Privacy Policy

QwikJob is a brand and trading style of Evoastra Ventures (OPC) Private Limited, registered at Flat No. 101, Shree Samarth Building, Swami Samarth Nagar, Alibag, Raigad, Maharashtra 402201, India. For the purposes of India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for the personal data described here. If you are in the UK or the EEA, we are the equivalent of a data controller.

This policy explains what we collect, why, who we share it with, how long we keep it, and what you can ask us to do. It applies to qwikjob.com and our related services.

Questions about anything here: privacy@qwikjob.com.

Information you give us:

• Account: name, email address, password (stored only as a secure hash), phone number, country, city and state.
• Profile: headline, bio, skills, hourly rate, languages, portfolio items, avatar and banner images.
• Work: projects, briefs, proposals, offers, contracts, milestones, delivered files, time entries and reviews.
• Messages you send to other Users and to our support team.
• Payout details: bank account number and IFSC, submitted for the purpose of paying you.
• Identity documents, where verification is required.
• Tax details you choose to provide, such as GSTIN.

Information we collect automatically:

• Usage: pages viewed, searches, features used, and actions taken on the Platform.
• Device and connection: IP address, browser type, operating system, language and approximate location derived from IP.
• Cookies and similar technologies, described in section 7.
• Security and audit logs: sign-ins, permission changes, administrative actions and payment events.

Information from others:

• Our payment partner tells us the status of a payment, a payout and an identity check. It does not give us your full card number.
• If you sign in with Google, we receive your name, email address and profile picture from Google.

We do not ask for, and ask you not to send us, data about health, religion, caste, sexual life, political opinions or biometric identifiers. We have no use for it.

We use personal data to:

• create and run your account, and authenticate you;
• operate the marketplace — publish listings, match work, deliver messages and manage contracts;
• take payments, hold funds in escrow, pay out and issue invoices;
• verify identity, prevent fraud, abuse, spam and money laundering, and keep the Platform secure;
• resolve disputes between Users, which involves reading the record of the engagement;
• provide support and reply to you;
• send service messages you cannot opt out of while you hold an account, such as security alerts, payment notices and changes to these documents;
• send optional product and marketing email, which you can turn off at any time;
• improve the Platform, including measuring which features are used; and
• comply with law, including tax, accounting and information-technology obligations, and to respond to lawful requests.

Under the DPDP Act we rely on your consent, and on the “legitimate uses” the Act permits, including performing a service you have asked for and complying with law. Where the UK GDPR or EU GDPR applies to you, our bases are contract, legitimate interests (running and securing a marketplace), legal obligation and consent.

We do not sell your personal data. We do not use it to train our own AI models.

Some information is public by design, because a marketplace does not work otherwise.

• Public: your display name, profile photo, headline, bio, skills, portfolio, ratings, reviews, response indicators and any services you list.
• Shared with the other party to an engagement: your messages, files, delivery history and the first name and contact route needed to do the work.
• Never public: your email address, phone number, password, bank details, identity documents and tax identifiers.

Reviews you leave and receive are public and stay published if you later close your account, shown without your profile link. Treat anything you put in a public profile field as public.

We share personal data with service providers who process it only on our instructions:

• Razorpay — payments, escrow, payout accounts and identity checks. Your card and bank details go to Razorpay, not to us.
• Our email provider — to deliver transactional and, if you opt in, marketing email.
• Oracle Cloud Infrastructure — hosting and backups, in a data centre located in India.
• AI model providers, as described in section 6.

We also share personal data:

• with the other party to an engagement, as described in section 4;
• where you tell us to;
• with professional advisers, auditors and insurers, under confidentiality;
• where the law requires it, or to establish, exercise or defend legal claims, or to protect the rights and safety of Users and the public; and
• with a buyer or successor if our business is sold or reorganised, on notice to you.

We do not share your personal data with advertisers.

When you use an AI feature, the text of your prompt and the context needed to answer it are sent to a third-party model provider. Depending on availability, that provider is DeepSeek, Google (Gemini) or OpenAI. Some processing happens outside India.

What this means in practice:

• Only what the feature needs is sent — typically the text you are drafting or the listing being summarised.
• We do not send your bank details, password or identity documents to any AI provider.
• We do not use your data to train our own models, and we use these providers on terms intended to prevent your prompts being used to train theirs.
• Please do not enter confidential information, other people's personal data, credentials or payment details into an AI feature. Once sent, we cannot recall it.

