1. Overview
This Privacy Policy describes how SLV Technologies Pvt. Ltd. ("we", "us", "our") collects, uses, stores, and protects personal data when you use StaffSync360 ("the Service", "the Platform"). It applies to all users of StaffSync360 — account holders, recruiters, hiring managers, and candidates whose data is managed within the platform.
We are committed to complying with India's Digital Personal Data Protection Act, 2023 (DPDPA) and any applicable data protection laws in jurisdictions where we operate.
By using StaffSync360, you consent to the collection and use of your personal data as described in this policy. If you do not agree, please discontinue use of the platform.
2. Who We Are
Data Fiduciary (Controller):
SLV Technologies Pvt. Ltd.
#12, 3rd Floor, Satellite Complex, Koppikar Road
Hubbali – 580020, Karnataka, India
Email: privacy@staffsync360.com
Phone: +91 99000 82193
For the purposes of DPDPA, SLV Technologies Pvt. Ltd. is the Data Fiduciary responsible for all personal data processed through StaffSync360.
3. Data We Collect
3.1 Account and User Data
When you create a StaffSync360 account, we collect:
- Full name, email address, phone number
- Company or agency name, job title
- Billing information (processed by Razorpay/Stripe — we do not store card details)
- Login credentials (password stored as a one-way hash — never readable)
3.2 Product Usage Data
- Features used, pages visited, actions taken within the platform
- Login timestamps, device type, browser, IP address
- Error logs and performance data
3.3 Candidate Data (Managed on Behalf of Recruiters)
Recruiters using StaffSync360 upload and manage candidate profiles. This data — which may include names, contact information, resumes, salary data, visa status, and interview notes — is collected and stored on behalf of the recruiter (who is the Data Fiduciary for that candidate data). See Section 9 for our full candidate data policy.
3.4 Communication Data
- Messages sent through the platform's communication log
- Support enquiries and responses
- Demo requests and contact form submissions
4. How We Use Your Data
We use your personal data to:
- Operate the Service: Create and manage your account, process subscriptions, provide features you have paid for
- Improve the Service: Analyse usage patterns, identify bugs, improve features, and train AI models on anonymised, aggregated data
- Communicate with you: Send product updates, billing notifications, and support responses. You can opt out of marketing communications at any time
- Comply with law: Respond to legal requests, prevent fraud, and enforce our Terms of Service
- Security: Detect, investigate, and prevent security threats, fraud, and abuse
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
5. Data Sharing
We do not sell your personal data. We do not share it with advertisers. We share data only with:
- Service providers: Infrastructure providers (AWS/GCP for hosting), payment processors (Razorpay, Stripe), email delivery (for transactional emails), analytics tools — all bound by data processing agreements
- Legal authorities: When required by law, court order, or to prevent imminent harm
- Business transfers: If SLV Technologies is acquired or merges, data may be transferred to the successor entity under the same privacy terms
All third-party processors are selected for their security practices and are contractually bound to process data only as instructed by us.
6. Data Storage and Security
All StaffSync360 data is stored on servers located in India (primary) with disaster recovery in a secondary geographic region. We implement the following security measures:
- AES-256 encryption at rest for all data
- TLS 1.2+ encryption in transit for all connections
- Field-level encryption for especially sensitive data (visa numbers, SSNs, bank details)
- Hourly database backups to two geographic locations
- Role-based access control — staff can only access data necessary for their function
- Regular security audits and penetration testing
- SOC 2 Type II certification on our roadmap for Year 2 (2027)
No security system is impenetrable. In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware, as required under DPDPA.
7. Cookies and Tracking
We use cookies and similar technologies to:
- Essential cookies: Keep you logged in, remember your preferences (currency, language). Cannot be disabled without breaking the service
- Analytics cookies: Understand how the platform is used (page views, feature adoption). Anonymised and aggregated
- Marketing cookies: Track conversions from paid advertising campaigns. You can opt out
We do not use third-party advertising tracking cookies. We do not participate in cross-site tracking networks.
You can manage cookie preferences via your browser settings. Disabling essential cookies will impair platform functionality.
8. Your Rights Under DPDPA
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access: Request a copy of all personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (subject to legal obligations)
- Right to grievance redressal: Lodge a complaint with us or with the Data Protection Board of India
- Right to nominate: Nominate another person to exercise your rights in the event of your death or incapacity
- Right to withdraw consent: Withdraw consent for optional data processing at any time
To exercise any of these rights, email us at privacy@staffsync360.com with "Data Rights Request" in the subject line. We will respond within 30 days.
9. Candidate Data — Special Section
StaffSync360 is a B2B platform. Recruiters and agencies use it to manage candidate profiles. In this context:
- The recruiter/agency is the Data Fiduciary for candidate personal data they upload into StaffSync360
- SLV Technologies acts as a Data Processor for that candidate data — we process it only as instructed by the recruiter, not for our own purposes
- Recruiters are responsible for ensuring they have the legal basis (candidate consent or legitimate interest) to upload and process candidate data into StaffSync360
- We provide a Data Processing Agreement (DPA) to enterprise accounts on request — email privacy@staffsync360.com
If you are a candidate whose data has been uploaded into StaffSync360 by a recruiter, contact that recruiter directly for data access or deletion requests. You may also contact us at privacy@staffsync360.com and we will facilitate the request.
10. Data Retention
- Active accounts: Data retained as long as your account is active
- After account cancellation: Data retained for 90 days (to allow reactivation), then permanently deleted
- Backup data: Purged from backups within 30 days of primary deletion
- Billing records: Retained for 7 years as required by Indian tax law
- Log data: Retained for 90 days, then deleted
You can export your data at any time before deletion. Exported data includes all candidate profiles, job history, and submission records in CSV format.
11. Children's Data
StaffSync360 is a professional platform intended for use by adults (18 years and older) in a professional capacity. We do not knowingly collect personal data from children under 18. If we become aware that a child under 18 has provided personal data, we will delete it promptly. If you believe a minor's data has been submitted, contact us at privacy@staffsync360.com.
12. International Data Transfers
StaffSync360 is primarily operated from India. For users in the USA or other countries, your data may be transferred to and processed in India. We ensure appropriate safeguards are in place for any international data transfer, including contractual data transfer mechanisms where required.
For USA users, we comply with applicable US state privacy laws to the extent required. If you have specific compliance requirements, contact us at privacy@staffsync360.com.
13. Changes to This Policy
We may update this Privacy Policy periodically. Material changes — changes that affect your rights or how we use your data — will be communicated by email to all account holders and displayed prominently in the platform for 30 days before taking effect.
Continued use of StaffSync360 after a policy update constitutes acceptance of the revised policy. If you do not accept the changes, you may close your account.
14. Contact Us
For any privacy-related questions, data rights requests, or complaints:
Data Protection Contact
SLV Technologies Pvt. Ltd.
#12, 3rd Floor, Satellite Complex, Koppikar Road
Hubbali – 580020, Karnataka, India
Email: privacy@staffsync360.com
Phone: +91 99000 82193
If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India once established under the DPDPA.