Privacy Policy for
Perhire Platform
Privacy Policy for
Perhire Platform
1. Introduction and Scope
This Privacy Policy describes how Empathetic Technologies Pvt. Ltd. ('Perhire', 'we', 'us', or 'our') collects, uses, processes, and discloses your information in connection with your access to and use of the Perhire platform at 'perhire.ai' and its related services (collectively, the 'Platform'). This Policy applies to all Users of the Platform, including Clients and Freelancers (collectively, 'Users', 'you', or 'your').
By accessing or using the Platform, you signify your understanding of and agreement to the terms of this Policy. This Policy should be read in conjunction with our Terms and Conditions. Perhire is committed to processing data in compliance with the Information Technology Act, 2000, and The Digital Personal Data Protection (DPDP) Act, 2023 of India ('DPDP Act').
Significant Data Fiduciary Status
Empathetic Technologies Pvt. Ltd. has conducted an assessment of its data processing activities in accordance with Section 10 of the DPDP Act. Based on current operations, we are monitoring our status against the criteria for designation as a Significant Data Fiduciary, which include the volume and sensitivity of personal data processed, the risk of harm to Data Principals, the impact on sovereignty and integrity of India, and the use of new technologies including AI-based profiling.
Should the Central Government of India notify Perhire as a Significant Data Fiduciary, we will immediately comply with all additional obligations including appointing a Data Protection Officer, conducting annual Data Protection Impact Assessments, and undergoing independent audits. We will update this policy to reflect such designation and provide the contact information of our Data Protection Officer.
2. How We Obtain Your Consent
Consent Mechanism
When you sign up for or use the Perhire Platform, we obtain your consent to collect and process your Personal Data through a clear and specific consent process:
For New Users:
● During account registration, you will be presented with a standalone consent notice that clearly describes the Personal Data we collect and how we use it
● You must actively consent by checking an unmarked checkbox (pre-ticked boxes are not used)
● You cannot proceed with registration without providing this consent
● The consent notice is separate from and not bundled with our Terms and Conditions
What You Consent To:
● Collection of your contact, professional, and payment information as described in Section 3
● Use of your data for AI-powered matching as described in Section 5
● Communication from us regarding your account and projects
● Processing your data for the specific purposes outlined in Section 4
Managing Your Consent:
● You can withdraw your consent at any time by contacting our Grievance Officer at contact@perhire.ai
● Withdrawal of consent may affect your ability to use certain features of the Platform
● We will action your withdrawal request within 15 days and inform you of the consequences
This consent process complies with Section 6 of the DPDP Act, ensuring your consent is free, specific, informed, unconditional, and unambiguous, and is provided through a clear affirmative action.
3. Definitions
Unless otherwise defined in this Policy, terms used have the same meaning as in our Terms and Conditions. Key terms under this Policy and as defined in the DPDP Act are:
a) Personal Data: Any data about an individual who is identifiable by or in relation to such data.
b) Data Fiduciary: Perhire is the Data Fiduciary, the entity that determines the purpose and means of processing your Personal Data.
c) Data Processor: Any person who processes Personal Data on behalf of a Data Fiduciary.
d) Data Principal: The individual to whom the Personal Data relates (i.e., you, the User).
e) Processing: In relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, such as collection, recording, organisation, structuring, storage, retrieval, use, alignment, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure, or destruction.
4. Information We Collect (Personal Data)
We collect Personal Data that you provide directly to us, that is generated during your use of the Platform, and that we may collect from third-party sources. The categories of Personal Data we collect include:
a) Information from Clients:
● Contact Information: Full name, email address, phone number (including for WhatsApp communication).
● Business Information: Company name, designation, business address, Goods and Services Tax Identification Number (GSTIN).
● Project Details: Project briefs, scopes of work, budgets, and any other data submitted via the Platform.
● Payment Information: Data required to process payments and fund the Escrow Account. Note: Sensitive financial details like card numbers are handled directly by our secure payment gateway partners.
b) Information from Freelancers:
● Identity & Contact Information: Full name, email address, phone number, residential address.
