This Privacy Policy describes how Sprintflux Technologies Pvt. Ltd. (“we”) collects, uses, shares and protects personal data when you use TeamsOnGo. We comply with the Information Technology Act 2000, the Digital Personal Data Protection Act 2023 (India), and (where applicable) GDPR and CCPA.
1. Data we collect
- Account data: name, email, phone, password (hashed), employer.
- Company data: company name, website, industry, addresses, billing details, GSTIN.
- Hiring data: roles, JDs, candidate notes, scorecards, interview transcripts (with consent).
- Candidate data: name, contact, resume, employment history, links, communications. We act as a Data Processor on behalf of our Customer.
- Payment data: processed by Razorpay; we store only the order/payment IDs and last-4 of the card.
- Usage data: logs, device, IP, cookies, page views, feature usage.
2. How we use data
- To provide, secure and improve the Services.
- To match Customers with Recruiters and Candidates with roles.
- To bill, send invoices and meet GST/tax obligations.
- To send transactional emails (no marketing without opt-in).
- To prevent fraud, abuse and security incidents.
- To meet legal obligations and respond to lawful requests.
3. Legal bases (where applicable)
Performance of contract; legitimate interest (security, fraud prevention); consent (marketing, optional cookies, sensitive AI features); legal obligation (taxes, compliance).
4. Sharing
We share data with vetted sub-processors (cloud hosting, email, analytics, payments) under written contracts. We never sell personal data. A current sub-processor list is available on request to info@teamsongo.com.
5. International transfers
Where data is transferred across borders, we use Standard Contractual Clauses or equivalent safeguards. India is the default residency.
6. Retention
- Account data: for the lifetime of your account, plus 7 years for tax/compliance.
- Candidate data: as long as the Customer instructs, with default purge of inactive candidates after 24 months.
- Logs: 12 months.
- Payment records: 8 years (statutory).
7. Your rights
Subject to applicable law you have the right to access, correct, delete or export your data, withdraw consent, restrict processing, and lodge a complaint with the Data Protection Board of India or your local supervisory authority.
To exercise any right, email info@teamsongo.com. We respond within 30 days.
8. Security
We implement industry-standard safeguards: encryption in transit (TLS 1.3) and at rest (AES-256), key management via cloud KMS, RBAC + ABAC, audit logging, vulnerability scanning, and quarterly penetration tests. See the Security page for details.
9. Cookies
We use strictly necessary cookies plus, with your consent, analytics cookies. See our Cookie Policy.
10. AI & automated decision-making
Some features use AI to generate JDs, score candidate matches, summarise conversations and surface insights. You may opt-out of AI processing in your workspace settings. We do not use your data to train third-party foundation models. We do not make hire/reject decisions automatically without a human in the loop.
11. Grievance Officer (India)
In compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Consumer Protection Act:
Grievance Officer: Privacy Lead, Sprintflux Technologies Pvt. Ltd.
Email: info@teamsongo.com
12. Changes
We may update this policy. Material changes will be notified by email at least 15 days in advance.