Version 1.0

Last Updated: March 05, 2026  |  Effective Date: March 05, 2026

1. Introduction

Welcome to RiseFlake, a digital employment and professional networking platform operated by Bold India Platforms Private Limited ("Company", "we", "us", or "our"). We provide services through our website (www.riseflake.com) and mobile applications available on the Google Play Store and Apple App Store (collectively, the "Platform").

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you access or use our Platform. This policy applies to all users of the Platform, including job seekers, recruiters, employers, and visitors.

This Privacy Policy is published in compliance with the Information Technology Act, 2000 and the rules made thereunder, the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and other applicable Indian laws and globally accepted data protection standards.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.

2. Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data, as defined under the DPDP Act, 2023.
• "Data Fiduciary" means Bold India Platforms Private Limited, which determines the purpose and means of processing personal data.
• "Data Principal" means the individual to whom the personal data relates — i.e., you, the user.
• "Processing" means any operation performed on personal data, including collection, storage, use, sharing, modification, or deletion.
• "Platform" means the RiseFlake website, web application, mobile applications (Android & iOS), and all related services.

3. Data Fiduciary Information

• Company Name: Bold India Platforms Private Limited
• Brand Name: RiseFlake
• CIN: U85499PN2025PTC246360
• Registered Office: Sn 242/1/2 Baner, Tejaswini Soc, DP Road, N.I.A., Pune, Maharashtra 411045, India
• Email: hello@boldindia.in
• Website: www.boldindia.in
• Phone / WhatsApp: +91 92252 20170

4. Information We Collect

We collect the following categories of information when you use our Platform:

4.1 Information You Provide Directly

a) Account & Identity Information

• Full name, username, email address, phone number, and password
• Date of birth and gender
• Profile photo
• Account role (e.g., Candidate, Recruiter, Employer)
• Email and phone verification status
• Communication preferences and notification settings

b) Professional Information

• Professional headline and career goals
• Job preferences (e.g., Job Only, Internship, Remote preference)
• User type (e.g., College Student, Working Professional)
• Purposes for using the Platform (e.g., Find Job, Upskill, Mentoring, Events)
• Work experience details including company name, designation, employment type, office location, start/end dates, currently working status, remote work status, and description
• Whether you obtained your job through RiseFlake

c) Education Information

• College or institution name
• Qualification, course, and specialization
• Start and end years
• Percentage or CGPA
• Board of education (e.g., for High School/10th, 12th)

d) Skills, Certifications & Projects

• Professional and technical skills
• Certificates including title, issuing organization, issue and expiry dates, credential ID, credential URL, associated skills, and description
• Projects including title, project type, description, skills used, project URL, start and end dates, and ongoing status

e) Resume & Portfolio

• Resume link (e.g., Google Drive URL)
• External portfolio links

f) Location & Address Information

• Current location and preferred work location (city, state, country)
• Current address (address line 1, address line 2, landmark, pincode, city/state/country)
• Permanent address (address line 1, address line 2, landmark, pincode, city/state/country)

g) Personal Bio & Interests

• "About Yourself" description (free-text bio)
• Hobbies and personal interests

h) Social & External Links

• LinkedIn, GitHub, Twitter (X), Instagram, Reddit, Medium, Behance, Dribbble, CodePen, Figma, LeetCode profile URLs
• Personal website and portfolio URLs
• Any other external link you choose to provide

i) Recruiter & Employer Data

• Company or organization details
• Job postings and hiring activity
• Business contact information

4.2 Information Collected Automatically

• Device & Technical Data: Device type, model, operating system, browser type and version, unique device identifiers, app version, screen resolution, and language settings
• Usage Data: Pages and features accessed, search queries, clicks, session duration, interaction patterns, referring URLs, and in-app navigation behavior
• Network Data: IP address, internet service provider, and approximate geolocation derived from IP
• Log Data: Access timestamps, error logs, crash reports, and diagnostic data
• Cookies & Similar Technologies: Session cookies, persistent cookies, local storage data, and pixel tags (see Section 11 for details)

4.3 Information from Third Parties

• If you sign in using a third-party service (e.g., Google), we may receive your name, email, and profile picture as authorized by you
• Information provided by recruiters or employers about candidates, where applicable and with proper consent

5. How We Use Your Information

We process your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your user account, and verifying your identity
• Job Discovery & Recruitment: Enabling job seekers to discover and apply for relevant opportunities, and enabling recruiters/employers to find and contact suitable candidates
• Professional Networking: Facilitating connections, mentorship, and professional interactions among users
• Profile Matching: Using your skills, education, experience, location and preferences to recommend relevant jobs, connections, and content
• Communication: Sending service-related messages, alerts, job updates, and notification emails (which you may control via your settings)
• Platform Improvement: Analyzing usage patterns and feedback to improve features, functionality, and user experience
• Security & Fraud Prevention: Detecting, preventing, and addressing fraud, unauthorized access, security incidents, and technical issues
• Legal Compliance: Fulfilling our legal obligations, responding to legal processes, and enforcing our terms of service
• Analytics & Research: Generating anonymized, aggregated insights to understand platform usage trends

We process your personal data only where we have a valid legal basis to do so, including: your consent; performance of a contract with you; compliance with legal obligations; or our legitimate interests that do not override your fundamental rights.