● Professional Information: Skills, experience, educational background, portfolios, client references, and results from any skill assessments conducted by Perhire.
● Tax & Financial Information: Permanent Account Number (PAN) linked with Aadhaar, bank account details for payment processing, and GSTIN if applicable.
● User-Generated Content: Content created or submitted on the Platform, such as profile descriptions and communications.
c) Data Collected Automatically:
● Technical & Usage Data: IP address, browser type, device information, operating system, pages visited, features used, links clicked, and time spent on the Platform. This data is collected automatically through cookies and similar technologies.
5. How We Use Your Information (Purpose of Processing)
We process your Personal Data for the following legitimate purposes, based on your consent and the necessity to perform our contractual obligations:
a) Service Provision and AI-Matching: To operate the Platform, create and manage your account, facilitate AI-powered matching between Client projects and Freelancer skills, and enable project coordination.
b) Payment Facilitation: To process payments from Clients, hold funds in an RBI-compliant Escrow Account, and release payments to Freelancers upon Project completion, minus applicable fees and taxes.
c) Communication and Support: To communicate with you regarding your account, projects, platform updates, and to respond to your inquiries and support requests via email, WhatsApp, or other platform channels.
d) AI Model Training & Improvement: To use anonymized and aggregated data for statistical analysis and to train our proprietary AI models to improve the accuracy and efficiency of our matching services, as stated in our Terms and Conditions.
e) Security and Fraud Prevention: To verify identity, monitor for fraudulent or prohibited activity, and enforce our Terms and Conditions.
f) Marketing and Promotion: To promote the Platform, we may use User-Generated Content with attribution. With your explicit consent where required, we may send you direct marketing communications about our services.
g) Legal and Tax Compliance: To comply with our legal obligations, such as deducting Tax at Source (TDS) as per the Income Tax Act, 1961, issuing TDS certificates, and responding to lawful requests from regulatory authorities.
h) Dispute Resolution: To resolve disputes between Users or between a User and Perhire.
6. Automated Decision-Making and Profiling
As part of our service, we utilize automated systems and AI models to match Clients with suitable Freelancers. This process involves profiling based on the Personal Data you provide.
How Our AI Matching Works
Our AI analyzes your stated skills, portfolio content, work history, project completion rate, client feedback ratings, response time, and availability patterns to calculate a compatibility score for new project opportunities. The system considers project requirements (technical skills needed, budget range, timeline, industry domain, complexity level) and matches them against Freelancer profiles to predict project success likelihood and fit. This helps us suggest the most relevant opportunities to you and helps Clients find suitable Freelancers efficiently.
Human Review and Your Rights
When Human Review Occurs:
Human review is triggered for decisions that:
● Result in account suspension or termination
● Significantly restrict your access to the Platform or its features
● Deny or reverse a payment that has already been processed
● Remove your preferred or verified status
● Have a material financial impact exceeding ₹50,000 in potential earnings over a 30-day period
● Involve appeals or disputes you have raised regarding AI-based decisions
Your Rights:
● You have the right to request detailed information about the logic, factors, and weights used in any automated decision affecting you
● You have the right to request human review of any automated decision
● You have the right to challenge any decision made solely by automated means
● To exercise these rights, contact our Grievance Officer at contact@perhire.ai with details of the decision you wish to challenge
This transparency complies with the principles of informed consent and fairness under the DPDP Act, ensuring you understand how automated processing affects your use of the Platform.
7. Legal Basis for Processing
We process your Personal Data based on the following lawful grounds as prescribed by the DPDP Act:
a) Consent: For the purposes outlined in this Policy, for which you have given clear, informed, specific, and freely given consent through the mechanism described in Section 2. You may withdraw your consent at any time.
b) Contractual Necessity: The processing is necessary for the performance of the contract (our Terms and Conditions) to which you are a party.
c) Legitimate Interest: For purposes such as improving our AI models and platform security, where our legitimate interests are not overridden by your data protection rights.
d) Legal Obligation: The processing is necessary for us to comply with the law (e.g., tax and corporate law).
