Skip to main content
chipjobs

Privacy Policy

Last updated 13 August 2026 · Version 2026-08-13

This notice explains what personal data ChipJobs collects, why, how long it is kept, and what you can make us do about it. It is written to meet the notice requirement in section 5 of India’s Digital Personal Data Protection Act 2023 (the DPDP Act). Section 13 below covers visitors in the EU/EEA under the GDPR.

1. Who is responsible for your data

The Data Fiduciary — the entity that decides why and how your personal data is processed — is:

  • [LEGAL ENTITY NAME], operating the website chipjobs.reyatech.com
  • Registered address: [REGISTERED ADDRESS]
  • Contact for privacy matters: [GRIEVANCE OFFICER EMAIL]

ChipJobs is a semiconductor-only job board for India. It is operated by a single founder, not a large organisation, and the data practices below are deliberately narrow because of it.

2. What we collect, and the exact purpose for each

We collect only what a stated purpose needs (purpose limitation). If we later want to use your data for a different purpose, we will ask you again — we will not repurpose data you already gave us.

  • Email address — so we can send you the job alerts or updates you asked for. Basis: your consent, captured by a tick box that starts unticked.
  • Name (optional) — to address you in those emails. Basis: your consent.
  • Employer enquiry details (your name, work email, company, message) — so we can reply to you about posting roles. Basis: your consent, and the steps leading to a contract.
  • Resume, profile and application data (phone number, education, work history, skills, uploaded CV) — not collected today. Candidate accounts are not built yet. When they ship, each field will be listed here with its own purpose, and collection will begin only after a separate, itemised consent.
  • Technical logs (IP address, browser user-agent, pages requested, timestamps) — kept briefly to keep the site up, spot abuse, and count visits in aggregate. Basis: our legitimate interest in operating a secure service.

3. What we deliberately do not collect

  • We do not harvest recruiter or employee contact details from job postings or career pages. Every listing on the board today is entered by hand from the employer’s own posting, and any name, email address or phone number in that posting is left behind rather than copied across. There is no automated ingestion pipeline yet; if one ships, this section will say what it does before it runs.
  • We do not collect caste, religion, health, biometric, financial or any other sensitive category of data. Please do not put it in a form or a CV you send us.
  • We do not sell, rent or trade personal data. We do not share your email address with employers unless you apply through us and are told at that moment that we are doing so.
  • We do not run behavioural advertising or cross-site tracking pixels.

4. Consent, and how to withdraw it

Every form that collects personal data carries an itemised consent box. It is never pre-ticked, it is never bundled with the terms, and the form will not submit until you tick it yourself — a pre-ticked box is not consent under the DPDP Act.

When you consent, we record four things and nothing else: the email address you gave, the timestamp, the version of this policy that was on screen at the time, and which form on the site you used. We do not record your IP address against your consent.

Withdrawing is as easy as giving. Either use the unsubscribe link at the foot of any email we send you, or write to the Grievance Officer at [GRIEVANCE OFFICER EMAIL] with the word “withdraw”. We stop processing immediately, and delete or anonymise the affected data within 30 days. Withdrawal does not undo processing that was lawful before you withdrew, and we may keep the minimum record needed to prove we honoured your request.

5. How long we keep it

  • Under 24 months, always. Personal data is deleted or anonymised no later than 24 months after your last activity — the last time you opened an email, logged in, or otherwise used the service. Today the operator does this by hand; there is no automated retention job yet. When one is built this line will say so.
  • Within 30 days of you withdrawing consent or asking for erasure, whichever is sooner.
  • Technical logs: 90 days, then discarded.
  • Where a law requires us to keep something longer (tax records for a paying employer, for example), we keep only that record, only for as long as the law says.

6. Your rights as a Data Principal

Under the DPDP Act you are a Data Principal and you have these rights over your data:

  • Access (s.11) — a summary of the personal data we hold about you, what we are doing with it, and who else we have shared it with.
  • Correction and completion (s.12) — have inaccurate or misleading data corrected, incomplete data completed, and out-of-date data updated.
  • Erasure (s.12) — have your data deleted once the purpose it was collected for is served, or once you withdraw consent, unless a law requires us to keep it.
  • Grievance redressal (s.13) — a named person who must answer you, before you need to approach anyone else.
  • Nomination (s.14) — nominate another individual to exercise these rights on your behalf if you die or become incapacitated. Write to the Grievance Officer to record a nominee.