6. Information Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances and with appropriate safeguards:

• With Recruiters & Employers: When you apply for a job, express interest, or enable your profile to be visible to recruiters, relevant profile information (such as your name, skills, education, experience, resume, and contact details) may be shared with the respective employer or recruiter
• With Service Providers: We engage trusted third-party service providers who assist us in operating the Platform, subject to strict confidentiality and data processing agreements. These include cloud hosting providers, analytics services, email/notification service providers, and payment processors
• Legal Requirements: We may disclose your data when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; to enforce our policies; to protect the rights, property, or safety of RiseFlake, our users, or the public
• Business Transfers: In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction, your personal data may be transferred as part of the transaction, subject to applicable data protection safeguards and notice to affected users
• With Your Consent: We may share your data with other third parties when you explicitly authorize such sharing

7. Third-Party Services & SDKs

Our Platform integrates with the following third-party services and software development kits (SDKs), each of which may collect, process, or receive certain data as described below:

• Google Firebase: Used for analytics, push notifications (FCM), crash reporting (Crashlytics), authentication, and real-time database services. May collect device identifiers, crash logs, app usage events, and FCM registration tokens
• Amazon Web Services (AWS): Used for cloud infrastructure and data storage. Your data may be stored on AWS servers
• Microsoft Azure: Used for cloud computing services and data processing infrastructure
• Google Cloud Platform: Used for cloud infrastructure, data storage, and computing services
• Cloudflare: Used for content delivery, DDoS protection, and performance optimization. May process IP addresses, HTTP request headers, and access logs
• Razorpay: Used for payment processing, if applicable. May collect payment-related information necessary to process transactions
• Google Analytics: Used for understanding Platform usage patterns. May collect device information, browsing behavior, session data, and interaction events

Each third-party service operates under its own privacy policy. We encourage you to review their respective privacy policies. We only share the minimum data necessary for each service to function.

8. Cross-Border Data Transfers

Your personal data may be stored and processed on servers located outside India, including servers operated by our cloud infrastructure partners (AWS, Azure, Google Cloud) in various global regions. When your data is transferred outside India, we ensure appropriate safeguards are in place, including:

• Contractual protections with data processors that include data protection obligations
• Compliance with applicable data transfer provisions under Indian law, including any requirements notified under the DPDP Act, 2023
• Selection of data processing locations that maintain adequate levels of data protection

9. Data Retention & Account Management

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Active Account Data: Retained for the duration your account remains active, plus a reasonable period thereafter to enable account reactivation
• Post-Deletion: Upon account deletion request, your personal data will be deleted or anonymized within 90 days, except where retention is required by law
• Usage & Analytics Data: Retained in anonymized or aggregated form for up to 24 months for analytics and platform improvement purposes
• Legal Compliance Data: Certain data may be retained longer as required by applicable laws, regulations, or legal proceedings (e.g., financial transaction records as required under Indian tax laws)
• Communication Records: Retained for up to 12 months after the last interaction, unless a longer period is required by law
• Backup Data: May persist in encrypted backups for up to 30 days after deletion from primary systems

We provide the following account management options:

• Permanently Delete Account: You may permanently delete your account and all associated personal data from the Platform. Upon initiating permanent deletion, your data will be irreversibly removed from our primary systems within 90 days. This action cannot be undone. You can initiate this through your account settings or by contacting us at privacy@riseflake.com
• Hibernate Account: If you wish to take a break from the Platform without losing your data, you may hibernate (deactivate) your account. While hibernated, your profile will not be visible to recruiters or other users, and you will not receive any communications. Your data will be securely retained, and you can reactivate your account at any time by simply logging back in

10. Data Security

We implement industry-standard administrative, technical, and physical security safeguards to protect your personal data against unauthorized access, alteration, disclosure, destruction, or loss. Our security measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms including password hashing and optional two-factor authentication
• Regular security assessments and vulnerability testing
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Secure cloud infrastructure with leading providers (AWS, Azure, Google Cloud)
• Incident response procedures and breach notification protocols

While we strive to protect your personal data, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security, and you share your data at your own risk.

