1. Introduction

This Privacy Policy describes how Welspun collects, uses, discloses, stores, and protects personal data processed through the WelHire Platform, an AI-driven workflow automation and hiring tool offered on a subscription basis to enterprise customers ("Customers").

Welspun respects the privacy of every individual whose information it processes and is committed to handling personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, the General Data Protection Regulation and other applicable privacy and data-protection laws.

2. Scope and Applicability

This Policy applies to:

• Data collected from users authorized by our enterprise Customers to access or use the WelHire Platform ("Authorized Users");
• Information processed by Welspun in connection with the provision of the Service; and
• All communication channels relating to the Platform, including email, analytics, integrations, and support.

This Policy does not apply to personal data collected directly by our Customers outside the Platform or to third-party sites linked to or integrated with WelHire.

3. Roles and Responsibilities

Welspun acts as a Data Processor, processing Customer Data only as instructed by its Customers, who act as Data Fiduciaries under the DPDPA.

Welspun may also act as an independent Data Fiduciary for limited business contact information collected directly from Customers (e.g., billing or account management details).

4. Categories of Data Collected

Welspun may collect and process the following categories of data:

• Identification Data: Name, designation, company name, business email address, phone number, and login credentials.
• Usage Data: Log files, device identifiers, IP address, browser type, time zone, and user activity on the Platform.
• Transactional Data: Subscription details, invoices, payment references, and contract metadata.
• Support Data: Communications and attachments submitted through customer support.
• Technical Data: Cookies or similar technologies used to maintain session integrity and security.

Welspun does not knowingly collect personal data of children under 18 years of age.

5. Lawful Basis and Purpose of Processing

Welspun processes data only for lawful, explicit, and limited purposes, including:

• Delivering, operating, and maintaining the WelHire Service;
• Authenticating and authorizing access;
• Providing customer and technical support;
• Monitoring usage, security, and system performance;
• Improving platform functionality and AI accuracy;
• Managing subscriptions, invoicing, and contractual relationships; and
• Complying with legal obligations or defending legal claims.

Welspun does not sell, rent, or otherwise commercially exploit Customer Data for independent marketing or profiling.

6. Cookies and Tracking Technologies

WelHire uses cookies and similar technologies solely to enable functionality, enhance performance, and analyze usage patterns in a privacy-preserving manner. No tracking cookies are deployed for advertising or cross-site marketing. Users can adjust browser settings to manage or disable cookies, though some features may not function optimally.

7. Sharing and Disclosure of Data

Welspun may share data only under strict contractual controls, with:

• Affiliates and Service Providers engaged for hosting, analytics, communication, or support — each bound by confidentiality and data-protection obligations equivalent to those in this Policy.
• Regulatory or Government Authorities, when disclosure is mandated by applicable law, regulation, or court order.
• Business Successors in connection with merger, acquisition, or restructuring, subject to continuity of privacy protection.

Welspun does not authorize third parties to use data for their own marketing purposes.

8. Links to Other Sites and Advertisements

Our Website links to other websites that may collect personally identifiable information about you. Welspun is not responsible for the privacy practices or the content of those linked websites.

We may use third-party advertising companies to serve ads when you visit our Website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.

9. Cross-Border Data Transfers

Where data is transferred outside India (for example, to cloud hosting or analytics providers), Welspun ensures that:

• Transfers comply with applicable laws and DPDPA cross-border transfer rules;
• The recipient entity implements equivalent or higher standards of security and protection; and
• Appropriate contractual safeguards (including Standard Contractual Clauses or Data Processing Agreements) are in place.

10. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfil the purposes for which it was collected,
• Maintain records for audit or legal compliance, or
• Enforce or defend contractual rights.

After the retention period, data is securely deleted or irreversibly anonymized. Customers may request deletion of their data by contacting support@welhire.ai, subject to legal or regulatory exceptions.

11. Data Security

Welspun implements industry-standard administrative, physical, and technical safeguards to protect data, including:

• Encryption of data in transit and at rest;
• Multi-factor authentication and role-based access controls;
• Continuous vulnerability monitoring and regular penetration testing; and
• Periodic security audits and staff training.

Any unauthorized access or data incident is handled in accordance with Welspun's internal Incident Response and Breach Notification Protocol.

12. Rights of Data Principals

Under applicable laws, data principals (users) have the right to:

• Access their personal data held by Welspun;
• Request correction or completion of inaccurate data;
• Request erasure of data subject to contractual or legal retention;
• Withdraw consent, where applicable; and
• Lodge grievances with the designated Grievance Officer.

Requests can be made via email to support@welhire.ai. Welspun will acknowledge and respond to such requests within one (1) month, unless an extension is reasonably required.

13. Customer Responsibilities

Customers shall ensure that:

• They obtain lawful consent and provide notice to their users before submitting any personal data to Welspun;
• All data shared with Welspun is accurate and up to date; and
• No sensitive personal data (such as biometric or financial data) is uploaded to the Platform unless expressly authorized in writing.

Customers shall indemnify Welspun against any claims or penalties arising from their failure to comply with applicable data-protection obligations.

14. Children's Data

The Platform is intended for professional use and not directed toward minors. Welspun does not knowingly process personal data of individuals under 18 years of age. If such data is discovered, it will be promptly deleted upon verification.

15. Policy Updates

Welspun may update or revise this Policy from time to time to reflect legal or operational changes. Any material updates will be communicated through the Platform or via email prior to taking effect. The "Effective Date" at the top indicates the most recent version. Continued use of the Platform after any update constitutes acceptance of the revised Policy.

16. Grievance Redressal and Contact

For any complaint, concern, or request related to data privacy or processing, please write to the above email with the subject line "Privacy Request – WelHire".

17. Governing Law

This Policy shall be governed by and construed in accordance with the laws of India, and any disputes shall be subject to the exclusive jurisdiction of the courts at Mumbai, Maharashtra.

18. Effective Date and Acknowledgment

By continuing to use or access the WelHire Platform, You acknowledge that You have read, understood, and agreed to this Privacy Policy, and You authorize Welspun to process Your data in accordance with its terms.