The Act also places duties on you (s.15): do not give false particulars or impersonate someone else when signing up, and do not file frivolous complaints.

How to exercise a right: email [GRIEVANCE OFFICER EMAIL] from the address you signed up with, saying which right you are exercising. There is no fee. We respond within 30 days.

7. Grievance Officer

If anything here has gone wrong — a request ignored, data you did not expect us to have, an email you cannot unsubscribe from — this is the person accountable for fixing it. This contact also serves as the grievance officer under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

  • Grievance Officer: [GRIEVANCE OFFICER NAME]
  • Email: [GRIEVANCE OFFICER EMAIL]
  • Postal address: [REGISTERED ADDRESS]
  • Response times: acknowledgement within 24 hours, resolution within 15 days.

If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

8. Who else processes your data

These are our Data Processors. Each processes data only on our instructions, and none of them is permitted to use it for their own purposes.

  • Supabase — database and file storage.
  • Vercel — website hosting and content delivery.
  • Plausible Analytics — aggregate visit counts, with no cookie, no cross-site tracking and no personal data. It is the only third-party script the site loads.
  • No email service provider yet. Nothing has been sent to the job-alert list; addresses sit in the Supabase database above and go nowhere else. A provider will be named here before the first email is sent.

9. Where your data is stored

Our database and file storage sit in [DATA HOSTING REGION]. Our hosting and delivery network is global, so page requests and technical logs may be handled by servers outside India. Section 16 of the DPDP Act permits transfers outside India except to countries the Central Government restricts by notification; if such a notification affects any provider listed above, we will move or stop that transfer.

10. Security

  • Personal data is encrypted at rest; traffic to the site is TLS-encrypted.
  • Access to production data is limited to the operator of the service.
  • Row-level security is enabled on every table holding personal data.

No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal without delay, as section 8(6) of the DPDP Act requires, and the relevant supervisory authority within 72 hours where the GDPR applies.

11. Cookies

We use only cookies that are strictly necessary to serve the site. No advertising or cross-site tracking cookie is set. If we later add analytics or advertising that uses cookies, visitors in the EU/EEA and the UK will be asked to opt in first, and nothing non-essential will load before that opt-in.

12. Children

ChipJobs is a professional job board and is not directed at anyone under 18. We do not knowingly collect data from children, and we do not track or profile them or target advertising at them, as section 9 of the DPDP Act requires. If you believe a child has given us data, write to the Grievance Officer and we will delete it.

13. For visitors in the EU and EEA (GDPR)

ChipJobs is aimed at the Indian semiconductor market, but if you are in the EU/EEA the GDPR applies to you and [LEGAL ENTITY NAME] is the controller.

  • Legal bases: consent (Art. 6(1)(a)) for alerts and any profile data; legitimate interests (Art. 6(1)(f)) for security and aggregate traffic measurement; steps prior to a contract (Art. 6(1)(b)) for employer enquiries.
  • Your rights: access, rectification, erasure, restriction, portability and objection (Arts. 15–21), and the right to withdraw consent at any time (Art. 7(3)). Same address: [GRIEVANCE OFFICER EMAIL]. We reply within 30 days.
  • Transfers out of the EEA: your data is stored in India and processed by the providers named in section 8, under those providers’ standard contractual clauses.
  • Complaints: you may lodge one with your national supervisory authority.
  • Article 27 representative: we have not appointed an EU representative, because we do not target the EU market. If that changes, one will be appointed and named here.

14. Changes to this policy

The version number and date at the top of this page change whenever the policy does. If a change materially affects how we use data you have already given us, we will email you and ask for fresh consent rather than assume the old one still covers it.

15. Contact

Privacy questions: [GRIEVANCE OFFICER EMAIL]. Everything else: [CONTACT EMAIL]. See also the Terms of Service.