Privacy policy
What we collect, why, who ever sees it, and what you can make us do about it. A working draft, pending review by counsel.
Who is responsible for your data
Snxwfairies Innovation Pvt. Ltd. is the Data Fiduciary for personal data processed through WorkID. Our grievance officer is named on the contact page.
What we collect
To identify you: your name and mobile number. Where you submit a document identifier such as a PAN, we keep only a masked hint and a one-way digest — never the number itself.
Your employment record: employers, designations, dates, employment type, and who confirmed what and when.
What you choose to add: a self-declared profile, a declared economic status, résumé entries, and feedback you write or respond to.
To keep the platform safe: sign-in events, rate-limit counters keyed by a one-way digest, and an audit trail of consequential actions.
Why we process it
To provide the service you asked for: recording your employment history, letting you prove it to employers you choose, and letting employers verify what you have approved. We process on the basis of your consent, and for the legitimate purpose of operating and securing the platform.
We do not sell personal data. We do not use it to train models. We do not show advertising.
Who sees it
An employer sees only what you have specifically approved, only for as long as the consent lasts, and every such disclosure is written to your own access log before it happens. Our staff can access a record only through a role with the relevant permission, and their read is recorded in your access log and labelled as WorkID staff.
Your rights
To know. Your access log shows every disclosure ever made about you — who looked, when, at what, and under which consent.
To withdraw consent. At any time, from your privacy centre, with immediate effect on future disclosures.
To correct. You can respond to any feedback about you, and dispute any employment record you disagree with. Both positions are retained.
To erasure — and its limits. You may ask us to erase your personal data. An employment record, however, is a record about two parties, and the other party may need to retain it. Where we must retain something, we will tell you what, and why, rather than quietly keeping it. The precise boundary here is being settled with counsel and will be stated plainly before launch.
To complain. To our grievance officer first, and then to the Data Protection Board of India.
How long we keep it
Employment records are kept for as long as they may be needed to prove somebody’s work history — that is the point of the platform. Operational data has shorter lives: one-time codes expire in minutes, sessions in days, consents at the expiry you set.
How it is protected
Sensitive fields are encrypted. Identifiers are stored as one-way digests under a deployment-specific key. The audit trail is hash-chained so an alteration is detectable. Sign-in is one-time-code based, so there is no password of yours for us to lose.
Cookies
We set a session cookie and a CSRF token cookie. Both are strictly necessary to sign you in and keep you safe while signed in. We set no advertising or analytics cookies.
Changes
If we change this policy in a way that affects your rights, we will tell you rather than quietly updating the page.