Introduction
ORNAIR respects and is dedicated to safeguarding your privacy.
This Privacy Policy explains how ORNAIR collects, uses, stores, shares, and protects personal data when you interact with our website, application portals, assessment modules, and workforce readiness services.
We adhere to the fundamental data protection principles of legality, purpose limitation, transparency, and data minimization. We collect only information reasonably necessary to provide workforce readiness, candidate evaluation, skills assessment, training, and placement facilitation services.
Information We Collect
Depending on your role and interaction with ORNAIR, we collect the following categories of information:
A. Account Information
- Full name.
- Email address.
- Mobile number (10-digit Indian format).
- Password credentials in securely salted, one-way hashed format (never plaintext).
- Account type (e.g., Job Seeker Candidate, Employer, Trainer).
- Account settings and notification preferences.
B. Candidate Profile Information
- Profile photograph (optional, uploaded at candidate discretion).
- Current location (City and State).
- Educational qualifications (degrees, diplomas, institutions, passing years, CGPA/marks).
- Technical, functional, and soft skills with self-rated proficiency levels and experience.
- Prior employment records, company names, job titles, tenures, and responsibilities (or verified Fresher status).
- Resume / Curriculum Vitae (CV) in PDF, DOC, or DOCX formats (max 20 MB).
- Preferred job roles, target locations, notice periods, and employment type preferences.
C. Employer Information
- Company legal name and operating trade names.
- Business registration details (e.g., GSTIN, CIN, PAN).
- Authorized recruiter or corporate representative identity details.
- Corporate official email address and telephone numbers.
- Company verification documentation.
- Job descriptions, vacancy criteria, and interview coordination notes.
D. Training and Assessment Information
- Assessment responses, test session logs, and timestamps.
- Domain evaluation scores, percentiles, and verified scorecards.
- Training cohort attendance, module progress, and practical submissions.
- Course completion credentials, badges, and placement records.
E. Technical & System Information
- Internet Protocol (IP) address.
- Browser type, engine, and version.
- Device operating system and screen specifications.
- Authentication session timestamps and security logs.
- Essential functional cookies.
How We Use Your Information
ORNAIR uses your collected personal data for specific, lawful purposes:
- To create, authenticate, and administer your platform account.
- To construct verified candidate profile scorecards and portfolios.
- To verify candidate qualifications and employer legitimacy.
- To algorithmically match candidate competencies with relevant corporate openings.
- To facilitate job applications and corporate placement pipelines.
- To administer proctored skill assessments and compute objective evaluation scores.
- To provide cohort training, syllabus materials, and mentor support.
- To track application statuses and notify users of interview invitations.
- To deliver vital administrative, operational, and security notifications.
- To diagnose performance bottlenecks, improve software reliability, and combat fraud.
- To comply with statutory directives under the DPDP Act 2023 and other applicable Indian regulations.
How Candidate Information is Shared
We believe in total transparency regarding data dissemination. Candidate personal details may only be shared with:
- Hiring Employers: When a candidate explicitly applies for a listed job vacancy, or makes their verified profile discoverable to verified hiring partners.
- Recruitment Partners: Authorized recruitment desks coordinating dedicated placement drives on behalf of enterprise employers.
- Training & Assessment Providers: Accredited mentors and evaluators where a candidate enrolls in an assessment or course track.
- Operational Service Providers: Cloud infrastructure hosts, email dispatchers, and SMS gateways under strict data protection covenants.
Data Storage and Security
ORNAIR implements rigorous administrative, physical, and technical safeguards to preserve data integrity and prevent unauthorized access, alteration, or disclosure:
- Cryptographic Password Hashing: User passwords are encrypted with SHA-256 salted hashes; raw passwords are never visible or stored.
- Transport Layer Security: All client-to-server traffic is encrypted using HTTPS / TLS protocols.
- Role-Based Access Controls (RBAC): Access to sensitive applicant records is restricted strictly to authorized platform personnel on a need-to-know basis.
- Protected File Repositories: Uploaded resumes are assigned randomized filenames to thwart directory harvesting.
- Auditing and Monitoring: Periodic access logs and security evaluations to identify anomalies.
Resume and Document Privacy
Resumes, CV files, educational marksheets, and personal documents uploaded by candidates are treated as confidential user property.
- Access to resume documents is limited exclusively to authorized recruiters evaluating an active candidacy.
- Resumes are not exposed through publicly browsable file indexes.
- Candidates maintain full freedom to replace, update, or remove their uploaded resume at any time via the Candidate Portal.
Data Retention
ORNAIR retains personal information only for the duration necessary to fulfill the purposes for which it was gathered, including:
- Maintaining your active candidate registration profile and portal access.
- Preserving job application histories and employer feedback records.
- Satisfying legitimate statutory, tax, or legal compliance mandates under Indian law.
- Resolving disputes and enforcing platform contractual covenants.
When personal data is no longer necessary or upon verified account closure requests, data is permanently scrubbed or irreversibly anonymized in accordance with applicable retention schedules.
Cookies and Tracking
ORNAIR utilizes first-party cookies and lightweight browser storage mechanisms for essential platform operations:
- Session & Security: Authenticating logged-in users via secure, HttpOnly session cookies (such as
ornair_cand_session). - Form Draft Continuity: Utilizing local browser storage (
localStorage) to temporarily preserve candidate input during multi-step registration so accidental reloads do not discard candidate work. - UI Preferences: Preserving interface preferences and language settings.
User Rights and Privacy Requests
In conformity with the Digital Personal Data Protection Act, 2023 (DPDP) and applicable regulations, users possess the following rights regarding their digital personal data:
- Right to Access: Request a summary of personal data processed by ORNAIR and identities of employers with whom it was shared.
- Right to Correction & Updating: Amend inaccurate, outdated, or incomplete profile, education, or skill information directly in the Candidate Portal.
- Right to Erasure: Request the deletion of candidate profile information when it is no longer necessary for ongoing recruitment processes, subject to statutory retention obligations.
- Right of Grievance Redressal: Submit grievances regarding data handling to our designated Grievance Officer.
- Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity.
Privacy requests may be submitted by emailing our privacy desk at the contact listed below.
Children's Privacy
ORNAIR's independent account registration and employment discovery services are strictly intended for individuals who are at least 18 years of age.
We do not knowingly solicit or collect personal data from children without verifiable parental or guardian consent. If we learn that personal data of a minor has been gathered without required authorization, we will take immediate measures to remove the information from our records.
Third-Party Service Providers
ORNAIR works with trusted technology vendors to provide cloud hosting, transactional email dispatch, SMS verification, and analytical support. These processors are contractually bound to process data solely under our instructions and in accordance with robust confidentiality safeguards.
International Data Transfers
ORNAIR primarily stores and processes user data on servers located within India. Any cross-border data transfer required for global cloud services will strictly adhere to notifications, whitelists, and statutory provisions issued by the Central Government of India under the DPDP Act 2023.
Data Breaches
In the unlikely event of a personal data breach affecting ORNAIR systems, we will promptly execute incident containment protocols, investigate the cause, and notify the Data Protection Board of India and affected data principals in such form and manner as prescribed under the DPDP Act 2023 and applicable rules.
Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect advancements in our technology, new statutory guidelines, or enhanced data practices. The date of the latest update will always be noted at the top. We encourage you to review this policy periodically.
Privacy Contact and Grievances
If you have questions, feedback, or wish to exercise your data principal rights under the DPDP Act 2023, please reach out to our dedicated privacy and grievance desk: