Privacy Policy

1. Scope

This Privacy Policy explains how Hari Cornucopia Tech Private Limited ("HCTPL") processes personal data when you use HCTPL Global Staffing, visit our marketing pages, participate in video discovery calls, apply for roles, or interact with our recruitment automation features.

This Policy should be read with our Terms of Service, Cookie Policy, and any mandate-specific notices provided during onboarding.

2. Data controller

Data controller: Hari Cornucopia Tech Private Limited

CIN: U62012AP2023PTC111685

Registered office: 12-58/B, Jaggayyapalem, Jaggayyapalem, Visakhapatnam, Pedagantyada, Andhra Pradesh, India — 530012

Privacy contact: haricornucopiatech@gmail.com

3. Categories of data we collect

• Identity and contact data: name, email, phone, organisation name, job title.
• Account data: login credentials (stored as secure hashes), session tokens, portal preferences.
• Recruitment data: job descriptions, mandate requirements, candidate profiles, resumes, application answers, interview transcripts, screening scores, shortlist artefacts.
• Communication data: emails, meeting schedules, bot conversation transcripts, support enquiries.
• Payment data: transaction references, tier selection, payment status (card/UPI details are processed by payment partners such as PhonePe; we do not store full payment instrument numbers on our servers).
• Technical data: IP address, browser type, device information, logs, cookies, and usage analytics.

4. How we collect data

We collect data directly from you, from your organisation's authorised users, from candidates who apply or are sourced for mandates, from integrated services you enable (such as calendars or email), and automatically through the Platform.

5. Purposes of processing

• Providing and improving the Platform and recruitment services.
• Authenticating users and securing accounts.
• Conducting AI-assisted discovery, screening, and interview workflows.
• Generating shortlists, agreements, and client-visible status updates.
• Processing subscription payments and commercial records.
• Complying with legal obligations and responding to lawful requests.
• Sending service-related communications (not unsolicited spam).

6. Legal bases (India)

We process personal data based on consent, contractual necessity, compliance with law, and legitimate interests in operating secure recruitment services, where recognised under applicable Indian law including the Digital Personal Data Protection Act, 2023 (DPDP Act) and rules framed thereunder.

Where consent is required, you may withdraw it subject to operational limits—withdrawal may prevent us from delivering certain services.

7. AI and automated processing

The Platform uses automated systems, including large language models and speech technologies, to assist with conversations, extraction of hiring requirements, candidate ranking, and interview facilitation.

Automated outputs may inform recruiter and client decisions but significant employment decisions remain your responsibility. You may request human review of specific programme steps where supported by your service tier and agreement.

8. Sharing and disclosure

We share data only as needed to operate the Platform. We do not sell personal data as a standalone product.

• Between client organisations and recruitment teams involved in a mandate.
• With candidates as part of legitimate hiring processes.
• With infrastructure, AI, email, telephony, video, calendar, and payment providers under appropriate contracts.
• With professional advisers or authorities when required by law.

9. Data retention

We retain data for as long as necessary to provide services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by data type and mandate status. You may request deletion subject to legal and contractual retention needs.

10. Security

We implement administrative, technical, and organisational measures appropriate to the sensitivity of recruitment data, including access controls, encryption in transit where supported, and separation of production environments. No method of transmission or storage is completely secure.

11. Your rights

Subject to applicable law, you may request access, correction, erasure, withdrawal of consent, or grievance redressal regarding your personal data.

Contact haricornucopiatech@gmail.com or see our Grievance Redressal page. We will respond within timelines required by law.

12. Children

The Platform is not directed at children under 18. We do not knowingly collect data from children for recruitment services.

13. Cross-border processing

Your data may be processed in India and, where you use subprocessors or cloud regions outside India, in other jurisdictions with appropriate safeguards as required by law.

14. Updates

We may update this Policy from time to time. The "last updated" date will change accordingly.

Last updated: 12 June 2026.