Skip to main content

Privacy Policy

Last updated 19 August 2026 · Version 2026-08-19

This notice explains what personal data ChipJobs collects, why, how long it is kept, and what you can make us do about it. It is written to meet the notice requirement in section 5 of India’s Digital Personal Data Protection Act 2023 (the DPDP Act). Section 13 below covers visitors in the EU/EEA under the GDPR.

1. Who is responsible for your data

The Data Fiduciary — the entity that decides why and how your personal data is processed — is:

  • ReyaTech Systems Private Limited, operating the website chipjobs.reyatech.com
  • Registered address: Prestige NorthPoint, Kalyananagar, Bangalore North, Bangalore, Karnataka, India — 560043
  • CIN: U62013KA2025PTC212560
  • Contact for privacy matters: privacy@reyatech.com

ChipJobs is a semiconductor-only job board for India. It is operated by a single founder, not a large organisation, and the data practices below are deliberately narrow because of it.

2. What we collect, and the exact purpose for each

We collect only what a stated purpose needs (purpose limitation). If we later want to use your data for a different purpose, we will ask you again — we will not repurpose data you already gave us.

  • Email address — first so Buttondown can send the confirmation you asked for, and only after you confirm so it can send ChipJobs job alerts. Basis: your consent, captured by a tick box that starts unticked and completed by mailbox confirmation.
  • Name — not collected by the alert form today.
  • Employer enquiry details (your name, work email, company, message) — so we can reply to you about posting roles. Basis: your consent, and the steps leading to a contract.
  • Resume, profile and application data (phone number, education, work history, skills, uploaded CV) — not collected today. Candidate accounts are not built yet. When they ship, each field will be listed here with its own purpose, and collection will begin only after a separate, itemised consent.
  • Technical logs (IP address, browser user-agent, pages requested, timestamps) — kept briefly to keep the site up, spot abuse, and count visits in aggregate. Basis: our legitimate interest in operating a secure service.

3. What we deliberately do not collect

  • We do not harvest recruiter or employee contact details from job postings or career pages. Every listing on the board today is entered by hand from the employer’s own posting, and any name, email address or phone number in that posting is left behind rather than copied across. There is no automated ingestion pipeline yet; if one ships, this section will say what it does before it runs.
  • We do not collect caste, religion, health, biometric, financial or any other sensitive category of data. Please do not put it in a form or a CV you send us.
  • We do not sell, rent or trade personal data. We do not share your email address with employers unless you apply through us and are told at that moment that we are doing so.
  • We do not run behavioural advertising or cross-site tracking pixels.

4. Consent, and how to withdraw it

Every form that collects personal data carries an itemised consent box. It is never pre-ticked, it is never bundled with the terms, and the form will not submit until you tick it yourself — a pre-ticked box is not consent under the DPDP Act.

When you submit, ChipJobs sends Buttondown the email address, timestamp, version of this policy and which form you used. We do not send your IP address as consent evidence. Buttondown keeps the address unactivated and sends a confirmation; ChipJobs creates no Supabase subscriber row until a signed provider event confirms the mailbox. A confirmed record also stores the Buttondown subscriber ID, current status, confirmation and withdrawal times, and the last provider event time.

Withdrawing is as easy as giving. Either use the unsubscribe link at the foot of any email we send you, or write to the Grievance Officer at privacy@reyatech.com with the word “withdraw”. We stop processing immediately, and delete or anonymise the affected data within 30 days. Withdrawal does not undo processing that was lawful before you withdrew, and we may keep the minimum record needed to prove we honoured your request.

5. How long we keep it

  • 24 months at most for confirmed alerts. The daily retention job deletes a confirmed provider and Supabase record no later than 24 months after confirmation or a later reconfirmation.
  • 30 days at most for pending or inactive alerts.Unactivated Buttondown records, and records made inactive by unsubscribe, complaint or hard bounce, are hard-deleted after 30 days. An erasure request is completed within the same ceiling.
  • Technical logs: 90 days, then discarded.
  • Where a law requires us to keep something longer (tax records for a paying employer, for example), we keep only that record, only for as long as the law says.

6. Your rights as a Data Principal

Under the DPDP Act you are a Data Principal and you have these rights over your data:

  • Access (s.11) — a summary of the personal data we hold about you, what we are doing with it, and who else we have shared it with.
  • Correction and completion (s.12) — have inaccurate or misleading data corrected, incomplete data completed, and out-of-date data updated.
  • Erasure (s.12) — have your data deleted once the purpose it was collected for is served, or once you withdraw consent, unless a law requires us to keep it.
  • Grievance redressal (s.13) — a named person who must answer you, before you need to approach anyone else.
  • Nomination (s.14) — nominate another individual to exercise these rights on your behalf if you die or become incapacitated. Write to the Grievance Officer to record a nominee.

