Privacy notice

Who we are

Highlisted is being set up as a company in India; its legal name, registered address and Grievance Officer will be named here before sign-up opens. Until then, for questions, requests or complaints, use the form on the Support page (/support) and choose "A complaint" for a grievance. You get a reference at once; we acknowledge complaints within 24 hours and reply within 7 days.

What we collect

• About you: name, mobile number, email (guests don't give one), city.
• Your profile: resume, education, work history, skills, languages, links, answers about your field, and what you want (roles, places, pay, start date).
• Private answers, only if you choose to give them: year of birth, home state, category, disability and support needs, ex-serviceman status, attempts used, height and eyesight for uniformed jobs, family income for the PM Internship scheme.
• Activity: saved jobs, applications, messages, alerts, practice interviews, contact requests, Ask chats.
• Recruiters: name, work email, phone, company, job posts, searches, messages.
• Technical: a sign-in cookie, a scrambled (hashed) IP address for limits, security logs. No advertising or tracking cookies.

Why we use it

• To run your account, show and rank jobs for you, and explain each fit.
• To check age limits, domicile and reserved posts, only if you give private answers.
• To show a masked profile to recruiters, only if you switch on "Let recruiters find me".
• To apply for you, only if you switch on "Let AI apply for me".
• To share your details with an employer, only when you apply or say yes to its contact request.
• To keep Highlisted safe and lawful: stopping fake jobs and fraud, keeping security logs, answering lawful requests.
• We never sell your data, show ads, or train AI models on your data.

Who sees what

• Employers you apply to: your profile, your answers, your cover note, your phone and email, with how you prefer to be reached. If you choose "Messages on Highlisted only", recruiters see your phone and email only after you write back.
• An employer you mark "Not for me: not this employer" can't find you in recruiter search.
• Recruiters, only if visibility is on: first name and initial, headline, city, experience, skills, and the answers marked as shown to recruiters. Never your phone, email or private answers. To contact you, a recruiter must ask and you must agree; until you do, they see nothing more.
• Private answers are never shown to employers.
• Guests and anyone under 18 are never shown to recruiters.
• Our service providers, under contract: Google Cloud (hosting, in India) and Anthropic (AI, in the USA). Email and WhatsApp providers will be listed here before we use them. They use data only to provide their service to us.
• Courts and authorities, when the law requires it.

AI

• AI reads resumes and job posts, drafts answers and cover notes, runs practice and screening interviews, and powers Ask Highlisted.
• These requests go to Anthropic in the USA, which doesn't train on them. Before a resume is stored or read by AI, we remove date of birth, age, gender, marital status, religion, caste, family members' names, and ID and passport numbers.
• AI can be wrong. Check what it writes before you send it.
• In an AI screening interview, the employer gets a summary. A person decides.
• If you connect Highlisted to Claude or ChatGPT, the assistant sees only what you allow when connecting, and only for your own account. Its provider's policy covers the chat; we don't read or keep your chats.

Guests

You can start without an email. Your guest profile lives in this browser for 30 days from when you started and is never shown to recruiters. When that guest session ends, we delete the profile and everything saved with it. You can delete it sooner from your home page or account menu.

Under 18

We ask your age first. A parent or guardian must agree before we save a profile for someone under 18, so we don't save one yet: you can search and open every job without it.

How long we keep it

• Account and profile: while your account is open. When you delete your account, your profile, resume and applications are deleted within 30 days.
• Guest profiles: until the guest session ends, 30 days after it started.
• Ask chats: 30 days after the last message.
• Connected apps: sign-in tokens last an hour and renew for up to 30 days; disconnecting ends them at once. The log of what a connected app did is kept 180 days.
• Requests and complaints you send us: 180 days after they're closed. Searches that found nothing: 12 months, with no name attached.
• Employers you applied to keep their own copy of your application under their own policy.

Your rights and choices

• Switch "Let recruiters find me" and "Let AI apply for me" off at any time; stopping is as easy as starting. Withdraw an application from Applications.
• Disconnect apps from Connected apps in your account menu.
• Ask for a copy of your data, a correction, or deletion: use the form on the Support page (/support) (choose "My data"), from your account's email or phone. Guests: from the same browser.
• Complain: use the form on the Support page (/support) (choose "A complaint"). If you're not satisfied, you can go to the Data Protection Board of India once it takes complaints.
• We keep a record of what you agreed to and when, so you and we can check it.

Your part

Give true details and don't pretend to be someone else.

Security

Everything travels encrypted (HTTPS), lives on servers in India, and only the people who run Highlisted can reach it. We keep security logs. If a breach affects you, we'll tell you quickly, with what it means and what to do.

Changes

We'll tell you in the app before important changes to this notice, and ask again where your consent is needed.