Privacy Policy

1. Introduction

This Privacy Policy explains how MKIX Private Limited ("MKIX", "we", "us" or "our") collects, uses, shares, stores and protects personal data when you use the platform, available at https://iitiimjobassistant.in and through related services including our WhatsApp channel, dashboard and relationship-manager support (together, the "Platform" or "Services").

i2 is an invite-only service that searches for jobs on your behalf across sources such as LinkedIn, Naukri, Indeed, iitiimjobs, company career sites and alumni-shared listings, tailors your résumé to each role, and submits applications on your behalf. Because the Services act for you in front of employers and third-party platforms, we process more personal data than a typical website. This policy explains exactly what and why.

This policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules made under it, to the extent applicable. By creating an account or using the Services, you consent to the processing described here. Where we rely on consent, you may withdraw it at any time as described in Section 9.

2. Who we are

MKIX Private Limited is the Data Fiduciary responsible for your personal data under the DPDP Act. Our registered office is at New Delhi, India. You can reach us at iitiimjobassistant@gmail.com.

3. Personal data we collect

3.1 Data you give us

• Account and identity data: name, email address, mobile/WhatsApp number, password, and invite or referral details.
• Verification data: your LinkedIn profile URL and details of your IIT/IIM affiliation (institute, programme, graduation year), which we review manually to confirm eligibility.
• Career data: résumé/CV, education, work history, skills, certifications, current and expected compensation, notice period, preferred roles, industries, locations and other job preferences.
• Application answers: responses you provide to screening or open-ended questions, cover-letter preferences, and any information employers request during applications.
• Third-party account access: where you choose to connect a job portal or professional network (for example LinkedIn or Naukri), the login credentials, session tokens or authorisations needed for us to search and apply on your behalf.
• Content you send us: job links, LinkedIn posts, screenshots of listings and other messages sent via WhatsApp, email or the dashboard.
• Payment data: billing name, address, GSTIN (if applicable) and transaction records. Card, UPI and bank details are collected and processed directly by our payment gateway partner; we do not store full card numbers.
• Support communications: messages and call notes with your relationship manager.

3.2 Data we collect or generate while providing the Services

• Application records: jobs matched, résumé versions generated, applications submitted, the platform used (e.g. Workday, Lever, Greenhouse, email), timestamps and status.
• Employer and recruiter responses: replies, interview invitations and other outcomes that we track on your behalf, including emails forwarded to or received through addresses we manage for this purpose.
• Networking activity: LinkedIn messages and connection or referral requests sent using your credits, and information about alumni or contacts identified for referrals.
• Usage and device data: IP address, browser type, device identifiers, pages viewed, log data, and cookie data (see Section 10).

3.3 Data from third parties

We may receive information from job portals and company websites (listing details, application status), from employers and recruiters who respond to applications, from publicly available professional profiles (to verify eligibility or find relevant alumni), and from payment partners (payment confirmation).

3.4 Sensitive personal data

Passwords and financial information are treated as sensitive personal data or information under the 2011 Rules. Some application forms also ask for optional information such as gender, disability status, or other diversity data. We fill such fields only with information you have explicitly provided for that purpose, and you may choose "prefer not to say" or leave them blank in your preferences.

4. How we use your personal data

• To verify your eligibility for the invite-only community and create and manage your account.
• To search job sources and match roles against your profile and preferences.
• To generate tailored versions of your résumé and application answers for each role, using automated tools, including AI models.
• To submit applications, send emails and LinkedIn messages or connection requests on your behalf, within the plan and preferences you set.
• To track responses and interviews and notify you via WhatsApp, email or the dashboard.
• To process payments, manage subscriptions and credits, issue invoices and meet tax obligations.
• To provide customer support, including through your dedicated relationship manager.
• To secure the Platform, prevent fraud and misuse, and enforce our Terms & Conditions.
• To analyse usage in aggregated or de-identified form and improve our matching, tailoring and product features.
• To comply with legal obligations and respond to lawful requests from authorities.
• To send service announcements and, with your consent, product updates or offers. You can opt out of marketing at any time.

