Policies
Effective Date: October 10, 2025

Privacy Policy

Yupcha Softwares Pvt. Ltd. ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy outlines how we collect, use, process, disclose, and safeguard your information when you access or use our websites, SaaS products, AI-powered tools, or otherwise interact with us. Our services are designed for businesses, not individual consumers, and specifically target adult business users and HR professionals.

1. Our Company Information

Yupcha Softwares Pvt. Ltd.
153, Banamalipur, Agartala, West Tripura - 799001, India
Contact: [email protected]

2. Scope of This Policy

This Privacy Policy applies to all visitors to our websites, registered users of our SaaS platforms and AI tools, and any other individuals whose data we process in connection with our services.

3. Information We Collect

We collect various types of information to provide, maintain, and improve our services, including our AI-powered features:

Information You Provide Directly:

Account & Registration Data

Information provided when creating an account, such as your name, company name, email address, phone number, and password.

Company Information

Details about your organization, size, industry, and other business-related data.

Payment Information

Billing address and other payment-related details. Credit card information is securely managed by PCI-DSS compliant third-party payment processors; we do not store full credit card numbers on our servers.

Communications

Records of your interactions with our customer support, sales, or other teams.

Candidate Data (via HR Platforms)

Information uploaded or submitted by our business clients (Controllers) or by candidates themselves through our HR platforms, including resumes, curriculum vitae, cover letters, interview responses (text, video, or audio submissions), assessment results, and communications related to recruitment or employment. This data is processed under the instructions of our clients.

Information We Collect Automatically:

Technical Data

IP addresses, device identifiers, browser type and version, operating system, network information, and other technical details about the devices you use to access our services.

Usage Data

Information about how you interact with our websites and SaaS platforms, including pages visited, features used, session duration, clickstream data, and performance metrics of our AI tools. This data helps us understand user engagement and improve our services.

Cookies & Tracking Technologies

We use essential cookies and similar technologies for login functionality, session management, security, and to remember your preferences. You can manage your cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of our services. We do not enforce direct cookie consent banners, relying on browser controls.

Office CCTV Footage

For physical security and compliance purposes, CCTV footage may be recorded at our physical office locations.

Information from Third Parties:

Authorized Service Providers

Limited data sharing with trusted third-party service providers under strict confidentiality agreements to deliver specific services (e.g., payment processing, analytics).

Social Login Data

If you choose to log in using third-party social providers (e.g., Google, LinkedIn), we collect basic profile information as authorized by you and the provider, solely for authentication purposes.

4. How We Collect Information

We collect information through various methods:

  • Directly from you when you register for an account, fill out forms, or interact with our services.
  • Through your use of our SaaS products and AI-powered tools.
  • Automatically via cookies, web beacons, and similar technologies.
  • Through analytics and monitoring tools that track service performance and user interactions.
  • During support interactions and communications.
  • Via authorized federated logins from third-party identity providers.

5. Children's Privacy

Our services are strictly intended for business use by adults (e.g., companies, HR professionals). We do not knowingly collect personal data from individuals under 18 years of age. We do not perform age verification or seek parental consent. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information.

6. Legal Bases for Processing Your Data

We process your personal data based on the following legal grounds, where applicable:

  • Consent: Where you have given us explicit consent for specific processing activities.
  • Contractual Necessity: To perform our contractual obligations to you or your organization.
  • Legitimate Interests: For our legitimate business interests, provided these do not override your fundamental rights.
  • Legal Obligation: To comply with our legal and regulatory obligations.

7. Use of Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain Services: To operate, deliver, and maintain our websites, SaaS products, and AI-powered tools.
  • To Improve and Develop Services (including AI): To understand user needs, analyze performance, fix bugs, and enhance existing features. This includes using aggregated and anonymized data to train, evaluate, and refine our AI models.
  • Payment Processing: To process payments for subscriptions and services.
  • Communication: To send you service-related notifications, updates, security alerts, and support messages.
  • Customer Support: To provide assistance and resolve technical issues.
  • Security & Fraud Prevention: To protect our services, users, and data from unauthorized access and threats.
  • Compliance: To comply with applicable laws, regulations, and legal processes.

8. Disclosure and Data Sharing

We do not sell your personal data. We may share your information only in the following circumstances:

  • With Your Organization: As part of providing services to your employer.
  • With Our Employees & Contractors: Strictly on a need-to-know basis.
  • With Authorized Service Providers: Trusted third-party vendors (e.g., hosting, payment processing) under strict confidentiality.
  • For Legal Reasons: If required by law or to protect rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

9. Data Retention

  • User and Candidate Data: Generally retained for 3 months after inactivity/closure, unless otherwise required.
  • Payment Information: Retained per legal/financial regulations.
  • CCTV Footage: Retained for a limited period per security protocols.
  • Anonymized Data for AI Training: May be retained indefinitely for model improvement.

10. Automated Decision-Making and AI

Our AI enhances HR productivity but is committed to human oversight.

  • Data Used: Primarily anonymized data for training; personal data uses client instructions.
  • Human Review: You can request human review of significant AI decisions.
  • No Solely Automated Decisions: We strive to avoid solely automated decisions with legal effects.
  • Exercising Rights: Contact [email protected].

11. Your Privacy Rights

  • Right to Access
  • Right to Rectification
  • Right to Erasure ("Right to be Forgotten")
  • Right to Restriction of Processing
  • Right to Data Portability
  • Right to Object
  • Right to Withdraw Consent

To exercise any of these rights, please contact us at [email protected].

12. International Data Transfers

Our primary servers are in India. Transfers outside India are conducted using lawful mechanisms like Standard Contractual Clauses (SCCs).

13. Security Measures

We implement industry-standard measures:

  • Encryption (transit & rest)
  • Strict Access Controls
  • Regular Audits
  • Employee Training
  • Secure AI Development practices

14. Changes to This Privacy Policy

We may update this policy. Substantial changes will be notified at least 30 days in advance. Continued use implies acceptance.

15. Third-Party Services

Links to third-party services are not covered by this policy. Please review their privacy policies separately.