Privacy Policy - Skillab

SkilLab Privacy Policy

DPDP Act 2023 Aligned | Version 3.0 | Last Updated: [May 2026]

This Privacy Policy explains how SkilLab handles personal information across our recruitment platform and services. Please read it carefully.

1. Introduction

SkilLab (“SkilLab”, “we”, “our”, “us”) is committed to respecting your privacy and recognizes the need for appropriate protection and management of any personal data you share with us. This Privacy Policy (“Policy”) describes how SkilLab collects, uses, processes, stores, discloses and transfers personal information of users through its website and applications, including through www.skillab.in and app.skillab.in, mobile applications and online services (collectively, the “Platform”).

This Policy applies to those who visit or use the Platform, or whose information SkilLab otherwise receives in connection with its services (including candidates, employers, recruiters, agencies, business partners and website visitors) (collectively referred to as “Users”). For the purposes of this Policy, “You” or “Your” shall mean the person who is accessing or using the Platform.

SkilLab acts as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and processes personal data in accordance with applicable Indian law. We will only use your personal data in a fair, reasonable and transparent manner, and where we have a lawful basis to do so.

2. Types of Personal Information Collected by SkilLab

“Personal Information” (PI) means any information relating to an identified or identifiable individual as defined under applicable Indian law. The Personal Information we collect, and how we collect it, depends upon how you interact with us. We collect the following categories of Personal Information in the following ways:

2.1 Candidate Information

When you register or use our services as a candidate, we may collect your full name, email address, mobile number, location (city, country), resume/CV content, work experience, educational qualifications, skills and certifications, salary details (if voluntarily provided), job preferences, and communication records.

2.2 Employer, Recruiter and Agency Information

When employers, recruiters or agencies register or engage with us, we may collect company/organization name, authorized representative details, business contact information, hiring requirements, job descriptions, interview feedback, candidate selection status, and recruiter activity and performance data generated through use of the Platform.

2.3 AI Interaction and Assessment Data

Where you use our AI-powered features (including resume scoring, resume enhancement, candidate profile scoring, skills-to-job-description assessment, and conversational AI assistance), we collect the inputs you provide to these features and the outputs generated, for the purpose of delivering and improving those features.

2.4 Communications and Call Data

To the extent permitted by law and where you have been notified, SkilLab may record, transcribe, monitor and analyze communications conducted through or in connection with the Platform — including telephone or voice calls — for purposes such as recruitment workflow support, AI call sentiment analysis, quality assurance, training, and compliance with our legal and regulatory obligations. Where call recording or analysis applies, participants will be informed and, where required, consent will be obtained before recording.

2.5 Automatically Collected Information

When you access the Platform, we automatically collect technical information such as IP address, device information, browser type and operating system, login activity, session duration, clickstream patterns, and usage patterns, including through cookies and similar technologies.

2.6 Information We Do NOT Collect

SkilLab does not require or intend to collect the following: Aadhaar number, PAN number, biometric data, government-issued ID copies, or financial or banking information from candidates. We limit data collection strictly to recruitment and service delivery purposes. If you voluntarily include such identifiers (for example, within your resume) they are provided at your own discretion, and we recommend you avoid including them.

3. How SkilLab Uses Your Personal Information

Our use of your personal data depends on the purpose for which you interact with us. We may process your Personal Information for the following purposes:

• Creating and managing user accounts, and providing our recruitment services and products to you.

• Facilitating job applications, matching candidates with employers, sharing resumes with employers you apply to or consent to be matched with, and enabling recruitment workflows.

• Providing AI-based features such as resume scoring and enhancement, candidate profile scoring, skills-to-job-description assessment, call sentiment insights, and conversational AI assistance. AI outputs are advisory in nature, do not constitute final hiring decisions, and remain subject to human oversight. SkilLab does not train its own proprietary AI models using your personal data.

• Improving the Platform and its content, and conducting analytics, product enhancement and feature optimization.

• Sending you service notifications, job alerts, interview updates, customer support communications and, where permitted, marketing communications about our products and services. You may opt out of marketing communications at any time using the unsubscribe option or by contacting us.

• Preventing, detecting and investigating fraud, security incidents, and violations of our Terms of Use, and establishing, exercising or defending legal claims.

• Complying with applicable legal, regulatory and statutory obligations.

Where we show or measure any tailored communications, we will not associate identifiers from cookies or similar technologies with sensitive categories such as those based on religion, caste, health or sexual orientation.

4. Cookies and Tracking Technologies

SkilLab uses cookies and similar tracking technologies to maintain user sessions, improve platform functionality, analyze usage patterns, and enhance user experience. Cookies may include:

• Essential Cookies — required for login and platform operation.

• Analytics Cookies — used to measure engagement and improve performance.

• Preference Cookies — store language or location preferences.

• Advertising Cookies (if applicable) — used for marketing optimization.

Most browsers allow you to control or block cookies through their settings. However, disabling essential cookies may affect platform functionality and require you to re-enter your credentials to access certain parts of the Platform. For more details, please refer to our separate Cookie Policy.

5. Legal Grounds for Collection and Processing

Your Personal Information is collected and processed by SkilLab based on the following legal grounds, depending upon the nature of the Personal Information and the purposes for which it is processed:

• Consent — where you voluntarily provide data for account creation, resume submission, use of AI tools, employer matching, or call recording. Your consent is sought at the time of collection, and you may withdraw it at any time (see Section 10). Withdrawing consent is as easy as giving it, though it may limit your ability to use certain services.

• Legitimate Use — for recruitment facilitation, provision and security of the Platform, and fraud prevention.

