Privacy Policy

MigRizo is a hiring platform. Startups and companies anywhere in the world use it to hire verified talent in India, and talent in India use it to find remote work with those companies. The service runs on migrizotalent.com and its sign-in and dashboard addresses. It is operated by MigRizo ("MigRizo", "we", "us").

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what you can ask us to do with it. It is written to meet the Digital Personal Data Protection Act, 2023 and the rules made under it, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

For the personal data we decide how to use, we are the Data Fiduciary under the Digital Personal Data Protection Act. It applies to everyone who uses MigRizo: talent, employers, people who fill in our forms and visitors who only read the site.

We only ask for what we need to run the service. What that is depends on how you use MigRizo.

Sensitive Information

Passwords, identity documents and bank or payment details are treated as sensitive personal data. We collect them only for the purpose stated when we ask, keep them in private storage and limit who on our team can open them.

Information From Others

Our team may add a candidate profile from a CV the person shared with us for a role. When that happens, we invite the person by email to claim the profile, check it and decide whether to keep it. If they do not want it, we delete it.

We use personal data to:

• create and run your account and keep you signed in
• verify that talent profiles are real and accurate before employers see them
• run the Maya interview and prepare a summary of the results
• match talent with roles and show employers profiles that fit their brief
• set up contracts, run payroll and invoicing, and meet tax and labour law when a hire is made
• send service emails, such as sign-in links, application updates and interview invitations
• send our newsletter, only if you signed up for it
• answer your questions, requests and complaints
• keep the service secure, stop fraud and fake job posts, and fix problems
• meet our legal duties and respond to lawful requests from authorities

We do not sell personal data. We do not show advertising, and we do not share your data with anyone for their own marketing.

Maya is our AI interviewer. It asks role-related questions and scores the answers on technical skill, communication and problem solving. We also use AI tools to read CVs and fill in profile fields, which you can then check and edit.

• A person stays involved. Our team reviews every profile before it is verified, and employers make every hiring decision. A score alone never rejects anyone.
• You can ask for a human review of a score you think is wrong, through the contact page.
• Your data does not train AI models. The AI providers we use process it only to give us results, under terms that do not allow them to use it to train their models.
• Voice answers. If you answer Maya by voice, your browser's built-in speech feature turns your words into text. Some browsers do this on their maker's servers under that company's own privacy terms. You can type your answers instead.

Under the Digital Personal Data Protection Act, we use personal data on one of these grounds:

• Your consent, which you give when you create a profile, upload documents, take the interview or join the newsletter. We ask in clear words and for a stated purpose.
• Legitimate uses the Act allows without separate consent, such as data you give us yourself for a specific purpose (for example a question sent through our contact page), meeting a legal duty, and purposes connected to employment when we employ someone on a company's behalf.

You can withdraw consent at any time, as easily as you gave it. Withdrawing does not affect what we did before. It may mean we can no longer offer part of the service, for example showing your profile to employers.

Employers

Employers see a talent profile only when it has been verified and the person has chosen to be visible, or when the person applies to that employer's job. They see the profile, skills, experience and the interview summary. Uploaded files, including CVs and identity documents, are seen only by the person who uploaded them and our team.

Talent

Talent see the job posts and company details that employers publish, and messages and invitations sent to them.

Companies That Help Us Run MigRizo

We use a small number of service providers. Each one gets only what it needs for its task and must keep it secure.

When the Law Requires It

We share personal data with courts, the police, regulators or other authorities when Indian law or a valid legal order requires it. If MigRizo is ever merged or sold, personal data may move to the new owner, who must keep to this policy.

Some of our providers keep data on servers outside India, mainly in the United States. The Digital Personal Data Protection Act allows this, except to countries the Government of India restricts by notification. We will follow any such restriction. Wherever the data sits, we protect it as this policy describes.

Employers who use MigRizo may be based anywhere in the world. When you apply to or are hired by a company outside India, your profile and contract details are shared with that company in its country.

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.

We follow reasonable security practices as Indian law requires, including:

• encrypted connections (HTTPS) for every page and upload
• passwords stored only as one-way hashes, never in readable form
• uploaded files kept in private storage that cannot be opened from a public link
• a database closed to public access, with access limited to people on our team who need it
• a record of sensitive admin actions, such as verifying or changing a profile

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires, along with what happened and what we are doing about it. We will also report it to CERT-In where required.

Under the Digital Personal Data Protection Act, you have the right to:

• Access a summary of the personal data we hold about you, what we do with it and who we have shared it with.
• Correct, complete or update it. Most of your profile can be edited from your dashboard at any time.
• Erase it, when it is no longer needed and the law does not require us to keep it.
• Withdraw consent you gave earlier.
• Raise a grievance and get a response from our Grievance Officer.
• Nominate someone to use these rights for you if you die or become unable to act yourself.

To use any of these rights, send a privacy request through the contact page. We may ask you to confirm your identity first, so we never hand your data to someone else. We reply within 30 days and never charge for it.

MigRizo is for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we delete it. If you think a child has signed up, please tell us through the contact page.

While your account is open we send service emails, such as sign-in links, application updates and interview invitations, because the service does not work without them. Our newsletter is separate and only goes to people who asked for it. You can unsubscribe from the newsletter at any time from any issue or by writing to us.

When we change this policy we update the date at the top of the page. If a change affects how we use your personal data in a meaningful way, we tell you by email or on your dashboard before it takes effect and, where the law requires, ask for your consent again.

For any question, request or complaint about your personal data, contact our Grievance Officer. We acknowledge complaints within 24 hours and resolve them within 15 days.