawal may limit your ability to use certain Platform features or may result in account termination if processing is essential to service delivery.

We will process withdrawal requests within seventy-two (72) hours of receipt and confirm the withdrawal via email.

6.3. Data Minimization

We collect only the personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

Optional data fields are clearly marked during account creation and profile completion. Users may choose not to provide optional information, although doing so may reduce the effectiveness of job matching and recommendations.

We regularly review data collection practices to ensure continued adherence to minimization principles.

7. Data Retention and Deletion

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1. Retention Periods

Active User accounts: Personal data is retained for the duration of the account's active status and for twenty-four (24) months following the last login or platform interaction.

Inactive accounts: Accounts that remain inactive for twenty-four (24) consecutive months will be automatically flagged for deletion. Users will receive email notice thirty (30) days before deletion. If no action is taken, the account and associated personal data will be permanently deleted.

Transaction and billing records: Financial transaction data, tax invoices, and payment records are retained for eight (8) years from the date of the transaction to comply with the Income Tax Act, 1961, and applicable accounting standards.

Security and audit logs: System logs, access records, and security incident data are retained for one hundred eighty (180) days as required by CERT-In Cyber Security Directions, April 2022.

Application and communication records: Records of job applications, Candidate-Employer communications, and interview outcomes are retained for two (2) years or until either party deletes their account, whichever occurs first.

Anonymized and aggregated data: Data that has been anonymized such that individuals cannot be re-identified may be retained indefinitely for research, analytics, and AI model training purposes.

7.2. Secure Deletion

Upon expiration of the applicable retention period or receipt of a valid deletion request, personal data is securely deleted through cryptographic erasure, secure data wiping protocols, or physical destruction of storage media, as applicable to the storage medium.

Backup copies of deleted data stored in redundant systems are overwritten within ninety (90) days of the primary deletion.

7.3. Legal Holds

In the event of pending litigation, governmental investigation, or regulatory inquiry, we may suspend deletion of relevant personal data until the matter is resolved, notwithstanding the expiration of standard retention periods.

8. Data Sharing and Disclosure

Stork does not sell personal data to third parties. We share personal data only in the following limited circumstances and only to the extent necessary for the specified purpose.

8.1. Candidate-Employer Matching

Candidate profile information is shared with Employers when Candidates apply for jobs or when Employers search the Candidate database (for premium Employer accounts). Shared information includes resume content, contact details, educational and professional background, and application-specific communications.

Candidates control the visibility of their profiles and may set preferences regarding discoverability by Employers.

8.2. Service Providers and Subprocessors

We engage third-party service providers to perform functions on our behalf, including cloud infrastructure hosting (Amazon Web Services), payment processing, email delivery, SMS notifications, analytics, customer support, and AI model training.

Service providers are contractually bound to process personal data only on our instructions, implement appropriate security measures, and comply with applicable data protection laws. We maintain a list of subprocessors available upon request.

8.3. Business Transfers

In the event of a merger, acquisition, asset sale, corporate reorganization, or insolvency proceeding involving Stork, personal data may be transferred to the acquiring entity or successor organization, subject to the transferee's agreement to honor the commitments made in this Privacy Policy.

We will notify affected Users via email and prominent notice on the Platform at least thirty (30) days before any such transfer takes effect, and Users will have the option to delete their accounts before the transfer.

8.4. Legal Obligations and Law Enforcement

We may disclose personal data to government authorities, law enforcement agencies, courts, or regulatory bodies where required by law, including pursuant to:

Court orders, subpoenas, or summons issued by competent judicial or quasi-judicial authorities.

Lawful directions under Section 69 of the Information Technology Act, 2000 (Interception and Monitoring).

Requests from CERT-In or other cybersecurity agencies for incident response purposes.

Investigations by data protection authorities or consumer protection agencies.

We will, where legally permissible, notify affected Users of such disclosures and provide copies of legal demands unless prohibited by court order or law.

8.5. Protection of Rights and Safety

We may disclose personal data where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Stork, our Users, or the public, including to:

Detect, prevent, or investigate fraud, security breaches, or policy violations.

Enforce our Terms and Conditions of Use or other agreements.

Respond to emergency situations involving imminent risk of harm.

8.6. Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify individuals with third parties for research, analytics, benchmarking, or business intelligence purposes. Such data is not subject to the restrictions in this Privacy Policy.

9. International Data Transfers

Stork's primary data storage and processing infrastructure is located in India. However, certain service providers, including cloud infrastructure and software-as-a-service vendors, may process or store data in jurisdictions outside India.

9.1. Government-Approved Jurisdictions

International transfers of personal data are conducted only to jurisdictions approved by the Government of India pursuant to Section 16 of the DPDP Act and notified by the Ministry of Electronics and Information Technology.

