Data Protection & Privacy

Privacy Policy

Your trust and personal privacy are fundamental to TodayWalkin. This policy explains what information we collect, why we need it to discover walk-in interviews, how it is secured, and your statutory rights under cyber and data protection laws.

Effective Date: September 20, 2026Last Updated: September 20, 2026 DPDP & IT Act Compliant

Privacy At A Glance

No Data Brokerage: We never sell, rent, or lease your personal information, phone numbers, or resumes to third-party marketers.

Purpose-Bound: Information is collected solely to match you with relevant walk-in interviews and calculate commute distances.

Transparent Advertising: We display ads via Google AdSense; third-party ad networks may use cookies as detailed below.

Full User Control: You can download, update, or permanently delete your profile and uploaded resumes at any time.

1. Privacy Commitment & Regulatory Framework

This Privacy Policy is published in strict adherence to:

  • Section 43A of the Information Technology Act, 2000;
  • Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
  • The Digital Personal Data Protection Act, 2023 (“DPDP Act”); and
  • Applicable global privacy benchmarks, including provisions of the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) for international visitors.

By visiting TodayWalkin (todaywalkin.com), registering an account, or uploading your curriculum vitae, you expressly consent to the collection, storage, and processing of your information in accordance with this policy.

2. Information We Collect

We collect only the minimum information necessary to discover and recommend verified walk-in drives:

A. Information You Voluntarily Provide

  • Account Credentials: Full name, verified email address, 10-digit Indian mobile number, and a cryptographically hashed password.
  • Resume / Curriculum Vitae: PDF or DOCX resume documents uploaded to our platform (stored securely in private AWS S3 buckets).
  • Career Persona Details: Extracted or self-entered skills, educational qualifications, projects, total experience, preferred job roles, preferred cities, maximum commute radius, and salary expectations.

B. Information Automatically Collected (Telemetry & Device Data)

  • Technical Identifiers: Internet Protocol (IP) address, operating system, browser type and version, language preference, referring URLs, and access timestamps.
  • Geolocation Data: Device geographic coordinates (latitude and longitude). We request access to your location only after an explicit browser permission prompt. Location data is used strictly in real time to calculate proximity and travel distance to walk-in venues and is never broadcast publicly.
  • Session Telemetry: Essential cookies and local tokens needed to keep you securely signed in and track search filters across pages.

3. Purpose of Data Processing

We process your personal information strictly for the following legitimate purposes:

  • Walk-In Discovery: Presenting relevant hiring events based on your specified city, commute radius, and skills.
  • Recommendation Engine: Calculating match scores between your verified Career Persona and active employer walk-in listings.
  • Notification Services: Sending email alerts for high-match drives, upcoming interview reminders, and critical security notifications (e.g., email verification and password resets).
  • Security & Abuse Prevention: Enforcing rate limits, preventing automated bot scraping, investigating fraudulent recruiters, and maintaining platform uptime.
  • Compliance: Satisfying statutory requirements under Indian cyber regulations and resolving candidate grievances.

4. Cookies, Web Beacons & Google AdSense Advertising

Cookies are small data files placed on your browser to enhance site navigation, maintain authenticated states, and understand user traffic.

A. First-Party Cookies

  • todaywalkin_session: An encrypted, HTTP-only, SameSite session cookie that verifies your authenticated state. It cannot be accessed by client-side JavaScript.
  • todaywalkin_vid: An anonymous visitor identifier used to aggregate search performance without linking to your personal identity.

B. Google AdSense & Third-Party Vendor Cookies

To maintain our platform as a free service for students and freshers, we partner with third-party advertising networks, including Google AdSense, to serve advertisements when you visit our website.

  • DoubleClick DART Cookie: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the Internet.
  • Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to TodayWalkin and other sites on the Internet.
  • These cookies collect non-personally identifiable browsing patterns to optimize ad relevance and measure ad performance.