8. Data Sharing and Disclosure
We do not sell or rent your Personal Data. We may share your Personal Data only in the following limited circumstances:
a) Between Clients and Freelancers: Once a match is confirmed, we share necessary information (like names, professional profiles, and project details) to enable them to enter into a direct service contract and collaborate effectively.
b) Third-Party Service Providers (Data Processors): We engage third parties for services like payment processing, cloud hosting (e.g., AWS, Google Cloud), and communication platforms (e.g., WhatsApp). These providers have access to Personal Data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. All Data Processors are bound by written contracts that require them to implement appropriate security safeguards and comply with DPDP Act requirements.
c) Legal Requirements: We may disclose your Personal Data if required to do so by law, court order, or in response to a valid request by a government or law enforcement authority.
d) Business Transfers: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred as a business asset. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
9. Your Rights as a Data Principal
In accordance with the DPDP Act, you have the following rights over your Personal Data:
a) Right to Access Information: You can request access to a summary of your Personal Data that is being processed by us and the processing activities undertaken. We will respond within 15 days.
b) Right to Correction and Erasure: You have the right to request the correction of inaccurate or incomplete Personal Data and the erasure of your Personal Data, subject to our legal and contractual data retention obligations. We will action requests within 30 days.
c) Right to Grievance Redressal: You have the right to have any grievances regarding your Personal Data addressed by our Grievance Officer, who will acknowledge complaints within 24 hours and resolve them within 15 days.
d) Right to Nominate: You have the right to nominate any other individual who, in the event of your death or incapacity, shall exercise your rights under this Policy.
To exercise any of these rights, please contact our Grievance Officer using the details provided in Section 21. We will process your request in accordance with applicable law and respond within the timeframes prescribed by the DPDP Act.
10. Duties of the User (Data Principal)
In accordance with the DPDP Act, you have a duty to not impersonate another person, suppress any material information, or furnish any false particulars while applying for any document, service, unique identifier, proof of identity, or proof of address. You must comply with all provisions of applicable law when using the Platform.
11. Opt-Out Mechanisms
You have the right to control how we use your data. You can opt-out of receiving direct marketing communications from us at any time by following the unsubscribe link in our emails or by contacting us. Please note that even if you opt-out of marketing communications, we may still send you transactional or administrative messages, such as those related to your account or ongoing projects.
12. Data Security
We have implemented appropriate technical and organizational security measures, including:
Technical Safeguards:
● End-to-end encryption for data transmission and storage at rest
● Data masking and pseudonymization where appropriate
● Multi-factor authentication for account access
● Regular security vulnerability assessments and penetration testing
● Automated backup systems with encrypted backups
Organizational Safeguards:
● Access controls limiting data access to authorized personnel only
● Confidentiality obligations binding all employees and contractors
● Regular security training for all staff members
● Data breach detection and response protocols
● Third-party security audits
These measures are designed to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
13. Data Breach Notification
In the event of a Personal Data breach that is likely to cause harm to you, we are obligated to notify the Data Protection Board of India within 72 hours of becoming aware of the breach. We will also notify affected Data Principals without undue delay via email and platform notification. Our notification will include:
● The nature and extent of the breach
● The categories and approximate number of Data Principals affected
● The likely consequences of the breach
● The measures taken or proposed to mitigate the harm
● Contact information for our Grievance Officer for further inquiries
14. Data Retention
General Principle:
We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Once the purpose is fulfilled and retention is no longer necessary, your Personal Data will be securely deleted or anonymized in accordance with Section 8(7) of the DPDP Act.
Specific Retention Periods:
For All Users:
● Active Account Data: Retained while your account is active and you continue to use our services.
● Transaction and Project Data: Retained for 3 years after project completion for dispute resolution, quality assurance, and platform improvement purposes.
● Financial Records (TDS, Invoices): Retained for 7 years as required by the Income Tax Act, 1961.
● Communication Logs: Retained for 1 year after the last communication for support and dispute resolution purposes.
● System Logs and Processing Records: Retained for a minimum of 1 year as required by Rule 8(3) of the DPDP Rules, 2025 for audit and compliance purposes.