The Act also places duties on you (s.15): do not give false particulars or impersonate someone else when signing up, and do not file frivolous complaints.

How to exercise a right: email privacy@reyatech.com from the address you signed up with, saying which right you are exercising. There is no fee. We respond within 30 days.

7. Grievance Officer

If anything here has gone wrong — a request ignored, data you did not expect us to have, an email you cannot unsubscribe from — this is the person accountable for fixing it. This contact also serves as the grievance officer under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

  • Grievance Officer: Rishi Tode
  • Email: privacy@reyatech.com
  • Postal address: Prestige NorthPoint, Kalyananagar, Bangalore North, Bangalore, Karnataka, India — 560043
  • Response times: acknowledgement within 24 hours, resolution within 15 days.

If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

8. Who else processes your data

These are our Data Processors. Each processes data only on our instructions, and none of them is permitted to use it for their own purposes.

  • Supabase — database and file storage in India. For alerts it stores only confirmed records; pending addresses are absent.
  • Vercel — website hosting and content delivery.
  • No third-party analytics. No analytics or advertising script loads on this site — not Plausible, not Google Analytics, not anything else. Counting is first-party: a row in our own database recording which event happened and on which listing, with no IP address, no user agent, no cookie and no session identifier. Nothing in it identifies a person. If an analytics provider is ever added, it will be named here before it loads.
  • Buttondown, LLC — email confirmation, subscription management, delivery and the personal unsubscribe link. Buttondown is a US processor and uses US infrastructure/sub-processors, including Heroku (Salesforce) and Amazon Web Services. It stores the address and subscription metadata and may process technical delivery, open and click information when an email or link is used. ChipJobs does not send it the visitor IP from the signup request.

9. Where your data is stored

Confirmed alert records in our database sit in India (ap-south-1). Pending and confirmed email subscription data is also processed by Buttondown and its sub-processors in the United States. Our hosting and delivery network is global, so page requests and technical logs may be handled by servers outside India. Section 16 of the DPDP Act permits transfers outside India except to countries the Central Government restricts by notification; if such a notification affects any provider listed above, we will move or stop that transfer.

10. Security

  • Personal data is encrypted at rest; traffic to the site is TLS-encrypted.
  • Access to production data is limited to the operator of the service.
  • Row-level security is enabled on every table holding personal data.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal without delay, as section 8(6) of the DPDP Act requires, and the relevant supervisory authority within 72 hours where the GDPR applies.

11. Cookies

We use only cookies that are strictly necessary to serve the site. No advertising or cross-site tracking cookie is set. If we later add analytics or advertising that uses cookies, visitors in the EU/EEA and the UK will be asked to opt in first, and nothing non-essential will load before that opt-in.

12. Children

ChipJobs is a professional job board and is not directed at anyone under 18. We do not knowingly collect data from children, and we do not track or profile them or target advertising at them, as section 9 of the DPDP Act requires. If you believe a child has given us data, write to the Grievance Officer and we will delete it.

13. For visitors in the EU and EEA (GDPR)

ChipJobs is aimed at the Indian semiconductor market, but if you are in the EU/EEA the GDPR applies to you and ReyaTech Systems Private Limited is the controller.

  • Legal bases: consent (Art. 6(1)(a)) for alerts and any profile data; legitimate interests (Art. 6(1)(f)) for security and aggregate traffic measurement; steps prior to a contract (Art. 6(1)(b)) for employer enquiries.
  • Your rights: access, rectification, erasure, restriction, portability and objection (Arts. 15–21), and the right to withdraw consent at any time (Art. 7(3)). Same address: privacy@reyatech.com. We reply within 30 days.
  • Transfers out of the EEA: your data is stored in India and processed by the providers named in section 8, under those providers’ standard contractual clauses.
  • Complaints: you may lodge one with your national supervisory authority.
  • Article 27 representative: we have not appointed an EU representative, because we do not target the EU market. If that changes, one will be appointed and named here.

14. Changes to this policy

The version number and date at the top of this page change whenever the policy does. If a change materially affects how we use data you have already given us, we will email you and ask for fresh consent rather than assume the old one still covers it.

15. Contact

Privacy questions: privacy@reyatech.com. Everything else: info@reyatech.com. See also the Terms of Service.