Graftly Back to home

Legal

Privacy Policy

This policy is the single privacy notice for Graftly's public website, web application, Android application, and related support and hiring services.

Last updated: July 18, 2026

1. Who we are and when this policy applies

Graftly Private Limited (“Graftly”, “we”, “our”, or “us”) operates Graftly, a local work and hiring platform. This policy applies when you use graftly.in, app.graftly.in, the Graftly mobile app, or contact our support and safety teams.

Graftly decides why and how personal data is processed for these services. Questions and privacy requests can be sent to support@graftly.in.

2. Personal data we collect

  • Account and authentication data: name, email address, mobile number, one-time-password and sign-in records, account type, language preference, and identifiers received from an authentication provider when you choose that sign-in method.
  • Work and business profile data: skills, experience, education, availability, work preferences, salary or hiring preferences, profile answers, resumes or other files you choose to upload, business and branch details, job posts, GST or other business-verification details, and profile-completion information.
  • Location data: pincode, locality, district, state, branch address, and coordinates. When you choose “Fetch location”, the app may use your current or last-known device location with permission. You can instead enter a location manually. We do not use location data for advertising.
  • Communications and safety data: chats, contact requests, notifications, blocks, reports, support messages, and information supplied while investigating fraud, abuse, or safety concerns.
  • Usage, device, and technical data: IP address, browser or app version, device and operating-system information, session and security events, feature interactions, diagnostics, performance timings, and analytics events.
  • Website enquiry data: the name, email, optional phone number, topic, and message you submit through a Graftly contact or support channel.

We may also receive business or location information from public records and verification or location-lookup services. Please do not upload sensitive documents unless a Graftly feature specifically requests them.

3. How we use personal data

  • create, authenticate, secure, and support your account;
  • build profiles, listings, branches, and job posts;
  • provide nearby discovery, search, matching, translation, transliteration, onboarding, chat, and notification features;
  • display information to other users according to the product flow and your sharing choices;
  • verify business or profile signals, prevent abuse, review reports, enforce our terms, and protect users;
  • respond to enquiries, account-deletion requests, and support cases;
  • measure reliability and feature use, troubleshoot errors, and improve Graftly; and
  • meet legal, regulatory, tax, audit, security, and dispute-resolution obligations.

4. Consent and lawful processing

We process personal data with your consent, to provide services you request, to meet legal obligations, and for other lawful uses permitted by applicable law. Where consent is required, you may withdraw it through the available product control or by contacting us. Withdrawal does not affect processing already completed, and some features may no longer work without the data they require.

Device permissions such as location, notifications, or file access are requested in context. You can decline a permission and use an available manual alternative where the feature supports one.

5. When data is disclosed

  • Other Graftly users: profile, job, business, branch, match, and contact information may be shown when needed for discovery and communication. Contact details may be masked or gated until the relevant product step.
  • Service providers: vendors may process data for authentication, cloud hosting and databases, file storage, maps and location lookup, business verification, translation or AI-assisted features, communications, analytics, diagnostics, and customer support. They may use the data only to provide contracted services to Graftly.
  • Legal and safety reasons: we may disclose information when reasonably necessary to comply with law or a valid legal request, protect rights and safety, investigate fraud, or enforce our terms.
  • Corporate changes: data may be transferred as part of a merger, financing, acquisition, restructuring, or sale of assets, subject to applicable safeguards and notice requirements.

We do not sell or rent personal data, and we do not use personal data for cross-site behavioural advertising.

6. AI-assisted features and matching

Graftly may use automated tools to guide onboarding, parse a resume you submit, translate or transliterate text, normalize search terms, and suggest matches. Relevant inputs may be processed by contracted technology providers for that purpose. Suggestions and match indicators are informational; they do not make an employment decision or guarantee identity, conduct, suitability, or an outcome.

7. Cookies, local storage, and analytics

The website and web app may use essential cookies or browser storage for authentication, security, language, and preferences. Graftly and its hosting or performance providers may also process page, browser, device, referral, and timing information to understand site reliability and use. Graftly does not use this information for third-party targeted advertising.

8. Security

We use safeguards designed for the nature of the data, including encrypted network connections, access controls, authentication, monitoring, rate limits, and service-provider controls. No online service can guarantee absolute security. If you believe your account or data may be at risk, contact us promptly.

9. Retention and deletion

We keep personal data only while it is needed to provide Graftly, meet the purposes described above, resolve disputes, prevent fraud, and satisfy legal or audit requirements. Retention depends on the data type and context. After a valid deletion request, we delete or de-identify data that is no longer required. Limited records may be retained when law, safety, fraud prevention, or an unresolved dispute requires it, and residual copies may remain in protected backups until the normal backup cycle completes.

To request deletion of a Graftly account and associated data, use our account-deletion request page. We may verify account ownership before acting on the request.

10. Your choices and rights

Subject to applicable law, you may ask for a summary of your personal data and processing, correction or completion of inaccurate data, erasure, withdrawal of consent, or grievance resolution. You may also nominate another person to exercise rights where applicable. We may request information needed to verify your identity and protect the account.

11. Children

Graftly is intended for adults aged 18 or older. We do not knowingly permit children to create accounts. If you believe a child has provided personal data, contact us so we can review and take appropriate action.

12. Processing locations and policy changes

Service providers may process data in India or other locations where they operate. We require appropriate contractual, organizational, and technical safeguards as applicable.

We may update this policy when Graftly, our data practices, or legal requirements change. We will post the revised date here and provide additional notice when a material change requires it.

13. Contact and grievances

For privacy questions, rights requests, or grievances, email support@graftly.in with the subject “Graftly privacy request”. For urgent fraud or safety reports, email report@graftly.in or use the in-product reporting feature.