As of the effective date of this Privacy Policy, we transfer data only to jurisdictions included in the Government of India's whitelist or to jurisdictions deemed to provide adequate levels of data protection.

9.2. Contractual Safeguards

Where international transfers are necessary for service delivery and the destination jurisdiction is not on the approved whitelist, we implement contractual safeguards including Standard Contractual Clauses based on international best practices, data processing agreements with onward transfer restrictions, and technical security measures such as encryption in transit and at rest.

9.3. User Consent for Cross-Border Transfers

By accepting this Privacy Policy, you consent to the international transfer of your personal data to approved jurisdictions under the safeguards described above.

You may withdraw consent for international transfers by contacting privacy@storkinnovation.com, although withdrawal may prevent us from providing certain Platform features or services.

10. Security and Breach Notification

Stork implements comprehensive technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, destruction, loss, or misuse.

10.1. Technical Security Measures

Encryption: Personal data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3 or higher.

Access controls: Role-based access control (RBAC) limits employee and system access to personal data on a need-to-know basis. Multi-factor authentication is required for administrative access.

Network security: Firewalls, intrusion detection and prevention systems (IDS/IPS), and distributed denial-of-service (DDoS) protection safeguard Platform infrastructure.

Secure development: Security-by-design principles, secure coding practices, regular code reviews, and vulnerability scanning are integrated into software development lifecycle.

Data segregation: Logical and physical separation of production, testing, and development environments prevents unauthorized access and data leakage.

10.2. Organizational Security Measures

Employee training: Regular mandatory training on data protection, information security, and privacy best practices for all personnel with access to personal data.

Confidentiality obligations: All employees, contractors, and service providers are bound by contractual confidentiality obligations.

Security audits: Periodic internal and third-party security audits, penetration testing, and vulnerability assessments to identify and remediate risks.

Incident response: Documented incident response plan with defined roles, escalation procedures, and notification protocols.

10.3. Limitations

No security system is impenetrable. While we implement industry-leading security measures, we cannot guarantee absolute security of personal data transmitted over the internet or stored electronically.

Users are responsible for maintaining the confidentiality of their account credentials and must immediately notify security@storkinnovation.com of any unauthorized access.

10.4. Data Breach Notification

In the event of a data breach involving personal data, Stork will:

Within 72 hours of becoming aware of the breach:

Notify the Computer Emergency Response Team of India (CERT-In) at incident@cert-in.org.in with details of the breach, data affected, and remedial actions taken, in compliance with CERT-In Cyber Security Directions, April 2022.

Notify affected Users via email to the address associated with their account, providing a description of the breach, categories of data affected, potential consequences, and measures taken to mitigate harm.

Immediately thereafter:

Publish a notice on the Platform homepage describing the breach in general terms.

Provide affected Users with guidance on protective measures they can take, such as password resets or credit monitoring.

Cooperate fully with regulatory investigations and provide periodic updates to affected Users as the investigation progresses.

Notification may be delayed where law enforcement determines that notification would impede a criminal investigation, and only for the duration of such impediment.

11. Children's Data and Age Restrictions

The Platform is not intended for children under the age of sixteen (16). We do not knowingly collect personal data from children under sixteen (16) without verifiable parental consent.

11.1. Age Verification

During account registration, Users are required to affirm that they are at least sixteen (16) years of age. Users between sixteen (16) and eighteen (18) years must obtain verifiable parental or guardian consent before creating an account.

Verifiable parental consent includes submission of parent or guardian contact information, documentary proof of relationship (such as identity documents), and direct confirmation from the parent or guardian via email, SMS, or telephonic verification.

11.2. Discovery of Underage Users

If we become aware that we have collected personal data from a User under sixteen (16) years of age without verifiable parental consent, we will immediately suspend the account and delete all associated personal data within seventy-two (72) hours.

Parents or guardians who believe their child has provided personal data without consent may contact privacy@storkinnovation.com to request immediate deletion.

11.3. Parental Rights

Parents or guardians who have provided consent for a minor aged sixteen (16) to eighteen (18) may:

Review the personal data collected from the minor.

Request correction or deletion of such data.

Withdraw consent and request account termination.

Such requests must be submitted to privacy@storkinnovation.com with verification of parental identity and relationship to the minor.

12. Data Subject Rights

Stork respects and facilitates the exercise of data subject rights as provided under the DPDP Act and applicable Indian data protection law.

12.1. Right to Access

You have the right to obtain confirmation as to whether we are processing your personal data and to access such data along with information about the purposes of processing, categories of data, recipients, and retention periods.

