Privacy Policy & Data Sovereign Charter
Last Updated: September 2026 • Platform Version 2.4 (Cryptographic Trust Edition) • Compliant with DPDPA 2023 & GDPR
Zero Data Brokering
Candidate resumes and profiles are never sold, rented, or exposed to programmatic ad networks.
Encrypted Credentials
Authentication tokens and passwords are salted and hashed using bcrypt; recovery links expire in 60 minutes.
Candidate Consent First
Recruiters can only access candidate contact records after an explicit application submission.
01.Data Collection & Sovereign Ownership
LinksSocial collects only the minimal data required to verify identities and facilitate employment matches:
- Candidate Data: Full name, verified email, employment headline, experience, portfolio links, and application notes.
- Recruiter & Organization Data: Corporate email addresses, apex domain names, public DNS TXT verification tokens, and company metadata.
- Telemetry & Security Data: IP hash strings collected purely for edge rate-limiting and DDoS mitigation (rotated and purged automatically).
02.DNS Verification & Organization Audit Data
To eliminate hiring scams, organizations must publish cryptographic verification tokens to their public DNS zone records. LinksSocial stores the resulting cryptographic match timestamps and authoritative domain names to guarantee authenticity to job seekers. We never request or store registrar credentials or private keys.
03.Candidate Application Confidentiality
When applying for a role, your application data is transmitted exclusively to the verified recruiters belonging to that specific organization. Candidate profiles are protected from automated search engine scrapers (noindex, nofollow HTTP headers enforced).
04.Third-Party Sub-Processors & Data Infrastructure
We do not share data with advertising exchanges. Personal data is processed strictly through essential cloud infrastructure providers operating under confidentiality and data protection agreements:
- Cloud Hosting & Edge Functions: Vercel Inc. (Serverless Compute & CDN Perimeter).
- Relational Storage: Hosted PostgreSQL with TLS 1.3 in-transit and AES-256 at-rest encryption.
- System Emails: Transactional email service dispatchers for verification and recovery links only.
05.Cookies & Authentication Sessions
LinksSocial uses strictly necessary HTTP-only authentication cookies and CSRF tokens to maintain verified sessions. We do not use third-party tracking pixels, behavioural retargeting scripts, or cross-site tracking cookies.
06.Right to Erasure & Data Portability (DPDPA / GDPR / CCPA)
Users maintain absolute sovereignty over their data. Under applicable privacy regulations, you hold the right to:
- Purge your profile, portfolio details, and application history permanently via account settings.
- Request an export copy of all stored personal records.
- Immediately invalidate active sessions and password recovery tokens.
- Withdraw consent for optional data processing at any time.
07.Security Incident & Fraud Quarantine Protocol
If a job posting receives multiple independent fraud reports, LinksSocial algorithms automatically isolate and quarantine the listing, removing it from candidate search indexes while our compliance team audits the employer records. In the event of a verified security incident affecting user credentials, affected users will be notified without undue delay.
08.Grievance Officer & Inquiries
In accordance with the Information Technology Act and the Digital Personal Data Protection Act (DPDPA), inquiries regarding data processing, corrections, or erasure requests can be directed to our Grievance Desk at support@linkssocial.com.