You can avoid AI processing entirely by not using the AI features. They are optional and the Platform works without them.

We use a small number of cookies and similar technologies:

• Strictly necessary: signing you in, keeping your session, remembering your language, and protecting against cross-site request forgery. The Platform cannot work without these.
• Preferences: remembering choices such as your locale and interface settings.
• Analytics: understanding which features are used, so we can improve them. These are aggregated and not used to build advertising profiles.

We do not run third-party advertising or cross-site tracking cookies.

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will sign you out and break parts of the Platform.

We keep personal data only as long as we need it:

• Account and profile data: while your account is open.
• After you ask us to delete your account: a 30-day grace period during which you can change your mind, then irreversible deletion of your personal data.
• Financial records — invoices, payments, payouts and ledger entries: retained for the period Indian tax and company law requires, currently up to eight years, even after an account closes. We cannot delete these on request; the law requires us to hold them.
• Dispute records: for the length of the dispute plus the period during which a legal claim could still be brought.
• Security and audit logs: typically up to 12 months.
• Backups: overwritten on a rolling cycle. Data removed from live systems disappears from backups as that cycle completes.

Reviews and public contributions may remain visible after account closure, shown without a link to your profile.

Measures we take include:

• HTTPS everywhere, with strict transport security;
• passwords stored only as salted hashes, never in readable form;
• payment card and bank data handled by our regulated payment partner, not stored on our systems;
• access to production data restricted to those who need it, with administrative actions recorded in an audit log;
• private storage for identity documents and invoices, reachable only through short-lived signed links;
• automated scanning of uploaded files, and content-type controls so an upload cannot execute in your browser; and
• encrypted, off-site backups.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

Our servers and backups are in India.

Some service providers process data outside India — notably the AI model providers in section 6, and our email provider. Where that happens we rely on the provider's contractual commitments to protect the data, and we transfer only what the service needs.

If you are in the UK or EEA and your data reaches India, that transfer is made under appropriate safeguards, including standard contractual clauses where required.

Under India's DPDP Act you may:

• ask for a summary of the personal data we hold about you and how we process it;
• ask us to correct or complete inaccurate or incomplete data;
• ask us to erase personal data that is no longer needed for the purpose it was collected;
• withdraw consent where we relied on it, which does not affect processing already carried out;
• nominate someone to exercise your rights if you die or become incapacitated; and
• complain to us first, and then to the Data Protection Board of India if we do not resolve it.

If the UK or EU GDPR applies to you, you also have rights of access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority.

Most of this is self-service: you can edit your profile, download your data and request account deletion from your dashboard. For anything else, write to privacy@qwikjob.com. We will respond within 30 days and will verify who you are before acting, because acting on an impersonated request would itself be a breach.

Some data cannot be erased on request where the law requires us to keep it — see section 8.

QwikJob is not for anyone under 18, and we do not knowingly collect data about children. The DPDP Act treats anyone under 18 as a child and requires verifiable parental consent, which we are not set up to obtain.

If you believe a child has created an account, tell us at privacy@qwikjob.com and we will remove it.

We send service messages — security alerts, payment notices, dispute updates and changes to these documents — for as long as you hold an account. These are part of the service and cannot be switched off.

Marketing email is separate and optional. Every marketing message has an unsubscribe link, and you can change your preferences in your dashboard at any time. Unsubscribing from marketing does not stop service messages.

If you are unhappy with how we have handled your personal data, contact our Grievance Officer. We will acknowledge within 24 hours and aim to resolve within 15 days, as the Information Technology Rules, 2021 require.

Grievance Officer: Aniket Prakash Manwatkar Email: grievance@qwikjob.com Address: Flat No. 101, Shree Samarth Building, Swami Samarth Nagar, Alibag, Raigad, Maharashtra 402201, India

If we do not resolve your complaint, you may escalate it to the Data Protection Board of India, or to your local supervisory authority if you are in the UK or EEA.

We may update this policy. The “last updated” date at the top shows when we last did.

Where a change materially affects how we use your personal data, we will tell you on the Platform or by email before it takes effect, and where the law requires consent we will ask for it again.

Evoastra Ventures (OPC) Private Limited (trading as QwikJob) Registered office: Flat No. 101, Shree Samarth Building, Swami Samarth Nagar, Alibag, Raigad, Maharashtra 402201, India

Privacy: privacy@qwikjob.com Grievance Officer: grievance@qwikjob.com General support: support@qwikjob.com