Access requests may be submitted via the account settings interface or by emailing privacy@storkinnovation.com. We will provide a copy of your personal data in a commonly used electronic format within thirty (30) days of a valid request.

12.2. Right to Correction

You have the right to request correction of inaccurate or incomplete personal data. Most data can be corrected directly through your account settings. For data that cannot be self-corrected, submit a request to privacy@storkinnovation.com.

We will verify your identity, correct the data within fifteen (15) days, and notify any third parties to whom the data was disclosed, where practicable.

12.3. Right to Erasure

You have the right to request deletion of your personal data where:

The data is no longer necessary for the purposes for which it was collected.

You withdraw consent on which processing is based, and there is no other legal ground for processing.

You object to processing and there are no overriding legitimate grounds for continued processing.

The data has been processed unlawfully.

Deletion is required to comply with a legal obligation.

Erasure requests may be submitted through the account deletion feature or by emailing privacy@storkinnovation.com. We will delete the data within thirty (30) days, except where retention is required by law (e.g., transaction records for tax purposes).

12.4. Right to Object and Restrict Processing

You may object to processing of your personal data for direct marketing purposes at any time. Marketing opt-out links are included in all promotional communications.

You may also object to processing based on legitimate interests or for research and statistical purposes by contacting privacy@storkinnovation.com. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests or where processing is necessary for legal claims.

You may request restriction of processing where you contest the accuracy of data (pending verification), processing is unlawful but you prefer restriction to erasure, we no longer need the data but you require it for legal claims, or you have objected to processing (pending verification of overriding legitimate grounds).

12.5. Right to Data Portability

Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) and to transmit that data to another service provider.

Data portability requests may be submitted to privacy@storkinnovation.com. We will provide the data within thirty (30) days.

12.6. Exercising Your Rights

All data subject rights may be exercised by:

Logging into your account and accessing the privacy settings and data management tools.

Emailing privacy@storkinnovation.com with a detailed description of your request.

We will verify your identity before processing requests and will respond within thirty (30) days. If additional time is required due to complexity or volume of requests, we will notify you and provide a revised timeline not exceeding sixty (60) days from the original request.

There is no fee for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse the request.

13. Data Protection Officer and Grievance Mechanism

Stork has appointed a Data Protection Officer responsible for overseeing compliance with this Privacy Policy and applicable data protection laws.

13.1. Contact Information

Data Protection Officer
Stork Innovation Private Limited
Email: privacy@storkinnovation.com
[Registered Office Address]
Mumbai, Maharashtra, India

13.2. Grievance Redressal Process

If you have concerns, complaints, or grievances regarding data processing practices, privacy violations, or exercise of data subject rights, you may file a complaint with our Data Protection Officer.

Acknowledgment: We will acknowledge receipt of your complaint within seventy-two (72) hours of submission.

Investigation: We will conduct a thorough investigation of your complaint, which may include reviewing relevant records, interviewing personnel, and consulting legal counsel.

Resolution: We will provide a substantive written response addressing your complaint within thirty (30) calendar days of receipt. If the matter is complex and requires additional time, we will notify you and provide a revised timeline not exceeding forty-five (45) days.

Escalation: If you are dissatisfied with our response, you may escalate the matter to the Data Protection Board of India (once constituted under the DPDP Act) or other relevant regulatory authority with jurisdiction over data protection matters.

13.3. Right to Lodge Regulatory Complaints

You have the right to lodge a complaint with the Data Protection Board of India or other competent regulatory authority if you believe we have violated applicable data protection law. This right exists independent of the internal grievance mechanism.

14. Third-Party Integrations and Liability Limitation

The Platform may contain links to third-party websites, applications, or services, including Employer career pages, social media platforms, and payment gateways.

This Privacy Policy applies only to personal data collected by Stork through our Platform. We are not responsible for the privacy practices, content, or security of third-party services.

When you click on third-party links or use integrated third-party services, you are subject to the privacy policies and terms of service of those third parties. We encourage you to review such policies before providing personal data to third parties.

Integration with third-party services (such as importing profile data from LinkedIn or authenticating via social login) requires your explicit consent and is governed by the third party's data sharing authorization.

Stork disclaims all liability for unauthorized access, data breaches, or privacy violations occurring on third-party platforms or resulting from third-party service provider misconduct.

15. Marketing Communications and Opt-Out

We may send marketing communications, newsletters, product announcements, and promotional offers to Users who have provided explicit consent or have not opted out of such communications.

15.1. Types of Marketing Communications

Email newsletters featuring platform updates, career advice, hiring trends, and industry insights.

SMS notifications about promotional offers, webinars, or product launches (where you have provided mobile number and consent).

In-application banners or notifications highlighting new features or premium subscription offers.

