Privacy Policy

1. Information we collect

• Account & profile you provide at sign-in: email, and optionally name, phone, current role, experience, current company, target role, preferred cities, current and expected compensation band, notice period.
• Preferences: job-alert filters, and whether you opt in to recruiter outreach.
• Messages you send via Contact.
• Technical: IP address and basic request metadata, used only for security and rate-limiting.

2. How we use it

• To authenticate you (passwordless email codes) and run your account.
• To match you to relevant roles and send the alerts you request.
• To improve the product and prevent abuse.
• Recruiter sharing is optional and off by default. We share your profile with hiring teams or recruiters only if you explicitly opt in, and you can withdraw consent anytime.

3. Job listings

Job postings are aggregated from employers' official career pages and link back to them. Applications happen on the employer's own site under their privacy practices, not ours.

4. Sharing & processors

We do not sell your data. We use service providers strictly to operate LYDJ — hosting (Vercel), database (Supabase), and email delivery (Resend) — who process data on our behalf under contract.

5. Retention

We keep account data while your account is active. Sign-in codes expire within minutes; sessions expire in 7 days. You can request deletion at any time (see below).

6. Your rights (DPDP)

You may access, correct, or delete your data, withdraw consent (including recruiter sharing), and raise a grievance. Email privacy@lydj.in or use our Contact page and we'll respond within statutory timelines.

7. Security

Data is transmitted over TLS and access is restricted. No method is perfectly secure, but we apply reasonable safeguards including rate-limiting and least-privilege access.

8. Changes

We may update this policy; material changes will be reflected by the "last updated" date above.