Inactive Account Deletion: If you have not logged in or engaged with the Platform for 3 consecutive years, we will notify you via email and WhatsApp at least 48 hours before deletion, in accordance with Rule 8(2) of the DPDP Rules, 2025. You may prevent deletion by logging in or contacting us within this period. This notice will include information on how to access, correct, or retrieve your data before deletion.
Upon Account Closure: When you delete your account, your Personal Data will be erased within 30 days, except for data we are legally required to retain (financial records for tax compliance, legal hold requirements, or data necessary for ongoing legal proceedings).
All data deletions are logged and auditable to demonstrate compliance with DPDP Act obligations.
15. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and personalize our Platform, analyze traffic, and understand user behavior. Cookies are small data files stored on your device.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Platform effectively.
For detailed information on the cookies we use and how to manage them, please see our Cookie Policy at [https://perhire.ai/cookie-policy].
16. International Data Transfers
Your Personal Data may be transferred to, stored, and processed in a country other than India where our servers or third-party service providers are located. We only transfer Personal Data to countries that are not on the restricted list ('blacklist') published by the Central Government of India under Section 16(1) of the DPDP Act.
When we transfer your data to third-party Data Processors in other countries, we ensure they are bound by written contractual obligations to:
● Implement appropriate technical and organizational security safeguards equivalent to those required under Indian law
● Process data only for the specified purposes and in accordance with our instructions
● Notify us immediately of any data breaches
● Delete or return data upon completion of services
● Not transfer data to any country on the Government of India's restricted list without our prior written consent and appropriate safeguards
If the Government of India notifies additional restrictions on international data transfers under Rule 15 of the DPDP Rules, 2025, we will immediately comply and notify affected users of any material changes to our data transfer practices.
17. Third-Party Links
Our Platform may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
18. Children's Privacy
Our Platform is not intended for use by anyone under the age of 18 ('Child'). We do not knowingly collect personally identifiable information from Children. If we become aware that we have collected Personal Data from a Child without verification of parental consent, we will take immediate steps to remove that information from our servers within 24 hours and notify the parent or guardian if their contact information is available.
19. Changes to This Privacy Policy
Perhire reserves the right to modify this Privacy Policy at any time. We will alert you of any changes by:
● Updating the 'Effective Date' and version number at the top of this policy
● Displaying a prominent notice on our Platform for at least 30 days
● Sending you an email notification if we have your contact information
● Where required by law, obtaining your fresh consent for material changes
Your continued use of the Platform after any such revision constitutes your acceptance of the new policy. We maintain a version history of this Policy, and previous versions are available upon request to contact@perhire.ai.
20. Contact Information and Grievance Redressal
For any queries, concerns, or grievances regarding this Privacy Policy or the processing of your data, you may contact our appointed Grievance Officer:
Grievance Officer:
Name: Aditya G
Email: contact@perhire.ai
Address: Empathetic Technologies Pvt. Ltd., Bengaluru, Karnataka, India
Response Timeline:
● Acknowledgment: Within 24 hours of complaint receipt
● Resolution: Within 15 days from the date of receipt
● Updates: We will provide status updates every 5 days if resolution requires more time
If you are not satisfied with the resolution, you have the right to appeal to the Data Protection Board of India. Information on filing complaints with the Board is available at [https://dataprotection.gov.in] (once operational).
21. Severability
If any provision of this Policy is held to be unenforceable or invalid by a court of competent jurisdiction, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions will continue in full force and effect.
22. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, specifically the Digital Personal Data Protection Act, 2023. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts in Bengaluru, Karnataka, India.
Document Control:
● Version: 3.0
● Last Updated: November 21, 2025
● Next Review: May 21, 2026
● Approved By: Legal & Compliance Team
● DPDP Act Compliance Status: Compliant with DPDP Act 2023 and DPDP Rules 2025
● Language Versions: English
● SDF Status: Under Assessment - Will update if notified
1. Introduction and Scope
This Privacy Policy describes how Empathetic Technologies Pvt. Ltd. ('Perhire', 'we', 'us', or 'our') collects, uses, processes, and discloses your information in connection with your access to and use of the Perhire platform at 'perhire.ai' and its related services (collectively, the 'Platform'). This Policy applies to all Users of the Platform, including Clients and Freelancers (collectively, 'Users', 'you', or 'your').
