Privacy Policy

1. Introduction

This Privacy Policy explains how Ausat LLP, a limited liability partnership incorporated under the laws of India and having its registered office at Jaipur, Rajasthan (“Ausat.ai”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you access or use:

our website https://ausat.ai and any sub-domains;
our web or mobile applications; and
any other online products, tools, widgets, or services that link to this Privacy Policy (together, the “Services”).

This Policy applies to:

Job seekers using Ausat.ai to search, track, or apply for jobs;
Employers / recruiters using Ausat.ai to post roles, source or evaluate candidates; and
other visitors and users of the Services.

Ausat.ai primarily targets users in India but the Services may be accessed globally. Where required by local law, additional or different rights may apply and local notices may supplement this Policy.

By accessing or using the Services, or by otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. Where required under applicable law, including the DPDP Act 2023 and DPDP Rules 2025, we will obtain your free, specific, informed, unconditional, and unambiguous consent prior to any processing activities.

2. Role and Legal Framework

For most processing activities described in this Policy, Ausat.ai acts as a data fiduciary determining the purposes and means of processing personal data of data principals (individual users) under the Digital Personal Data Protection Act, 2023.

This Privacy Policy is designed with reference to:

the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, which together set out rights of data principals and detailed obligations of data fiduciaries, including requirements for clear standalone privacy notices, consent workflows, consent manager integration, security safeguards, breach notification procedures, and phased compliance deadlines;
the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, which impose due diligence, grievance redress and content takedown obligations on digital intermediaries;
the Indian Contract Act, 1872, under which online click-wrap agreements can be legally binding when users are given an opportunity to review terms and manifest consent.

Ausat.ai will implement and update its processes in line with the phased implementation architecture of the DPDP Rules 2025, including:

providing standalone, plain language privacy notices describing itemised categories of data collected and specific purposes of processing;
supporting the consent manager framework as it becomes operational, so that users can manage consent through registered consent managers where applicable;
complying with data breach notification and grievance handling timelines and associated record-keeping requirements prescribed under the Rules.

Where there is any conflict between this Policy and mandatory local law, the latter will prevail.

3. Scope of this Policy

This Privacy Policy covers personal data that Ausat.ai processes:

through the Services;
through communications with you by email, SMS, WhatsApp or similar channels;
through integrations, APIs and third-party platforms where Ausat.ai is clearly identified as the service provider; and
offline interactions where we expressly refer to this Policy.

This Policy does not apply to:

websites, apps or services of third parties that are merely linked from our Services;
processing performed independently by employers, recruiters or other partners once they receive your data from us as separate data fiduciaries / controllers; or
data stored exclusively in systems of third-party partners where Ausat.ai has no control over how they process such data.

When you follow a link or integrate with a third-party platform (for example, to apply to a job on an employer's own site, or to sign in through a social login provider), their own privacy policies and terms will apply to their processing.

4. Personal Data We Collect

4.1 Data you provide directly

Job seekers may provide, for example:

identity and contact details (name, email address, mobile number, city and country of residence);
profile information (headline, skills, education, work experience, language proficiencies, salary expectation, job preferences, preferred locations, notice period);
CVs / resumes, cover letters, portfolio links and other application materials you upload or submit;
credentials for optional social log-ins (e.g., name and email obtained from Google or other providers, subject to their terms);
content you submit through forms, search queries, saved jobs, job alerts, chat messages, feedback, surveys or support channels.

Employers / recruiters may provide, for example:

business contact details and KYC information of authorised representatives (name, designation, official email and phone number, company name, address, registration identifiers);
organisation profiles, logos and branding elements;
job postings and related data (role descriptions, eligibility criteria, compensation ranges, location, benefits);
records of communications with candidates through Ausat.ai messaging or integrated channels.

Other users and visitors may provide:

information submitted via contact forms, wait list or early access forms, newsletters, webinars or feedback tools;
any other information you choose to provide in free text fields, attachments or communications.

Certain features (such as account creation, applying to jobs or posting jobs) may require minimum mandatory fields.

4.2 Data collected automatically

When you interact with the Services, we automatically collect certain information through cookies, SDKs, pixels, logs and similar technologies, such as:

device information (device type, operating system, browser type, language, device identifiers);
log data (IP address, access times, pages viewed, referring URLs, approximate location derived from IP);
usage data (search queries, filters applied, jobs viewed, clicks, save/apply actions, time spent, interactions with emails or notifications);
technical data needed to maintain security and integrity of the Services (error logs, suspicious patterns, crash diagnostics).

Most browsers and devices let you manage cookies and similar technologies, but disabling certain categories may affect functionality.