• Legal Obligation — where processing is necessary to comply with applicable law, a court order, or a lawful request from an authority.

6. Information Sharing and Disclosure

We restrict access to your Personal Information to authorized personnel who reasonably need it to perform their roles. SkilLab does not sell your Personal Information. We may share your Personal Information with:

• Employers, recruiters and agencies — when you apply for a job or consent to employer matching, so that they may consider your application. Such parties are contractually obligated to use candidate data only for legitimate recruitment purposes.

• Service providers — including cloud hosting providers (e.g., Amazon Web Services), AI and API providers (e.g., Google Gemini API, WhatsApp Business API), analytics providers and IT support vendors, who process data on our behalf. These providers are bound by confidentiality and data protection obligations and are required to adhere to standards consistent with this Policy.

• Legal and regulatory authorities — where disclosure is required to respond to court orders or legal process, establish or defend legal rights, or investigate and prevent fraud, security threats or illegal activity.

• Business transfers — in the event of a merger, acquisition, restructuring, financing or sale of assets, where Personal Information may be disclosed to parties involved in the transaction.

6.1 International Data Transfer

Some of our service providers, including AI and cloud infrastructure providers, may store or process your Personal Information on servers located outside India. Where your Personal Information is transferred outside India, we take the steps reasonably necessary to ensure it is protected in accordance with applicable data protection laws and that recipients are subject to appropriate safeguards. SkilLab does not transfer Personal Information to jurisdictions restricted under applicable Indian law.

6.2 Use of Google APIs

SkilLab’s use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

7. Third-Party Services and Content

The Platform may contain links to third-party websites or services that are not governed by this Privacy Policy. If you access external services or services offered by our partners, their own privacy policies will apply, and we recommend you review them. SkilLab is not responsible for how third parties handle your personal data. Where third-party AI APIs are used, processing may occur in accordance with the relevant provider’s data policies.

8. Children

The Platform is intended for individuals aged eighteen (18) years and above, or such older age as local law may require for us to lawfully provide our services. We do not knowingly collect personal data from minors. If you are under 18, you must not use the Platform except under the supervision of a parent, legal guardian or responsible adult, and we do not knowingly undertake tracking, behavioural monitoring or targeted advertising directed at children.

9. Retention of Personal Information

Your Personal Information will not be retained by SkilLab any longer than is necessary for the purposes for which it is processed, and/or in accordance with applicable legal, regulatory, contractual or statutory obligations. Inactive accounts may be deleted or archived after a defined period of inactivity. At the expiry of such periods, your Personal Information will be deleted or archived in compliance with applicable law. You may request deletion of your data at any time (see Section 10).

10. Controlling Your Personal Information (Your Rights)

Subject to applicable law, you have the right to:

• Access your Personal Information and obtain confirmation of whether it is being processed by us.

• Correct, update or rectify inaccurate or incomplete Personal Information.

• Request erasure or deletion of your Personal Information.

• Withdraw consent previously given.

• Exercise data portability where applicable.

• Nominate another individual to exercise your rights in the event of your death or incapacity, in accordance with the DPDP Act.

• File a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if unsatisfied.

To exercise these rights, please contact us using the details in Section 16. We may require valid proof of identity before acting on a request. If you wish to delete your SkilLab account, you may also do so using the settings available within your account. Please note that these rights are not absolute and are subject to limitations under applicable data protection law, and that we may charge a reasonable fee, or decline to act, where a request is manifestly unfounded or excessive.

11. Confidentiality and Security

The security and confidentiality of your Personal Information is important to us, and SkilLab implements reasonable technical and organizational safeguards to protect it, including HTTPS encryption, role-based access control, secure cloud hosting, activity logging, and restricted administrative access. Where we use external service providers acting as processors, we require them to adhere to standards consistent with those we apply.

We seek to comply with the requirements of the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made thereunder, to protect and preserve your privacy. While we strive to protect your information, no digital platform is completely secure, and we cannot guarantee absolute security.

12. Data Breach Notification

In the event of a personal data breach affecting your Personal Information, SkilLab will take prompt remedial action and will notify the Data Protection Board of India and affected Users as required under the DPDP Act and applicable law.

13. Social Media

SkilLab may operate channels, pages and accounts on certain social media platforms to inform, assist and engage with users. If you interact with SkilLab through such platforms, please do not communicate sensitive personal data — including information revealing racial or ethnic origin, political or religious beliefs, health, sexual orientation, national identification numbers, or criminal history — or any excessive, inappropriate, offensive or defamatory content. SkilLab is responsible only for its own use of Personal Information it directly collects, and not for information posted on third-party social media sites.

14. Changes to this Privacy Policy

SkilLab reserves the right to update, change or modify this Privacy Policy at any time. Any material changes will be posted on the Platform with an updated effective date, and the revised Policy shall take effect from the date of publication.

15. Disclaimer

SkilLab does not collect or store financial payment details, or credit/debit card details, from candidates. SkilLab shall not be liable for any loss or damage arising from disclosure of account or payment information in the course of any online transaction. In case any Personal Information is shared by you with SkilLab that is not requested by the Platform (whether mandatorily or optionally), SkilLab will not be liable for any information security breach or disclosure in relation to such information.

16. Grievance Officer / Data Protection Contact

If you have any questions, complaints or grievances regarding this Privacy Policy or the processing of your Personal Information, you may contact:

Grievance Officer

SkilLab -Vijay Gangarde

23, Vijay Vihar, Jaitala Road, Nagpur (MH), India – 440036.

Email: connect@skillab.in

We aim to respond to your request within 30 days of receipt.