OBAET
02-08-2026
For job seekers and recruiters on the OBAET platform
This Privacy Policy explains, in plain language, how OBAET collects, uses, shares, transfers, keeps and protects your personal data, and the rights you hold over it. It applies to everyone who uses the OBAET platform, whether you are here to find work or to hire. Please take a few minutes to read it before you create an account.
Document
Privacy Policy
Data Fiduciary
[Hygreet technology private limited]
Applies to
Job seeker accounts and recruiter accounts
Version
[1.0]
Effective from
[02-08-2026]
Last updated
[02-08-2026]
Before you create an account. When you create a job seeker or recruiter account, you confirm that you have read this Policy and that you agree to us processing your personal data in the ways it describes. You give that agreement by a clear, affirmative action when you sign up. If you would prefer not to agree, please do not create an account. You are free to withdraw your consent at any time, and section 14 explains how.
1.1 OBAET, referred to here as “OBAET”, “we”, “us” and “our”, operates the OBAET website, mobile application and platform, which we call the “Platform”. The Platform uses artificial intelligence to create digital twins of job seekers and of organisations, and matches them on the basis of professional compatibility.
1.2 We decide why and how your personal data is processed, and that makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023, which we call the “DPDP Act”, and the equivalent of a controller under the EU and UK GDPR and comparable laws. You are the Data Principal, which simply means the person the data is about.
1.3 Our particulars are set out below.
Operating entity
[Hygreet technology private limited]
Registered office
[F-7 city centre , Site No-1 Gwalior, Pincode - 474011]
Privacy contact
Support@obaet.com
1.4 This Policy covers all the personal data we process through the Platform. It does not cover any website or service operated by another company that we may link to, since each of those has its own privacy notice.
2.1 OBAET offers two kinds of account, and this Policy applies to both.
• Job seeker: an individual who uses the Platform to build a personal twin and to be matched to opportunities.
• Recruiter: an individual who uses the Platform on behalf of an organisation to build an organisation twin, review matches and take hiring forward.
2.2 Some parts of this Policy apply to everyone. Others apply only to job seekers or only to recruiters, and we have marked those clearly. If you hold both kinds of account, both sets of provisions apply to you.
3.1 When you create either kind of account, we ask you to confirm that you have read this Policy and to give your consent to the processing of your personal data as it describes. You give that consent by a clear, affirmative action, namely by selecting the consent checkbox and then selecting “Create account”. Creating an account is that affirmative act.
3.2 Your consent is free, specific, informed and unambiguous, and it is limited to the personal data we need for the purposes set out in section 9. It does not extend to anything else, and we do not bundle unrelated processing into the consent you give in order to use the Platform.
3.3 You may withdraw your consent at any time, and doing so is as easy as giving it, as section 14 explains. If you do not agree with this Policy, please do not create an account or use the Platform.
A note on what this document is. This is a Privacy Policy, not a contract for services. It governs how we handle your personal data. The commercial terms on which you use the Platform are set out separately in our Terms of Use. Where this Policy and the Terms of Use address the same subject, this Policy governs any question about personal data.
4.1 In India, our processing of digital personal data is governed by the DPDP Act and by the Digital Personal Data Protection Rules, 2025, which we call the “DPDP Rules” and which are being brought into force in stages. Until those provisions are fully in force, the Information Technology Act, 2000 and the rules made under it continue to apply. We have chosen to meet the DPDP standard from the outset.
4.2 Where the law of your own country gives you protections beyond those in this Policy, that law applies, and you are welcome to contact us to understand the rights it gives you.
4.3 In keeping with the DPDP Act, everything in this Policy is written to apply equally regardless of gender.
We are responsible for the personal data you give us and for any processing carried out on our behalf. We do not contract out of that responsibility.
When an organisation receives a job seeker’s information through the Platform in order to consider, interview or engage that person, the organisation decides its own purposes for that information from that point onward. It is not acting as our processor. It becomes an independent Data Fiduciary in its own right, separately answerable under the law, and its own privacy notice governs what it does with the data. We require organisations, by contract, to handle job seekers’ data lawfully.