Opt-Out Mechanisms for Users:

Users may opt out of personalized advertising by visiting Google Ads Settings . Alternatively, you can opt out of third-party vendor use of cookies for personalized advertising by visiting aboutads.info .

5. Third-Party Processors & Infrastructure

We engage trusted technology partners who process data strictly under confidentiality agreements and in compliance with reasonable security practices:

AWS S3 (Amazon Web Services)

Encrypted cloud object storage for uploaded resumes. Documents are stored with AES-256 server-side encryption and restricted access keys.

MongoDB Atlas

Managed cloud database with end-to-end encryption in transit (TLS) and encryption at rest for account records and listing details.

Google Maps Platform

Geocoding and distance matrix APIs for calculating commute distance between a user's city and venue coordinates.

Brevo (Transactional Email)

Deliverability provider for mandatory account verification, password resets, and opted-in job match alert emails.

6. Zero Data-Sale Guarantee

We Never Sell Candidate Personal Data

TodayWalkin does not sell, rent, commercialize, or trade your name, phone number, email address, or uploaded resumes to recruitment agencies, telemarketers, insurance companies, or third-party data brokers. Your profile exists exclusively to empower your personal walk-in discovery.

7. Data Retention & Permanent Erasure

We retain your personal data and resume documents for as long as your account remains active. If you choose to delete your account:

  • Your Career Persona, parsed profile attributes, and search history are immediately unlinked.
  • Uploaded resume files residing in S3 storage are permanently purged.
  • We may retain anonymized, aggregate metrics (such as aggregate search counts) that cannot be reverse-engineered to identify you.
  • Account deletion requests submitted via our support email are processed within 7 business days.

8. Reasonable Security Practices & Safeguards

Pursuant to Rule 8 of the SPDI Rules, 2011, TodayWalkin maintains comprehensive technical, physical, and administrative security measures:

Password Hashing

Passwords are salted and cryptographically hashed using bcrypt with a cost factor of 12. Plaintext passwords are never stored or transmitted.

Encrypted Transport

All network traffic is strictly enforced over HTTPS using TLS 1.3 protocols with HSTS headers to prevent man-in-the-middle attacks.

Secure Cookies

Authentication session cookies are marked HttpOnly, Secure, and SameSite=Lax to protect against Cross-Site Scripting (XSS).

Least-Privilege Access

Administrative access to databases and server logs is restricted strictly by role-based access controls and monitored audit trails.

9. Your Statutory Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023 and applicable cyber regulations, you hold the following rights:

  • Right to Access: You can review the personal information and resume details held in your profile at any time.
  • Right to Correction & Updation: You can edit or update your skills, phone number, location, and preferred roles.
  • Right to Erasure: You can request full erasure of your account and stored documents.
  • Right to Withdraw Consent: You may toggle email notification preferences in your account settings or unsubscribe from job alerts with one click.
  • Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer regarding any processing concern.

10. Protection of Children & Minors

TodayWalkin is designed for job seekers, college students, and graduates looking for formal employment. We do not knowingly collect personal information from children under the age of 18 years. If we become aware that a child under 18 has submitted personal details, we will promptly delete such records from our databases.

11. Modifications to this Privacy Policy

We may periodically update this Privacy Policy to reflect enhancements to our platform, legislative amendments under the DPDP Act or IT Rules, or updates to Google advertising guidelines. The date of the most recent revision will always be clearly noted at the top of this page. Continued use of the platform following notification of updates constitutes your acceptance.

12. Designated Grievance Redressal Officer

Pursuant to Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and Rule 3(2) of the Intermediary Guidelines, the details of the designated Grievance Officer are:

Grievance & Data Protection Officer

Name: Privacy Compliance Officer

Organization: TodayWalkin (Operated by WalkInHub)

Email: support@todaywalkin.com

Statutory Redressal Period: Grievances will be acknowledged within 24 to 48 hours and resolved within 15 calendar days from receipt.