By accessing or using the Platform, you signify your understanding of and agreement to the terms of this Policy. This Policy should be read in conjunction with our Terms and Conditions. Perhire is committed to processing data in compliance with the Information Technology Act, 2000, and The Digital Personal Data Protection (DPDP) Act, 2023 of India ('DPDP Act').
Significant Data Fiduciary Status
Empathetic Technologies Pvt. Ltd. has conducted an assessment of its data processing activities in accordance with Section 10 of the DPDP Act. Based on current operations, we are monitoring our status against the criteria for designation as a Significant Data Fiduciary, which include the volume and sensitivity of personal data processed, the risk of harm to Data Principals, the impact on sovereignty and integrity of India, and the use of new technologies including AI-based profiling.
Should the Central Government of India notify Perhire as a Significant Data Fiduciary, we will immediately comply with all additional obligations including appointing a Data Protection Officer, conducting annual Data Protection Impact Assessments, and undergoing independent audits. We will update this policy to reflect such designation and provide the contact information of our Data Protection Officer.
2. How We Obtain Your Consent
Consent Mechanism
When you sign up for or use the Perhire Platform, we obtain your consent to collect and process your Personal Data through a clear and specific consent process:
For New Users:
● During account registration, you will be presented with a standalone consent notice that clearly describes the Personal Data we collect and how we use it
● You must actively consent by checking an unmarked checkbox (pre-ticked boxes are not used)
● You cannot proceed with registration without providing this consent
● The consent notice is separate from and not bundled with our Terms and Conditions
What You Consent To:
● Collection of your contact, professional, and payment information as described in Section 3
● Use of your data for AI-powered matching as described in Section 5
● Communication from us regarding your account and projects
● Processing your data for the specific purposes outlined in Section 4
Managing Your Consent:
● You can withdraw your consent at any time by contacting our Grievance Officer at contact@perhire.ai
● Withdrawal of consent may affect your ability to use certain features of the Platform
● We will action your withdrawal request within 15 days and inform you of the consequences
This consent process complies with Section 6 of the DPDP Act, ensuring your consent is free, specific, informed, unconditional, and unambiguous, and is provided through a clear affirmative action.
3. Definitions
Unless otherwise defined in this Policy, terms used have the same meaning as in our Terms and Conditions. Key terms under this Policy and as defined in the DPDP Act are:
a) Personal Data: Any data about an individual who is identifiable by or in relation to such data.
b) Data Fiduciary: Perhire is the Data Fiduciary, the entity that determines the purpose and means of processing your Personal Data.
c) Data Processor: Any person who processes Personal Data on behalf of a Data Fiduciary.
d) Data Principal: The individual to whom the Personal Data relates (i.e., you, the User).
e) Processing: In relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, such as collection, recording, organisation, structuring, storage, retrieval, use, alignment, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure, or destruction.
4. Information We Collect (Personal Data)
We collect Personal Data that you provide directly to us, that is generated during your use of the Platform, and that we may collect from third-party sources. The categories of Personal Data we collect include:
a) Information from Clients:
● Contact Information: Full name, email address, phone number (including for WhatsApp communication).
● Business Information: Company name, designation, business address, Goods and Services Tax Identification Number (GSTIN).
● Project Details: Project briefs, scopes of work, budgets, and any other data submitted via the Platform.
● Payment Information: Data required to process payments and fund the Escrow Account. Note: Sensitive financial details like card numbers are handled directly by our secure payment gateway partners.
b) Information from Freelancers:
● Identity & Contact Information: Full name, email address, phone number, residential address.
● Professional Information: Skills, experience, educational background, portfolios, client references, and results from any skill assessments conducted by Perhire.
● Tax & Financial Information: Permanent Account Number (PAN) linked with Aadhaar, bank account details for payment processing, and GSTIN if applicable.
● User-Generated Content: Content created or submitted on the Platform, such as profile descriptions and communications.
c) Data Collected Automatically:
● Technical & Usage Data: IP address, browser type, device information, operating system, pages visited, features used, links clicked, and time spent on the Platform. This data is collected automatically through cookies and similar technologies.
