Who this applies to, and who we are
This policy explains how Jobors handles personal data. It applies to teachers who create an account, to staff at organizations who post roles and review candidates, and to visitors who browse without signing in.
Jobors is a product of NCR Eduservices Private Limited, CIN U80904UP2012PTC051292, registered at A-401, Golden-I, Techzone IV, Greater Noida West, Uttar Pradesh 201318, India. The roles listed on Jobors today are in India. We intend to open other markets, and this policy will be updated before we do.
You can use Jobors from anywhere, and wherever you are, your own country's data-protection law applies to you. Clause 10 sets out the additional rights that gives you.
Depending on where you are, we are the 'Data Fiduciary' (India), 'Business' or 'Controller' (United States), 'APP entity' (Australia) or 'Controller' (UAE, Saudi Arabia, Qatar and neighbouring states) for the data described here. Whichever label applies, our obligations to you are the ones set out in this policy.
Where we handle data on behalf of an organization — for example the notes a recruiter writes on an application — we act as a processor for that organization, and the organization is responsible for it.
You must be 18 or older to hold a Jobors account. We do not knowingly create accounts for children, and we do not process children's data. If you believe a child has registered, write to us and we will delete the account.
What we collect
We collect only what the service needs. The tables below list the actual fields, not categories.
Group Fields Account First and last name, email address, password (stored only as a salted hash — we never hold the password itself), account status, email-verification state. Teacher profile Headline, biography, designation, years of experience, subjects, curriculum boards, current city and state, preferred cities, open-to-work flag, profile photo if you upload one. Credentials Education records, employment history, skills and proficiency, certifications, and up to three résumé files (PDF, DOC or DOCX, 5 MB each). Activity Jobs you save, job alerts you create, applications you submit and their stage history, interviews scheduled with you, and notifications with your delivery preferences. Organization accounts The staff member's name and work email, their role within the organization, and the organization's own details: name, city, state, affiliation board, type, description and logo. Billing (organizations only) How many job posts the organization currently has published, against its allowance. Jobors does not operate a self-serve checkout, so we hold no card details, no billing address and no payment history. Technical IP address, browser user agent, and timestamps, recorded for security, abuse prevention and diagnosing faults. We do not run advertising, we do not build behavioural profiles, and we do not embed third-party analytics or tracking scripts of any kind.
Who can see your profile — read this one
You decide whether organizations can find your teacher profile. You are asked when you create your account — “Visible to organizations” is pre-selected, and the other choice is Hidden. If you sign up with Google, you are asked straight after your account is created, and again each time you sign in until you answer. You can change the setting at any time with “Make profile public” under Edit profile.
While your profile is visible, two things are switched on: organizations can find you in candidate search, and your profile has its own page.
Candidate search. If your profile is visible and you have marked yourself open to work, organizations hiring on Jobors can find you in their candidate search. Only signed-in recruiters and administrators of an organization can use it; other teachers and the public cannot search or browse profiles. A search result shows:
- Your name
- Your headline and designation
- Your current city and state
- Your years of experience and subjects
- Your profile level, and when you last updated your profile
From a search result, an organization can open your profile page, described next. Search never shows your email address, phone number, employers, education, employment history, résumé or salary expectation.
Your profile page. A visible profile is served at a web address of the form /profiles/<identifier>, and anyone holding that link can open it without signing in. We want you to know exactly what a stranger sees.
Visible on your profile page:
- Your headline and biography, as you wrote them
- Designation and years of experience
- Subjects, curriculum boards and preferred cities
- Teacher eligibility tests you hold, such as CTET
- Your current city and state
- Whether you are open to work, and roughly when you were last active
Never shown on your profile page:
- Your name
- Your email address or phone number
- Your current or previous employers
- Your education records or employment history
- Your résumé files
- Any salary expectation
The identifier in the address is a long random value, not a sequential number, so profiles cannot be enumerated by guessing. We ask search engines not to index profile pages, and disallow them in robots.txt. Neither measure is a guarantee: a link you share, or one already indexed elsewhere, can still be opened by anyone who has it.
If you choose Hidden, you are left out of candidate search, and your profile page returns a not-found response to anyone who is not you — it is not merely hidden from view.
Organizations you apply to. Applying shares your application with that organization whatever your visibility setting. Its recruiters, administrators and viewers see your application and your applicant summary — the same profile details listed above for your profile page, without your photo — together with what you send with the application, described in clause 06. Choosing Hidden does not withdraw that from an organization you have already applied to.
Your biography is free text that you control. Please do not put your phone number, email address or home address in it, because it is shown on your profile page while your profile is visible, and to every organization you apply to.
What we use it for
- Running your account — signing you in, verifying your email address, and letting you reset a password.
- Showing your application to the organization you applied to, including the profile and résumé you chose to send.
- Letting organizations search for candidates. Search results are drawn only from visible profiles of teachers who are open to work (see clause 03).
