Privacy Policy

1. The short version

• We collect what you give us (your account, profile and resume) and a little technical data to keep the service secure.
• Employers see your information only when you apply to them, and only as your privacy settings allow. They never see your current salary.
• We do not sell your data and we do not run advertising or tracking cookies.
• You can download all your data and delete your account yourself, at any time, from Settings.
• We keep your data in India.

2. Who we are

CoreWorq (coreworq.com) is operated by MeltingCubes Pvt Ltd ("we", "us"), registered at Plot no 728, 729, Grand view tower, Kukatpally, Hyderabad 500072, Telangana, India. For the purposes of data protection law we decide why and how your personal data is used (we are the "data fiduciary").

You can reach us at hello@meltingcubes.com.

3. Who this covers

This policy covers everyone who uses CoreWorq: engineering candidates, employers and their recruiters, and visitors. CoreWorq is for people aged 18 and over; we do not knowingly collect information from anyone younger.

4. What we collect

Information you give us:

• Account: your email address and a password (we store only a one-way scrambled form of the password, never the password itself).
• Candidate profile: name, headline, current role, discipline, location and preferred locations, expected and current salary, job preferences, work experience, education, certifications, skills, and the resume files you upload.
• Employers: your name and designation, your company's name, website, size and locations, its legal name, GSTIN, CIN and phone number, your company email address, the jobs you post, and private notes you write about applicants.
• Anything you send us when you contact us.

Information created as you use CoreWorq:

• Your applications and saved jobs, and your privacy settings.
• Purchases: if you buy a pass, the amount, date, the plan and the payment provider's reference for the payment. You enter card, UPI or bank details on Razorpay's own page; they never reach us.
• Security and activity records: sign-ins, account changes, and each time an employer opens your application, downloads your resume or views your contact details.
• Technical data when you sign in: your IP address and browser type, kept with your sign-in session and our security records.

We do not ask for, and do not use, sensitive details such as religion, caste, health, or political views. Please leave them out of your profile and resume. We never ask candidates for bank details or government ID numbers, and no employer may charge you anything for a job.

5. How we use it

• To run CoreWorq: build your profile, let you search and apply for jobs, let employers post jobs and review applicants.
• To confirm who you are: we email you a link to confirm your email address, and check that a company's email matches its website before marking it verified.
• To keep the platform safe: rate limiting, scanning uploaded resumes for malware before an employer can open them, spotting abuse, and keeping security records.
• To send you service emails (email confirmation, security notices). We send marketing email only if you switch it on in Settings; it is off by default and you can turn it off at any time.
• To meet legal obligations and to establish or defend legal claims.

We do not currently use automated systems to rank, score or reject candidates. The "profile strength" meter is shown only to you and does not affect what employers see. If we introduce AI-assisted matching in future, we will update this policy and tell you before it affects you; it will not use protected characteristics, and you will be able to see and edit anything it extracts from your resume.

6. Who can see your information

Employers you apply to.

• When you apply to a job on CoreWorq, that employer receives your profile, including your expected salary.
• Your resume is shared only if you attach it and your resume setting allows it, and only after it has passed our malware check.
• Your phone number and email are released according to your contact setting (hidden, after you apply, after the employer requests it, or to verified employers), and each release is recorded.
• Employers never see your current salary or your profile-strength score.
• When you apply to a job that sends you to the employer's own website, we pass you on to that site; what you submit there is governed by that employer's own privacy policy.

You decide who can see your profile: anyone, registered employers only, only employers you apply to, or only you. You can change this at any time in Settings.

Service providers who help us run CoreWorq, under contract:

• Amazon Web Services, which hosts the application and stores your files and data, and delivers our emails (Amazon SES).
• Razorpay Software Private Limited, which takes your payment if you buy a pass. It receives what you enter on its page and tells us whether the payment succeeded; it handles that under its own privacy policy.
• Resume malware scanning runs on our own servers; your resume is not sent to a third-party scanning service.

We may disclose information if the law requires it, to respond to valid legal requests, or to protect people's safety and our rights. If our business is ever sold or merged, your information may transfer to the new owner, who must honour this policy.

We do not sell your personal data, and we do not share it with advertisers.

7. Where your data is kept

Your data is stored in India (Amazon Web Services, Mumbai region). The CoreWorq platform does not transfer personal data outside India. If you write to us by email, your message is also handled by our mailbox provider under its own terms.

8. How long we keep it

• Your profile, resumes, applications and saved jobs: until you delete your account, which you can do yourself at any time. Deleting removes them straight away.
• After you delete: employers can no longer see your application on CoreWorq. We cannot erase copies an employer has already downloaded or noted outside CoreWorq.
• What we keep after deletion: an anonymous account stub (no email, phone or password); security records, which refer to your account only by an anonymous ID and contain no profile content, for 12 months; and the record that you accepted these documents, as proof of consent.
• Payment records (amount, date, plan and provider reference, never card or bank details): kept for the period Indian tax and accounting law requires, even after you delete your account. After deletion they refer only to the anonymous account stub and identify no one.
• Email-confirmation links: erased with your account.
• Backups: deleted data may remain in encrypted backups for up to 7 days, after which it is overwritten.

9. Your rights and choices

• Access: download a copy of your data (your profile, applications, saved jobs, consent history and account activity) from Settings → Your data.
• Correction: edit your profile and resumes yourself at any time.
• Erasure: delete your account from Settings → Your data. Employer accounts can ask us to close their account by writing to hello@meltingcubes.com.
• Withdraw consent: turn off marketing email in Settings, or delete your account. Withdrawing does not affect what we did before you withdrew.
• Control visibility: choose who can see your profile, resume and contact details in Settings.
• Grievance: if something is wrong, contact our Grievance Officer (below). If you are not satisfied, you may complain to the Data Protection Board of India.
• Nominate: you may nominate someone to exercise these rights for you if you die or cannot act. To do this, write to hello@meltingcubes.com from your account email address with the nominee’s name and contact details. When the nominee later asks us to act, we will ask for proof of the nomination and identity documents for both of you, and we will reply within the time stated under the Grievance Officer below.

10. How we protect it

• Connections to CoreWorq are encrypted (HTTPS).
• Passwords are stored using a modern one-way method (Argon2id). Sign-in sessions are held on our servers and can be ended instantly.
• Employer data is separated by company, and enforced in the database, so one company cannot reach another's private data.
• Uploaded resumes are stored privately (never on a public web address) and scanned for malware before an employer can open them.
• Access by our own staff is limited, requires a second factor, and is logged.
• Data is encrypted at rest: the database, its backups and uploaded files.

No system is perfectly secure. If a breach affects your personal data we will tell you and the authorities as the law requires.

11. Cookies

CoreWorq uses one essential cookie to keep you signed in. It is needed for the service to work and is removed when you log out or it expires. We do not use analytics, advertising or tracking cookies. If we ever add any, we will ask you first.

12. Changes to this policy

We may update this policy. We will change the date at the top, and if a change matters to you we will tell you (by email or a notice in the product) and ask you to accept the new version before you carry on.

13. Contact and Grievance Officer

• Grievance Officer: Kartheek Thatikonda, hello@meltingcubes.com
• Response: acknowledged within 24 hours and resolved within 15 days
• MeltingCubes Pvt Ltd, Plot no 728, 729, Grand view tower, Kukatpally, Hyderabad 500072, Telangana, India