15.2. Consent and Opt-Out

Consent for marketing communications is obtained separately from transactional communications and is not a condition for using the Platform.

You may opt out of marketing communications at any time by:

Clicking the "unsubscribe" link included in all marketing emails.

Replying "STOP" to SMS marketing messages.

Adjusting notification preferences in your account settings.

Emailing privacy@storkinnovation.com with an opt-out request.

Opting out of marketing communications does not affect transactional communications necessary for account management, security notifications, or policy updates.

We will process opt-out requests within seventy-two (72) hours.

15.3. Transactional Communications

Certain communications are necessary for Platform operation and cannot be opted out of while you maintain an active account. These include:

Account verification and authentication messages.

Application status updates and messages from Employers or Candidates.

Security alerts and breach notifications.

Billing and payment confirmations.

Policy updates and legal notices.

16. Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance Platform functionality, analyze usage patterns, and deliver personalized experiences.

16.1. Types of Cookies

Strictly necessary cookies: Essential for Platform operation, including session management, authentication, security, and load balancing. These cookies cannot be disabled without preventing basic functionality.

Functional cookies: Enable enhanced features such as language preferences, accessibility settings, and customized interfaces.

Analytics cookies: Collect information about how Users interact with the Platform, including pages visited, time spent, navigation paths, and error messages. We use this data to improve user experience and Platform performance.

Advertising and personalization cookies: Used to deliver relevant job recommendations, personalized content, and targeted advertising on third-party platforms (where you have consented to such advertising).

16.2. Cookie Management

You may manage cookie preferences through your browser settings or through the cookie consent manager accessible on the Platform.

Disabling strictly necessary cookies will prevent you from using certain essential features of the Platform. Disabling other cookies may reduce functionality or personalization but will not prevent basic Platform use.

16.3. Third-Party Cookies

Some cookies are placed by third-party service providers, including analytics vendors (such as Google Analytics) and advertising networks. These third parties are subject to their own privacy policies.

We do not control third-party cookies and are not responsible for their data collection practices. You may opt out of third-party advertising cookies through industry opt-out mechanisms such as the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA).

17. Updates to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Platform features.

Material changes will be notified to Users via email to the address associated with their account and through a prominent notice on the Platform at least fifteen (15) days before the changes take effect.

Continued use of the Platform after the effective date of the modified Privacy Policy constitutes acceptance of the changes. If you do not agree to the modified Privacy Policy, you must cease using the Platform and may delete your account.

The "Last Updated" date at the top of this Privacy Policy reflects the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

18. Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of India, without regard to conflict of law principles.

Any dispute, controversy, or claim arising out of or relating to this Privacy Policy, including its existence, validity, interpretation, performance, breach, or termination, shall be resolved through binding arbitration in accordance with the Arbitration and Conciliation Act, 1996.

The arbitration shall be administered by the Mumbai Centre for International Arbitration (MCIA) under its rules then in effect. The seat and venue of arbitration shall be Mumbai, Maharashtra, India. The language of arbitration shall be English.

The arbitral tribunal shall consist of a sole arbitrator mutually agreed upon by the parties. If the parties cannot agree within thirty (30) days, the arbitrator shall be appointed by MCIA in accordance with its rules.

The decision of the arbitral tribunal shall be final and binding. Each party shall bear its own costs and expenses of arbitration, unless the arbitral tribunal determines otherwise.

Nothing in this clause prevents you from lodging a complaint with the Data Protection Board of India or other regulatory authority with jurisdiction over data protection matters.

19. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Privacy and Data Protection
Email: privacy@storkinnovation.com

Data Protection Officer
Email: privacy@storkinnovation.com

Security and Incident Reporting
Email: security@storkinnovation.com

General Legal Inquiries
Email: legal@storkinnovation.com

Registered Office:
Stork Innovation Private Limited
[Complete Registered Address]
Mumbai, Maharashtra, India

20. Acknowledgment and Consent

By clicking "I Accept", registering for an account, or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

You specifically consent to:

The collection, processing, storage, and use of your personal data for the purposes described in Section 4.

The use of your data for AI-powered features including personalization, job matching, and model training, subject to your right to opt out as described in Section 5.

The sharing of your data with Employers (for Candidates) or service providers as described in Section 8.

The international transfer of your data to government-approved jurisdictions under the safeguards described in Section 9.

The use of cookies and similar technologies as described in Section 16.

For Users aged sixteen (16) to eighteen (18), verifiable parental consent constitutes consent on behalf of the minor to all data practices described in this Privacy Policy.

You may withdraw consent at any time by following the procedures described in Section 6.2, although withdrawal may limit your ability to use the Platform.

If you have questions about this Privacy Policy, please contact legal@storkapp.in.

Stork Innovation Private Limited