Candidate Privacy Notice
Last updated: 17 September 2026
1. Who We Are
This Privacy Notice for CargoFL Technologies Private Limited (“CargoFL”, “we”, “us”, or “our”) describes how and why we collect, store, use, and share your personal information when you apply for a role through our recruitment portal.
It applies specifically to individuals (“you”, “candidate”) who apply for roles through the CargoFL careers portal. It explains what personal data we collect, why we collect it, how long we keep it, and your rights under applicable law.
It also applies if your details reached us another way — a CargoFL employee referred you, or a recruiter added your CV by hand. In that case the first email we send you says so and links here, and you can ask us to remove your details at any time.
2. What Personal Data We Collect
When you apply through our careers portal, we may collect the following categories of data:
| Category | Examples |
|---|---|
| Identity data | Full name, and a photograph only if you choose to provide one |
| Contact data | Email address, phone number, city/state of residence |
| Professional data | Resume/CV, work history, skills, certifications, LinkedIn profile |
| Application data | Position applied for, years of experience, notice period, location, source |
| Assessment data | Answers and score from the online onboarding assessment |
| Proctoring data | Periodic webcam and screen snapshots and integrity events captured during the online assessment and during any proctored interview round, with your consent — including flags produced by automated, on-device analysis of your camera (face presence, gaze direction, and phone/other-person detection) |
| Communication data | Emails and interview notes/feedback recorded internally |
| Interview transcript | Where an interview is held on Google Meet, an automatic text transcript generated by Google, stored against that interview for our hiring team and the interviewers who attended it. It is internal only — we never publish it or share it outside the hiring process. Interviews held by phone, or on another platform, are not transcribed. |
The automated camera analysis used during proctored assessments and coding rounds runs entirely on your own device, in your browser. It produces only integrity flags (for example, “no face visible” or “phone detected”) for our hiring team to review — no continuous video recording leaves your device, only the periodic snapshots noted above. These flags assist human review and are never used to automatically reject a candidate.
We do not intentionally collect sensitive personal data such as caste, religion, health conditions, or political opinions. Please do not include such information in your application.
3. Minimum Age Requirement
Our recruitment portal is intended solely for individuals who are 18 years of age or older. We do not knowingly collect or process the personal data of individuals under 18. By submitting an application, you confirm that you are at least 18 years old. If you believe a minor has submitted data through our portal, please notify us at dpo@cargofl.com.
4. Why We Collect It (Purpose and Legal Basis)
We collect and process your data for the following purposes:
- Evaluating your application for an open role
- Confirming that the email address on an application belongs to the person applying
- Verifying the integrity of the online assessment and of proctored interview rounds through proctoring
- Keeping an accurate internal record of an interview held over Google Meet, through its automatic transcript
- Communicating with you about your application status
- Complying with applicable employment and labour laws
- Retaining your profile for future relevant openings (only with your consent)
We will only use your data for the purposes stated above. We will not use your data for marketing or share it with third parties for commercial purposes.
5. Future Roles
At the time of application, you may optionally consent to your profile being retained for future roles. If you provided this consent, we will retain your data until you withdraw it. You may withdraw (or grant) this consent at any time with one click on your application status page — the “Track your application” link in every email we send you — or by writing to dpo@cargofl.com. Withdrawing does not affect anything we did while the consent was in place.
6. Who We Share Your Data With
We may share your data with the following categories of recipients, only to the extent necessary:
- Internal hiring managers and the HR team — for evaluating your application
- Cloud service providers — for secure hosting and email delivery, under data-processing agreements
- Legal or regulatory authorities — where required by law
We do not sell your personal data to any third party.
7. How Long We Keep Your Data
| Scenario | Retention period |
|---|---|
| Application unsuccessful; no consent for future roles | 12 months from the decision |
| Application unsuccessful; consent granted for future roles | Retained for future opportunities until consent is withdrawn |
| Candidate hired | Transferred to employee records |
| Application withdrawn by candidate | 30 days from withdrawal |
| Application erased at your request after an unsuccessful outcome | Deleted immediately; one-way codes derived from your email address and phone number are kept for 6 months (see below) |
| Email verification code requested but no application submitted | The code expires in 10 minutes and the record is removed within 24 hours |
After the applicable retention period, your data is securely deleted or anonymised. Proctoring snapshots are retained only for the duration of the review of your assessment or round. An interview transcript is kept with that interview’s record and is deleted together with your application.
If you use the “Delete my data” option on your application status page after an unsuccessful outcome, your application and its associated files — including your CV and any assessment records — are deleted immediately. We retain only one-way codes derived from your email address and your phone number, together with the role you applied for and the date. These codes cannot be reversed to recover your contact details, and they are automatically removed after six months. We keep them for a single purpose: to apply our policy that an unsuccessful applicant may re-apply for the same role after six months. Without them, deleting the application would also erase our record that the policy applies. This does not affect your ability to apply for any other role at any time. If you share a phone number with someone else, or you believe this has been applied to you in error, contact dpo@cargofl.com.
Before an application can be submitted through our careers site, we email a one-time code to the address entered on the form and ask you to type it back. This confirms that the address belongs to you, and prevents an application being filed in your name by someone else. We store the address and a one-way code — never the digits we sent you — for as long as the code is valid; the record is removed automatically. If you receive a code you did not ask for, no application has been created and you can safely ignore it.
8. Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access — request a summary of the personal data we hold about you
- Right to correction — request correction of inaccurate or incomplete data
- Right to erasure — request deletion where we no longer have a lawful basis to retain it
- Right to withdraw consent — withdraw consent at any time; withdrawal does not affect processing already done
- Right to grievance redressal — raise a complaint with our Data Protection Officer (details below). If we do not resolve it within the period stated there, you may complain to the Data Protection Board of India
- Right to nominate — nominate another person to exercise your rights in the event of death or incapacity
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss, or destruction. These include access controls, encryption in transit, and vendor due diligence.
10. Contact Us
For any questions, requests, or complaints regarding this notice, please contact:
Data Protection Officer
CargoFL Technologies Private Limited
Mubin Shaikh
Pune, Maharashtra, India
We will acknowledge your request within 72 hours and endeavour to resolve it within 30 days. To exercise any right, write to the address above from the email address on your application (that is how we identify you), or use the “Track your application” link in any email we sent you, where you can withdraw the future-roles consent and, once your application has closed, delete your data yourself.
If you are not satisfied with our response, you may complain to the Data Protection Board of India, the authority established under the Digital Personal Data Protection Act, 2023.
11. Changes to This Notice
We may update this notice from time to time. The “last updated” date at the top of this document will always reflect the latest revision.