The providers who process personal data for us, such as our artificial intelligence, hosting, communications and support providers, do so only for the purposes we engage them for, and subject to the terms and data protection commitments they make available. We remain responsible for the personal data they handle on our behalf.
6.1 You must be 18 years of age or older to create either kind of account. Our service is built on behavioural and cognitive profiling, which the law does not permit us to carry out on children in any circumstances. For that reason, we do not offer the Platform to anyone under 18.
6.2 We do not knowingly collect the personal data of anyone under 18, and we will erase it if we discover it. If you believe that a minor has provided us with personal data, please write to Support@obaet.com.
7.1 Before we ask for your consent, we give you a notice, in clear and plain language, that sets out the personal data we propose to process, the purpose for which we will process it, how you can exercise your rights, and how you can complain to the Data Protection Board of India. You may read that notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
7.2 Languages. This Privacy Policy, our Terms of Use and our website disclaimer are available in English and in the 22 languages listed in the Eighth Schedule to the Constitution of India, which is 23 languages in all. If you would like any of these documents in a language of your choice, please write to languages Support@obaet.com and we will provide the version you ask for.
We collect only what the Platform needs in order to work.
• Account information: your name, email address, telephone number, the credentials you use to log in, and the professional information we need to create your twin.
• Communications: the messages, questions, scheduling and correspondence that pass through the Platform.
• Technical and usage information: details about your device and browser, your IP address, log and diagnostic records, and how you use the Platform, which we collect in order to operate and secure it.
• Twin information: your answers to our foundational questions and to the further questions our artificial intelligence generates from them, covering your communication style, how you make decisions, your work preferences, how you approach problems, and your behavioural tendencies.
• Professional profile information: your work history, your skills, and any documents you choose to upload.
• Organisation twin information: your answers describing the organisation’s culture, leadership style, expectations, team behaviour and the requirements of the role.
• Role and hiring information: details about the roles you are hiring for and your assessment of candidates on the Platform.
If, as a recruiter, you provide personal data about colleagues or other individuals, section 11 applies.
• Your digital twin: the structured behavioural or organisational representation we derive from your answers.
• Compatibility outputs: the scores, reasoning and alignment analysis produced when twins are matched.
A note on sensitive information. We do not ask for, and we ask you not to provide, information that reveals your health, racial or ethnic origin, caste, religious or political beliefs, trade union membership, biometric or genetic data, or government identifiers. Our questions are designed to steer well clear of such information. If you provide it without being asked, we will delete it wherever we do not need it.
9.1 We process personal data only for the purposes set out below. In India, our lawful ground is your consent. Where the GDPR or a comparable law applies to you, the corresponding basis appears in the third column.
Purpose
Building your twin
Analysing your answers, generating the further questions we ask, and constructing your twin.
Consent, and performance of a contract
Compatibility matching
Matching job seeker and organisation twins to produce compatibility scores, reasoning and alignment analysis.
Consent, and performance of a contract
Facilitating hiring
Sharing a job seeker’s profile with matched organisations, and enabling further questions and interview scheduling.
Consent
Operating and securing the Platform
Authentication, service reliability, prevention of abuse and fraud, and keeping logs.
Legitimate interests
Support and grievances
Answering your questions, requests and complaints.
Consent, and legitimate interests
Legal compliance
Meeting our obligations under applicable law and responding to lawful requests.
Legal obligation
9.2 New purposes. We will not use your personal data for a purpose that is materially different from those set out above, other than the model improvement and training described in section 9.4, which we carry out on the basis of your consent and from which you may opt out, unless we obtain your separate and specific consent, or the data has first been irreversibly anonymised so that it no longer identifies you.
9.3 Record of consent. We keep a record of the notice we showed you and of the consent you gave, and you may ask us for a copy at any time.