5. How We Use Your Information (Purpose of Processing)
We process your Personal Data for the following legitimate purposes, based on your consent and the necessity to perform our contractual obligations:
a) Service Provision and AI-Matching: To operate the Platform, create and manage your account, facilitate AI-powered matching between Client projects and Freelancer skills, and enable project coordination.
b) Payment Facilitation: To process payments from Clients, hold funds in an RBI-compliant Escrow Account, and release payments to Freelancers upon Project completion, minus applicable fees and taxes.
c) Communication and Support: To communicate with you regarding your account, projects, platform updates, and to respond to your inquiries and support requests via email, WhatsApp, or other platform channels.
d) AI Model Training & Improvement: To use anonymized and aggregated data for statistical analysis and to train our proprietary AI models to improve the accuracy and efficiency of our matching services, as stated in our Terms and Conditions.
e) Security and Fraud Prevention: To verify identity, monitor for fraudulent or prohibited activity, and enforce our Terms and Conditions.
f) Marketing and Promotion: To promote the Platform, we may use User-Generated Content with attribution. With your explicit consent where required, we may send you direct marketing communications about our services.
g) Legal and Tax Compliance: To comply with our legal obligations, such as deducting Tax at Source (TDS) as per the Income Tax Act, 1961, issuing TDS certificates, and responding to lawful requests from regulatory authorities.
h) Dispute Resolution: To resolve disputes between Users or between a User and Perhire.
6. Automated Decision-Making and Profiling
As part of our service, we utilize automated systems and AI models to match Clients with suitable Freelancers. This process involves profiling based on the Personal Data you provide.
How Our AI Matching Works
Our AI analyzes your stated skills, portfolio content, work history, project completion rate, client feedback ratings, response time, and availability patterns to calculate a compatibility score for new project opportunities. The system considers project requirements (technical skills needed, budget range, timeline, industry domain, complexity level) and matches them against Freelancer profiles to predict project success likelihood and fit. This helps us suggest the most relevant opportunities to you and helps Clients find suitable Freelancers efficiently.
Human Review and Your Rights
When Human Review Occurs:
Human review is triggered for decisions that:
● Result in account suspension or termination
● Significantly restrict your access to the Platform or its features
● Deny or reverse a payment that has already been processed
● Remove your preferred or verified status
● Have a material financial impact exceeding ₹50,000 in potential earnings over a 30-day period
● Involve appeals or disputes you have raised regarding AI-based decisions
Your Rights:
● You have the right to request detailed information about the logic, factors, and weights used in any automated decision affecting you
● You have the right to request human review of any automated decision
● You have the right to challenge any decision made solely by automated means
● To exercise these rights, contact our Grievance Officer at contact@perhire.ai with details of the decision you wish to challenge
This transparency complies with the principles of informed consent and fairness under the DPDP Act, ensuring you understand how automated processing affects your use of the Platform.
7. Legal Basis for Processing
We process your Personal Data based on the following lawful grounds as prescribed by the DPDP Act:
a) Consent: For the purposes outlined in this Policy, for which you have given clear, informed, specific, and freely given consent through the mechanism described in Section 2. You may withdraw your consent at any time.
b) Contractual Necessity: The processing is necessary for the performance of the contract (our Terms and Conditions) to which you are a party.
c) Legitimate Interest: For purposes such as improving our AI models and platform security, where our legitimate interests are not overridden by your data protection rights.
d) Legal Obligation: The processing is necessary for us to comply with the law (e.g., tax and corporate law).