11. Cookies & Tracking Technologies

We use the following cookies and similar technologies on our Platform:

• Essential Cookies: Required for the Platform to function properly, including session management, authentication, and security cookies. These cannot be disabled
• Analytics Cookies: Help us understand how users interact with the Platform, which pages are most visited, and how users navigate through the Platform. These include Google Analytics cookies
• Functional Cookies: Remember your preferences and settings to provide a personalized experience (e.g., language, location preferences)
• Performance Cookies: Help us monitor Platform performance, detect errors, and improve loading speeds

You can manage or disable cookies through your browser or device settings. Please note that disabling essential cookies may affect the functionality of the Platform. For more information, please refer to our Cookie Policy.

12. Your Rights

Under the DPDP Act, 2023, the Information Technology Act, 2000, and other applicable laws, you have the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal data we hold about you and the processing activities related to it
• Right to Correction: You may request correction or updating of any inaccurate or incomplete personal data. You can also directly update most information through your profile settings
• Right to Erasure: You may request deletion of your personal data by using the Permanently Delete Account option in your account settings, or by contacting us. Upon such request, we will delete or anonymize your data within 90 days, subject to any legal obligations requiring retention. Alternatively, you may choose to Hibernate your account to temporarily deactivate it without losing your data (see Section 9)
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time by contacting us at privacy@riseflake.com or through the relevant settings in your account. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal
• Right to Nominate: Under Section 14 of the DPDP Act, you have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity
• Right to Grievance Redressal: You have the right to raise a complaint with our Grievance Officer if you believe your data privacy rights have been violated. We are committed to resolving your concerns — please connect with us directly
• Profile Visibility Control: You may control who can view your profile, resume, and contact information through your privacy settings
• Communication Preferences: You may opt out of non-essential communications (promotional emails, push notifications) through your account settings

To exercise any of these rights, please contact us at privacy@riseflake.com. We will respond to your request within 30 days.

13. Consent

By registering on the Platform or using our services, you consent to the collection, use, storage, and processing of your personal data as described in this Privacy Policy.

• Consent for mandatory data is obtained at the time of registration and profile creation
• Consent for optional data (e.g., hobbies, social links, projects) is obtained when you voluntarily provide such information
• You may withdraw your consent at any time by contacting us; however, this may limit your ability to use certain features of the Platform
• Where we process data based on a legal basis other than consent (e.g., contractual necessity or legal obligation), such processing will continue even if consent is withdrawn

14. Data Breach Notification

In the event of a personal data breach that is likely to cause harm to affected users, we will:

• Notify the Data Protection Board of India as required under the DPDP Act, 2023
• Notify affected data principals (users) as soon as reasonably practicable
• Take immediate steps to contain the breach and mitigate potential harm
• Maintain records of data breaches and remediation actions taken

15. Children's Privacy

RiseFlake is not intended for individuals under the age of 18. We do not knowingly collect, process, or store personal data from minors. If we become aware that we have collected personal data from an individual under the age of 18, we will take steps to delete such data promptly.

If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at privacy@riseflake.com so that we can take appropriate action.

16. Third-Party Links

The Platform may contain links to third-party websites, applications, or services that are not operated by us (e.g., LinkedIn, GitHub, company websites linked from job postings). We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party services you interact with.

17. Mandatory vs. Optional Data

Certain data fields on the Platform are marked as mandatory (indicated with an asterisk *) and are required for the Platform to function properly (e.g., name, email, phone number). Other fields are optional and you may choose whether to provide them (e.g., social media links, hobbies, certifications, projects). Providing optional information may enhance your profile visibility and job matching experience but is not required.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make significant changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via email, in-app notification, or a prominent notice on the Platform for material changes
• Continued use of the Platform after the effective date of changes constitutes your acceptance of the revised policy

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

19. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing and privacy:

If you have any issues, concerns, or are unsatisfied with our response, we encourage you to connect with us directly via email at grievance@riseflake.com or reach our Company Headquarters via WhatsApp at +91 92252 20170. You may also visit us at our registered office in Pune. We are committed to resolving your concerns and ensuring your experience on RiseFlake is safe and transparent.

20. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Company: Bold India Platforms Private Limited
• Brand: RiseFlake
• Registered Office: Sn 242/1/2 Baner, Tejaswini Soc, DP Road, N.I.A., Pune, Maharashtra 411045, India
• Email: hello@boldindia.in, support@riseflake.com
• Grievance Email: grievance@riseflake.com
• Phone / WhatsApp (Company HQ): +91 92252 20170
• Website: www.boldindia.in
• CIN: U85499PN2025PTC246360