PRIVACY POLICY

Effective Date: March 1, 2025   Last Updated: May 4, 2025

Zavara.io (“we”, “our”, “us”) is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and protect your data in accordance with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• UK Data Protection Act 2018 (UK-DPA)

1. WHO WE ARE

Zavara.io is an AI-powered recruitment platform provided by TRIMONKS DIGI TECH PVT LTD, registered in India, Tamil Nadu.
For privacy inquiries, contact: info@zavara.io
PLOT NO 72, 4TH STREET RAJARAJAN NAGAR Sriperumbudur, Tamil Nadu - 600125

2. PERSONAL DATA WE COLLECT

We collect and process the following categories of data:

• Contact information (name, email, phone)
• Professional information (resume, work history, skills)
• Account data (login credentials, preferences)
• Usage data (how you interact with our platform)
• Device data (IP address, browser type)

3. LEGAL BASES FOR PROCESSING (GDPR)

We process your data lawfully based on:

• Contract performance
• Legitimate interest (e.g., service improvement, security)
• Your consent
• Legal obligations

4. YOUR RIGHTS (GDPR & UK-DPA)

You have the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion (“Right to be Forgotten”)
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

5. CCPA NOTICE FOR CALIFORNIA RESIDENTS

You have the right to:

• Know what personal data we collect
• Request deletion of your personal data
• Opt-out of the sale of personal information (we do not sell data)
• Non-discrimination for exercising your rights

To exercise these rights, email info@zavara.io or use the form at www.zavara.io/do-not-sell

6. HOW WE USE YOUR DATA

We use your data to:

• Operate and improve Zavara.io
• Match candidates with jobs
• Communicate with you
• Monitor service performance
• Comply with legal obligations

7. DATA RETENTION

We retain your data only as long as necessary to fulfill our contractual and legal obligations. You may request early deletion.

8. DATA SHARING

We only share your data with:

• Trusted service providers (hosting, analytics, communications)
• Authorized personnel
• Authorities if legally obligated

All vendors are vetted for GDPR/CCPA compliance.

9. INTERNATIONAL TRANSFERS

Data may be stored or processed in countries outside the EEA or UK. In such cases, we implement Standard Contractual Clauses or other safeguards.

10. SECURITY MEASURES

We follow industry best practices such as:

• Encryption at rest and in transit
• Role-based access control
• Secure cloud infrastructure

11. CHANGES TO THIS POLICY

We may update this policy as needed. Continued use of Zavara.io means you accept the updated terms.