5. Automated decision-making

The core of the Services is automated: our systems decide which jobs meet the match threshold you set and submit applications without asking you to approve each one. They also generate edited versions of your résumé. You control this by setting and updating your preferences, pausing the agent, or excluding companies or roles. You can review every application and résumé version in your dashboard. If you believe an automated action was wrong, contact us and a person will review it.

6. How we share your personal data

We do not sell your personal data. We share it only as follows:

• With prospective employers, recruiters and hiring platforms: this is the purpose of the Services. When we apply on your behalf, your résumé, contact details and application answers are submitted to the employer and to any applicant-tracking system or job portal it uses (such as Workday, Lever, Greenhouse, LinkedIn, Naukri or Indeed). Once shared, those recipients process your data under their own privacy policies.
• With alumni and contacts: when you use credits to request referrals or send LinkedIn messages, your name, profile and message are shared with the recipient.
• With service providers: who process data on our behalf under contract, including cloud hosting, email delivery, WhatsApp Business messaging providers, AI and language-model providers used for résumé tailoring and job matching, analytics, customer-support tools and payment gateways. They may use your data only to provide services to us.
• With professional advisers: (lawyers, auditors) where necessary.
• In a business transfer: such as a merger, acquisition or sale of assets, subject to equivalent protections.
• Legal requirements: where required by law, court order or government authority, or to protect the rights, property or safety of MKIX, our users or others.

7. Your third-party account credentials

If you connect an account on a third-party platform, we use those credentials only to search for jobs and perform the actions you have authorised. We store them encrypted, restrict access to the systems that need them, and do not use them for any other purpose. You can disconnect an account or ask us to delete stored credentials at any time; we recommend you also change your password on that platform afterwards. Third-party platforms have their own terms regarding automated access; please read Section 6 of our Terms & Conditions.

8. Data retention

We keep your personal data only for as long as needed for the purposes in this policy:

• Account, profile and application history: while your account is active and for [12] months after closure, so that you can reactivate and we can resolve disputes, unless you ask us to delete it sooner.
• Stored third-party credentials: deleted promptly when you disconnect the account or close your account.
• Payment and invoice records: as long as required under tax and accounting laws (generally up to 8 years).
• Logs and security data: typically up to [180] days, or longer where needed to investigate an incident.

We cannot recall applications already submitted to employers or delete data held by employers or third-party platforms; you can contact those parties directly.

9. Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

• access a summary of the personal data we process about you and the processing activities;
• correct, complete or update inaccurate or incomplete data;
• request erasure of your personal data, subject to legal retention requirements;
• withdraw consent at any time (this will not affect processing already carried out, and we may be unable to continue providing the Services);
• nominate another person to exercise your rights in the event of your death or incapacity;
• have your grievances addressed by our Grievance Officer, and if unresolved, to approach the Data Protection Board of India.

To exercise any of these rights, email hello@i2.in or our Grievance Officer (Section 14). We may need to verify your identity before acting on a request.

10. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Platform and understand how it is used. Essential cookies are required for the Platform to work. You can control non-essential cookies through your browser settings; disabling some cookies may affect functionality.

11. Security

We follow reasonable security practices and procedures appropriate to the nature of the data, including encryption in transit and of stored credentials, access controls, logging and periodic review of our safeguards. No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law. Please keep your own passwords confidential and tell us immediately if you suspect unauthorised access.

12. International transfers

Some of our service providers (for example, cloud hosting or AI model providers) may process data outside India. Where we transfer data abroad, we do so in accordance with the DPDP Act and any restrictions notified by the Government of India, and we require providers to protect your data with appropriate safeguards.

13. Eligibility and children

The Services are meant for verified IIT and IIM students and alumni seeking employment and are not directed at anyone under 18. We do not knowingly process personal data of children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, our Grievance Officer is:

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on the Platform with a new "Last updated" date, and for material changes we will notify you by email, WhatsApp or a notice in your dashboard before they take effect.