4.3 Data obtained from third parties

Subject to applicable law and your verifiable consent, we may receive personal data about you from:

social login or identity providers when you choose to sign in through them;
job boards, applicant tracking systems (ATS) or recruitment partners that integrate with Ausat.ai and share candidate or job data as part of our services;
publicly available sources such as professional networking sites or public company websites for employer and job enrichment;
analytics, advertising and anti-fraud service providers that help us understand usage and secure the Services.

These third parties' own privacy notices govern their initial collection and disclosure.

4.4 Special / sensitive categories

Ausat.ai does not intentionally seek to collect sensitive personal data (such as health information, financial account details, biometric identifiers, sexual orientation, political opinions or religious beliefs) except where required by law or where you choose to actively provide such information in your CV or communications.

You should avoid including unnecessary sensitive information in resumes, cover letters or free text fields. If you nevertheless submit such data, you explicitly consent to our processing of it in accordance with this Policy and applicable law, and we will not use it for profiling that is incompatible with the purposes for which you provided it.

5. Purposes and Legal Bases for Processing

Ausat.ai processes personal data for the purposes and on the legal bases summarised below, in line with the DPDP Act's and DPDP Rules' requirements for notice, consent and purpose limitation.

Providing and improving the Services: operating accounts, job search, job posting, recommendations and application workflows; enabling messaging and other communications between job seekers and employers; operating AI-powered features such as job recommendations, resume parsing and match scores.
Basis: Verifiable, specific consent.
Analytics, product development and service quality: analysing aggregated/pseudonymised usage data to understand feature usage and improve relevance; diagnosing issues, troubleshooting and enhancing performance and security.
Basis: Verifiable, specific consent.
Marketing and communications: sending service and transactional communications; sending marketing communications and running surveys/feedback initiatives.
Basis: Verifiable, specific consent, with accessible opt-out options.
Legal compliance and enforcement: complying with legal obligations, law enforcement or governmental requests; enforcing our Terms of Service and protecting rights, property and safety; detecting, preventing and responding to fraud, abuse, security incidents or unlawful content.
Basis: Legitimate uses as explicitly defined by law (e.g., compliance with court orders, prevention of fraud).

6. Cookies and Similar Technologies

Ausat.ai uses cookies, pixels, local storage and similar technologies to:

keep you signed in and maintain session security;
remember your preferences and settings;
measure traffic patterns and usage of the Services;
support analytics, product optimisation and limited marketing activities.

You can control cookies through your browser or device settings. Some third-party tools we use may also offer opt-out mechanisms.

7. Artificial Intelligence, Algorithmic Transparency, and the Right to Human Intervention

Ausat.ai integrates sophisticated artificial intelligence, including machine learning models and AI-powered agents, to optimize the recruitment ecosystem. These technologies are deployed to parse application materials, extract relevant skills, and generate predictive relevance scores to match candidates with suitable employment opportunities.

Ethical AI and Bias Mitigation: We are committed to responsible AI deployment. Our algorithms are engineered in alignment with “Understandable by Design” and “Do No Harm” principles. Ausat.ai conducts periodic algorithmic fairness assessments and bias audits to identify and mitigate any unintended discrimination or disparate impact within our matching systems.
Right to Human Intervention: While our automated systems significantly enhance efficiency, they are designed to assist, not replace, human judgment. All final employment decisions, including shortlisting, interviewing, and hiring, remain the exclusive purview of the respective Employer. However, should you believe that an automated matching score, algorithmic filter, or AI-powered agent has functioned erroneously or produced an unfair, significantly adverse effect on your employment opportunities, you explicitly reserve the right to contest the automated processing. You may request a manual review or human intervention by contacting our support team, ensuring that technology does not operate without accountability.

8. How We Share Personal Data

Ausat.ai does not sell personal data. We share personal data only as described below or with your additional consent.

With employers / recruiters: when you apply or express interest in a job, make your profile discoverable, or opt into job matching features. Employers are independent data fiduciaries / controllers for the data they receive and are responsible for their own legal compliance, including downstream deletion if you revoke consent.
With job seekers: limited information about employers (e.g., organisation name, logo, public profile and job details) is visible to job seekers.
Service providers and partners: we use hosting, analytics, communication, payment, customer support and other vendors bound by contracts to process data only on our instructions and with appropriate safeguards.
Group companies and corporate transactions: data may be shared within a corporate group or in connection with mergers, acquisitions or similar transactions, subject to safeguards.
Legal and regulatory disclosures: we may disclose personal data if required to do so by law or to comply with court orders or government directions, to protect rights and safety, or to detect and respond to fraud and abuse.