8. Data Sharing and Disclosure
We do not sell or rent your Personal Data. We may share your Personal Data only in the following limited circumstances:
a) Between Clients and Freelancers: Once a match is confirmed, we share necessary information (like names, professional profiles, and project details) to enable them to enter into a direct service contract and collaborate effectively.
b) Third-Party Service Providers (Data Processors): We engage third parties for services like payment processing, cloud hosting (e.g., AWS, Google Cloud), and communication platforms (e.g., WhatsApp). These providers have access to Personal Data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose. All Data Processors are bound by written contracts that require them to implement appropriate security safeguards and comply with DPDP Act requirements.
c) Legal Requirements: We may disclose your Personal Data if required to do so by law, court order, or in response to a valid request by a government or law enforcement authority.
d) Business Transfers: In the event of a merger, acquisition, or sale of assets, your Personal Data may be transferred as a business asset. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
9. Your Rights as a Data Principal
In accordance with the DPDP Act, you have the following rights over your Personal Data:
a) Right to Access Information: You can request access to a summary of your Personal Data that is being processed by us and the processing activities undertaken. We will respond within 15 days.
b) Right to Correction and Erasure: You have the right to request the correction of inaccurate or incomplete Personal Data and the erasure of your Personal Data, subject to our legal and contractual data retention obligations. We will action requests within 30 days.
c) Right to Grievance Redressal: You have the right to have any grievances regarding your Personal Data addressed by our Grievance Officer, who will acknowledge complaints within 24 hours and resolve them within 15 days.
d) Right to Nominate: You have the right to nominate any other individual who, in the event of your death or incapacity, shall exercise your rights under this Policy.
To exercise any of these rights, please contact our Grievance Officer using the details provided in Section 21. We will process your request in accordance with applicable law and respond within the timeframes prescribed by the DPDP Act.
10. Duties of the User (Data Principal)
In accordance with the DPDP Act, you have a duty to not impersonate another person, suppress any material information, or furnish any false particulars while applying for any document, service, unique identifier, proof of identity, or proof of address. You must comply with all provisions of applicable law when using the Platform.
11. Opt-Out Mechanisms
You have the right to control how we use your data. You can opt-out of receiving direct marketing communications from us at any time by following the unsubscribe link in our emails or by contacting us. Please note that even if you opt-out of marketing communications, we may still send you transactional or administrative messages, such as those related to your account or ongoing projects.
12. Data Security
We have implemented appropriate technical and organizational security measures, including:
Technical Safeguards:
● End-to-end encryption for data transmission and storage at rest
● Data masking and pseudonymization where appropriate
● Multi-factor authentication for account access
● Regular security vulnerability assessments and penetration testing
● Automated backup systems with encrypted backups
Organizational Safeguards:
● Access controls limiting data access to authorized personnel only
● Confidentiality obligations binding all employees and contractors
● Regular security training for all staff members
● Data breach detection and response protocols
● Third-party security audits
These measures are designed to protect your Personal Data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
13. Data Breach Notification
In the event of a Personal Data breach that is likely to cause harm to you, we are obligated to notify the Data Protection Board of India within 72 hours of becoming aware of the breach. We will also notify affected Data Principals without undue delay via email and platform notification. Our notification will include:
● The nature and extent of the breach
● The categories and approximate number of Data Principals affected
● The likely consequences of the breach
● The measures taken or proposed to mitigate the harm
● Contact information for our Grievance Officer for further inquiries
14. Data Retention
General Principle:
We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Once the purpose is fulfilled and retention is no longer necessary, your Personal Data will be securely deleted or anonymized in accordance with Section 8(7) of the DPDP Act.
Specific Retention Periods:
For All Users:
● Active Account Data: Retained while your account is active and you continue to use our services.
● Transaction and Project Data: Retained for 3 years after project completion for dispute resolution, quality assurance, and platform improvement purposes.
● Financial Records (TDS, Invoices): Retained for 7 years as required by the Income Tax Act, 1961.
● Communication Logs: Retained for 1 year after the last communication for support and dispute resolution purposes.
● System Logs and Processing Records: Retained for a minimum of 1 year as required by Rule 8(3) of the DPDP Rules, 2025 for audit and compliance purposes.
Inactive Account Deletion: If you have not logged in or engaged with the Platform for 3 consecutive years, we will notify you via email and WhatsApp at least 48 hours before deletion, in accordance with Rule 8(2) of the DPDP Rules, 2025. You may prevent deletion by logging in or contacting us within this period. This notice will include information on how to access, correct, or retrieve your data before deletion.
Upon Account Closure: When you delete your account, your Personal Data will be erased within 30 days, except for data we are legally required to retain (financial records for tax compliance, legal hold requirements, or data necessary for ongoing legal proceedings).
All data deletions are logged and auditable to demonstrate compliance with DPDP Act obligations.
15. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and personalize our Platform, analyze traffic, and understand user behavior. Cookies are small data files stored on your device.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Platform effectively.
For detailed information on the cookies we use and how to manage them, please see our Cookie Policy at [https://perhire.ai/cookie-policy].
16. International Data Transfers
Your Personal Data may be transferred to, stored, and processed in a country other than India where our servers or third-party service providers are located. We only transfer Personal Data to countries that are not on the restricted list ('blacklist') published by the Central Government of India under Section 16(1) of the DPDP Act.
When we transfer your data to third-party Data Processors in other countries, we ensure they are bound by written contractual obligations to:
● Implement appropriate technical and organizational security safeguards equivalent to those required under Indian law
● Process data only for the specified purposes and in accordance with our instructions
● Notify us immediately of any data breaches
● Delete or return data upon completion of services
● Not transfer data to any country on the Government of India's restricted list without our prior written consent and appropriate safeguards
If the Government of India notifies additional restrictions on international data transfers under Rule 15 of the DPDP Rules, 2025, we will immediately comply and notify affected users of any material changes to our data transfer practices.
17. Third-Party Links
Our Platform may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
18. Children's Privacy
Our Platform is not intended for use by anyone under the age of 18 ('Child'). We do not knowingly collect personally identifiable information from Children. If we become aware that we have collected Personal Data from a Child without verification of parental consent, we will take immediate steps to remove that information from our servers within 24 hours and notify the parent or guardian if their contact information is available.
19. Changes to This Privacy Policy
Perhire reserves the right to modify this Privacy Policy at any time. We will alert you of any changes by:
● Updating the 'Effective Date' and version number at the top of this policy
● Displaying a prominent notice on our Platform for at least 30 days
● Sending you an email notification if we have your contact information
● Where required by law, obtaining your fresh consent for material changes
Your continued use of the Platform after any such revision constitutes your acceptance of the new policy. We maintain a version history of this Policy, and previous versions are available upon request to contact@perhire.ai.
20. Contact Information and Grievance Redressal
For any queries, concerns, or grievances regarding this Privacy Policy or the processing of your data, you may contact our appointed Grievance Officer:
Grievance Officer:
Name: Aditya G
Email: contact@perhire.ai
Address: Empathetic Technologies Pvt. Ltd., Bengaluru, Karnataka, India
Response Timeline:
● Acknowledgment: Within 24 hours of complaint receipt
● Resolution: Within 15 days from the date of receipt
● Updates: We will provide status updates every 5 days if resolution requires more time
If you are not satisfied with the resolution, you have the right to appeal to the Data Protection Board of India. Information on filing complaints with the Board is available at [https://dataprotection.gov.in] (once operational).
21. Severability
If any provision of this Policy is held to be unenforceable or invalid by a court of competent jurisdiction, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions will continue in full force and effect.
22. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India, specifically the Digital Personal Data Protection Act, 2023. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts in Bengaluru, Karnataka, India.
Document Control:
● Version: 3.0
● Last Updated: November 21, 2025
● Next Review: May 21, 2026
● Approved By: Legal & Compliance Team
● DPDP Act Compliance Status: Compliant with DPDP Act 2023 and DPDP Rules 2025
● Language Versions: English
● SDF Status: Under Assessment - Will update if notified
Work flows better when everything clicks
Whether you're building something big or joining something great — PerHire brings together vetted talent, structured briefs, and human support to make collaboration seamless. For freelancers. For companies. For the future of work.
Work flows better when everything clicks
Whether you're building something big or joining something great — PerHire brings together vetted talent, structured briefs, and human support to make collaboration seamless. For freelancers. For companies. For the future of work.
Work flows better when everything clicks
Whether you're building something big or joining something great — PerHire brings together vetted talent, structured briefs, and human support to make collaboration seamless. For freelancers. For companies. For the future of work.