9.4 Improving and training our models. We process the personal data collected through the Platform, including your answers, your digital twin and the compatibility outputs, in order to test, evaluate, improve and train the artificial intelligence models that power OBAET, so that matching becomes more accurate over time. We do this on the basis of your consent. Wherever the data does not need to identify you, we work with it in aggregated or anonymised form. You may ask us to stop using your personal data to train or improve our models at any time, without closing your account or losing access to the Platform, by writing to Support@obaet.com or by using the privacy controls within the Platform. When you ask us to stop, we stop all further such use. Doing so does not reverse any training that was already completed before your request, and it does not affect data that has already been irreversibly anonymised so that it no longer identifies you.
Our service is automated by design, and we want to be plain about what that means and where its limits lie.
Your answers are analysed by our artificial intelligence to generate further questions and to build your twin. Twins are then matched to produce a compatibility score together with an explanation. This is profiling: it evaluates aspects of how you communicate, how you make decisions and how you solve problems.
A compatibility score is an input to a human decision, not the decision itself. OBAET does not make hiring decisions. The Platform is not designed to reject or exclude a job seeker from an opportunity by automated means alone. Decisions to interview, engage or reject a candidate are taken by the recruiter’s organisation, which is responsible for applying meaningful human judgement.
Where automated processing meaningfully affects you, you may ask us for an explanation, offer your point of view, contest the outcome and ask for human review. Please write to Support@obaet.com and we will respond within the period the law requires.
Your twin is built from what you tell us, so keeping your answers current is the most direct way to keep it accurate. You may review or update your answers at any time. When we share data that will be used in a decision affecting a job seeker, we take reasonable steps to make sure it is complete, accurate and consistent.
11.1 When you use a recruiter account, you confirm that you are authorised to act for the organisation you represent and to accept this Policy on its behalf.
11.2 If you provide personal data about any other individual, for example a colleague you add to your account, you confirm that you have a lawful basis to share it with us and that, where required, you have informed that person and obtained any consent that is needed.
11.3 When you receive a job seeker’s personal data through the Platform, your organisation becomes an independent Data Fiduciary for that data, as section 5.2 explains. You are responsible for handling it lawfully, for using it only for the hiring purpose it was shared for, and for not disclosing it further except where the law allows.
We share personal data only in the situations set out below.
• With organisations and recruiters. Where a job seeker is matched and chooses to go ahead, we share the relevant parts of the job seeker’s profile and compatibility analysis with the organisation, which then acts independently of us, as section 5.2 explains.
• With service providers acting for us. Our artificial intelligence processing is provided by Google through the Gemini API, and our hosting and infrastructure by Hostinger. These providers process personal data only as far as they need to in order to provide their services to us, and in accordance with their own terms and data protection safeguards.
• With professional advisers, meaning our legal, accounting and audit advisers, who are bound by confidentiality.
• Where the law requires it, in order to comply with a law, a court order or a lawful request from an authority, or to establish, exercise or defend legal claims.
• In a corporate transaction, in connection with a merger, acquisition or transfer of business, on the basis that this Policy continues to apply to the transferred data.
Our commitment to you. We do not sell your personal data. We do not share it for behavioural advertising across other websites and services. We do not use it to serve you targeted advertising.
13.1 We are based in India and use service providers who may process personal data on servers located in the United States of America. Your personal data may therefore be transferred outside your country.
13.2 Any transfer out of India is made in accordance with the DPDP Act and the DPDP Rules, which permit transfer other than to a country that the Central Government restricts by notification. Where personal data is transferred out of the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision or, where there is none, on Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with any further safeguards that are required. You may ask us for a copy of the safeguards we rely on by writing to Support@obaet.com.
14.1 We keep personal data only for as long as the purpose we collected it for is still being served, or for as long as the law requires. When that purpose comes to an end, or when you withdraw your consent or delete your account, we erase your personal data and take reasonable steps to ensure that any copies held by our service providers are deleted in line with their terms, unless the law requires us to keep it.
Category
Account and twin data
For as long as your account remains open. We erase it when you delete your account or withdraw your consent.
Inactive accounts
We erase your data twelve months (one year) after your last activity on the Platform, having first given you notice. During that period we may process your data to train and improve our models, unless you have asked us to stop, as section 9.4 explains.
Compatibility and matching records
24 months from the date they are generated.