- Sending job alerts you asked for, and notifications about your applications and interviews.
- Counting how many job posts an organization has published, so we can apply its allowance.
- Keeping the platform safe — detecting abuse, fraudulent listings and automated scraping, and investigating security incidents.
- Meeting legal obligations, and establishing or defending legal claims.
We do not sell personal data, and we do not share it with advertisers.
The basis on which we process it
In India and the Middle East we rely on your consent, given when you create an account and when you choose to apply to a role or make your profile public. You can withdraw consent at any time; withdrawing it is as easy as giving it, and we will tell you what withdrawing means for your use of the service.
In Australia we collect personal information only where it is reasonably necessary to run the service, and we tell you why at the point of collection, as the Australian Privacy Principles require.
In the United States we process your data to provide the service you asked for. We do not sell personal information, and we do not share it for cross-context behavioural advertising — there is nothing to opt out of, because we do not do it.
We also process data where a law requires it — for example retaining transaction records for tax purposes — and to establish, exercise or defend legal claims.
Withdrawing consent does not make our earlier processing unlawful, and it does not retract an application you already sent to an organization. Once an organization has received your application, that organization holds it under its own obligations, and you should contact the organization directly to have it removed.
Where your data is held
Jobors' infrastructure is hosted in India and the South-East Asia region. If you use Jobors from outside India, your personal data is transferred to and processed in India.
We tell you this plainly because it matters: the country your data sits in is not the country you are in. We require every provider to give contractual protections at least equivalent to those in this policy, and we transfer only to jurisdictions not restricted under the laws that apply to you.
If your local law requires your data to stay within your country or region, tell us at privacy@jobors.com before you upload anything sensitive, and we will confirm whether we can meet that requirement.
How long we keep it
Data Kept for Active account and profile For as long as your account is open Closed account Deleted within 30 days, except where a law requires us to keep it Résumé files Until you delete them, or until your account is deleted Applications and stage history Three years after the application closes, so hiring decisions remain auditable Billing and tax records Eight years, as required by Indian tax law Security and access logs Twelve months When a retention period ends we delete the data or irreversibly anonymise it so it can no longer be linked to you.
Your rights, and how to use them
Under the DPDP Act you may:
- Ask what personal data we hold about you and who we have shared it with.
- Have inaccurate or incomplete data corrected, updated or completed.
- Have your data erased, where we are not required to keep it.
- Nominate someone to exercise these rights on your behalf if you die or become incapacitated.
- Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.
Most of this you can do yourself: profile fields are editable from your account, and résumés can be deleted individually.
For anything else, write to privacy@jobors.com. We will respond within 30 days. We may ask you to confirm your identity first, so that nobody else can request your data.
Grievance Officer: Mitesh Kumar, reachable at grievance@jobors.com or A-401, Golden-I, Techzone IV, Greater Noida West, Uttar Pradesh 201318. Grievances are acknowledged within 24 hours and resolved within 15 days, as required by the Information Technology (Intermediary Guidelines) Rules, 2021.
If you are outside India
The roles listed on Jobors are in India, but anyone can reach the site from anywhere — and if you do, your own country's data-protection law applies to you regardless of where the jobs are.
Depending on where you live, that law may give you rights beyond those in clause 09: to obtain a copy of your data in a portable form, to object to particular uses, to appeal a refusal, or to complain to a national regulator.
We will honour those rights. Write to privacy@jobors.com telling us where you are, and we will apply whichever law gives you the most protection. We do not sell personal information and we do not share it for advertising anywhere in the world, so the opt-outs some laws provide for those activities have nothing to attach to here.
If we open other markets, this policy will be updated before we do, and we will tell you before your data becomes subject to different terms.
How we protect it
- Passwords are stored only as salted hashes, using a deliberately slow algorithm. We cannot read your password and will never ask you for it.
- Traffic is encrypted in transit with TLS, and the site is served under a strict transport-security policy.
- Sessions use short-lived access tokens with rotating refresh tokens. Signing out revokes the session on our servers, not just in your browser.
- Access to production data is limited to staff who need it, and privileged administrative actions are recorded in an append-only audit log.
- The site sets a content-security policy, frame protections and referrer controls to limit what a compromised page could do.
No system is perfectly secure. If a breach is likely to affect you, we will tell you, and we will notify the regulator your jurisdiction requires — the Data Protection Board of India, the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme, the relevant US state authorities, or your national data-protection authority in the Middle East. Notification deadlines differ by country; we will meet the shortest one that applies to you.
Changes to this policy
If we change this policy we will update the date at the top. Where a change materially affects your rights or how we use your data, we will tell you by email or in the product before it takes effect, and give you a chance to object or close your account.
We will not apply a materially different use to data we already hold without asking you first.
Questions about this document
To see the data we hold, correct it, or have it deleted, write to us. We respond within 30 days and may ask you to confirm your identity first, so that nobody else can request your data.
privacy@jobors.com