9. International Data Transfers

Our infrastructure, service providers and partners may be located outside India. Accordingly, personal data may be transferred to and processed in countries other than India, including jurisdictions that may have different data protection standards.

Ausat.ai will not knowingly transfer personal data to any restricted jurisdiction except in compliance with applicable exemptions or governmental approvals.

Where personal data is transferred outside India, Ausat.ai will:

comply with applicable notice and consent requirements, including informing data principals of the fact of cross-border transfer and related purposes;
implement appropriate contractual and organisational safeguards consistent with Indian law and industry standards; and
ensure that recipients are bound by obligations to protect the data at a level comparable to protections in India, to the extent required by law.

10. Data Retention, Minimization, and Erasure

Ausat.ai adheres strictly to the principles of data minimization and purpose limitation under the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025. Personal data is retained solely for the duration necessary to fulfill the specific purposes outlined in this Policy, or as mandated by prevailing law.

Statutory Log Retention: In compliance with regulatory mandates, Ausat.ai retains user access logs, associated traffic data, and relevant system security records for a mandatory minimum period of one (1) year. This retention is strictly maintained to facilitate cybersecurity audits, support incident investigations, and comply with lawful regulatory requests.
Erasure and Pre-Deletion Notification: Upon the exhaustion of the specified processing purpose, or upon a valid withdrawal of your consent, Ausat.ai initiates systematic data erasure protocols. In accordance with the DPDP Rules, Ausat.ai shall issue a formal notification to you at least forty-eight (48) hours prior to the irreversible deletion of your personal data.
Exceptions for Safety and Legal Compliance: Even following a request for erasure, Ausat.ai reserves the right to retain specific, minimized data points where such retention is strictly necessary for the protection of legitimate business interests, specifically including fraud detection, the prevention of employment scams, ensuring platform safety, or complying with tax, accounting, and litigation requirements. Data that has been irreversibly anonymized or de-identified such that it can no longer identify a natural person falls outside the scope of deletion requirements.

11. Your Rights and Choices

Subject to applicable law, including the DPDP Act and DPDP Rules, you have the following rights in relation to your personal data. While some rights may be subject to limitations under law, we may need to verify your identity before acting on certain requests. You can usually access, update, or delete key profile and account information directly through your Ausat.ai account settings.

Right to Nomination (Digital Heir): In accordance with Section 14 of the DPDP Act, 2023, Ausat.ai recognizes and facilitates your right to post-mortem digital privacy. You possess the explicit right to nominate any other individual (a “Nominee”) who shall be granted the legal authority to exercise your data rights, including the rights to access, correction, erasure, and grievance redressal, on your behalf in the event of your death or physical/mental incapacity.
Exercising the Right to Nomination: You may register, update, or revoke your designated Nominee at any time by navigating to the Privacy Settings within your account dashboard, or by submitting a formal written request at contact@ausat.ai. In the event of incapacitation, Ausat.ai will require the Nominee to provide verifiable legal documentation establishing their identity and the occurrence of the qualifying event prior to granting them authorization to exercise your rights.

12. Security Safeguards and Mandatory Incident Response

Ausat.ai implements a defense-in-depth security architecture, deploying robust technical and organizational measures including encryption in transit and at rest, tokenization, strict role-based access controls, and API security protocols to protect your personal data against unauthorized access or alteration. However, no digital infrastructure is entirely impervious to sophisticated threats.

72-Hour Breach Notification Commitment: In the event of a personal data breach that compromises the confidentiality, integrity, or availability of your data, Ausat.ai commits to immediate remediation. In strict adherence to the DPDP Rules, 2025, we shall notify the Data Protection Board of India and all affected Data Principals without undue delay, and guaranteed within a maximum of seventy-two (72) hours of confirming the incident. This notification will transparently detail the nature of the breach, the potential consequences, and the protective measures deployed.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our practices or the Services. When we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice (such as email, in-app notice or banner) where required by law. Your continued use of the Services after the effective date of the revised Policy will constitute your acknowledgement of the changes.

14. Contact and Grievance Redressal Mechanism

If you have questions about this Privacy Policy, our data-handling practices, or wish to exercise your rights or raise a concern, please contact us at:

Email: contact@ausat.ai

Ausat.ai will acknowledge your complaint within twenty-four (24) hours of receipt and will dispose of / resolve such complaint within fifteen (15) days from the date of its receipt, and will provide reasons where any request cannot be fully complied with.

If you are dissatisfied with the resolution or if your complaint is not addressed within the prescribed period, you may have the right to escalate your grievance to the appropriate appellate or regulatory body in accordance with applicable law.