Security and processing logs
At least one year, as the DPDP Rules require.
Records we must keep for legal reasons
For the applicable limitation or statutory period.
14.2 Withdrawing your consent. You may withdraw your consent at any time, either through Delete Account within the Platform or by writing to Support@obaet.com. Withdrawal does not affect any processing we carried out before it. The practical consequences of withdrawing, for example that we can no longer match you, are yours to weigh, and we will tell you what they are before you confirm.
15.1 We take reasonable security safeguards that are appropriate to the risk. These include limiting access according to each person’s role, encrypting data while it is in transit and while it is at rest, masking or tokenising data where that is appropriate, logging and monitoring for unauthorised access, and measures to maintain continuity of service. We also rely on providers who offer appropriate security safeguards for the data they handle for us.
15.2 No system is perfectly secure, and we do not claim otherwise. Please look after your login details, and tell us promptly if you think your account may have been compromised.
16.1 If a personal data breach affects you, we will notify you and the Data Protection Board of India in the form and within the timeframes the law requires, including notifying affected individuals within 72 hours of becoming aware of the breach.
16.2 Our notice to you will describe, in plain language, what the breach involved, the data affected, the likely consequences, the steps you can take to protect yourself, what we are doing in response, and who you can contact for more information.
17.1 The following rights are available to every user of the Platform, whichever kind of account you hold and wherever you are.
• Access: a summary of the personal data we hold about you, the processing we carry out, and the identities of anyone we have shared it with.
• Correction, completion, updating and erasure: to put right data that is inaccurate or incomplete, and to have your data deleted where we are not required to keep it.
• Withdrawal of consent: at any time, and as easily as you gave it, as section 14.2 explains.
• Human review of automated processing: explanation, representation, the chance to contest, and human review, as section 10.3 explains.
• Grievance redressal: to complain to us and receive a reasoned response, as section 18 explains.
• Nomination: to nominate another individual to exercise your rights if you die or become incapacitated.
17.2 Additional rights may apply depending on where you live, and you are welcome to contact us to understand them.
17.3 Your responsibilities. When you exercise these rights, please do not impersonate anyone else, do not withhold material information, provide only authentic information, and do not raise a false or frivolous complaint.
18.1 Please write to Support@obaet.com. We may ask you to verify your identity before we act, and we do not charge for a routine request. We respond within the period the law requires and, in any event, without undue delay.
18.2 Grievance officer.
[Name of the grievance officer]
support@obaet.com
Address
[F-7 city centre , Site No-1 Gwalior, Pincode - 474011]
Response time
We acknowledge within 7 days and respond within the period the law prescribes.
18.3 Raising a concern. Please raise your concern with us first, since the law requires you to use our grievance mechanism before approaching the regulator. If you remain dissatisfied, you may complain to the Data Protection Board of India, which accepts complaints online. If you are outside India, you may also approach your local supervisory authority.
We update this Policy when our practices or the law change. The version number and dates shown at the top always reflect the current text. Where a change materially affects your rights, we will let you know through the Platform or by email before it takes effect, and, where the law requires, we will ask for your consent again.
Privacy
Support@obaet.com
Grievances
Support@obaet.com
Language requests
Support@obaet.com
Post
[F-7 city centre , Site No-1 Gwalior, Pincode - 474011]
If you are in India, the DPDP Act and the DPDP Rules apply to you. You have the right to access information about your personal data and its processing, and about anyone we have shared it with; the right to correction and erasure; the right to grievance redressal; and the right to nominate a person to exercise your rights on your death or incapacity. Please use our grievance mechanism, described in section 18, before approaching the Data Protection Board of India. Appeals from the Board lie to the Telecom Disputes Settlement and Appellate Tribunal.
When you select “Create account”, you confirm that you are at least 18 years old, that you have read and understood this Privacy Policy, and that you consent to the collection, use, sharing, transfer and retention of your personal data as it describes. If you are creating a recruiter account, you further confirm that you are authorised to accept this Policy on behalf of the organisation you represent. You understand that you can delete your account at any time.