Legal

Privacy Policy

How we collect, use, and protect your personal data under India’s DPDP Act, 2023. · Effective 15 July 2026

Our promise

GuildTrek exists to support your career journey. To do that, we process some personal data about you. We treat that data as if it were our own — because trust is at the heart of everything we do.

This notice is provided under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). We will never sell your personal data, never share your profile with employers without your consent, and always give you clear, working controls over what we hold.

Who we are (Data Fiduciary)

GuildTrek is a brand of DigiHire AI Services Pvt Ltd (“we”, “us”), the Data Fiduciary responsible for your personal data. Registered office: Hyderabad, India.

Questions about this notice or your data can go to our Grievance Officer / Data Protection Officer — see “Grievance Officer & DPO” below.

What we collect

When you create a GuildTrek account, we collect the following categories of personal data:

  • Identity — name, email address, phone / WhatsApp number, and profile photo if you upload one (we do not collect your date of birth)
  • Professional — your career history, education, skills, certifications, portfolio links, and any documents you upload (e.g. CV / résumé)
  • Verification — where a role requires it, identity and background-verification data (e.g. government ID numbers), and screening interview recordings, transcripts, and assessment results
  • Activity — pages visited on guildtrek.com, opportunities you express interest in, and aggregate session metrics that help us improve the product
  • Device — IP address, browser type, and OS version, used to detect abuse and prevent account takeover

How we use it, and your consent

We process your data only for the specific purposes you consent to at sign-up. Each purpose is separate — you can turn the optional ones on or off any time in Settings → Privacy & consent:

  • Create & operate your account (required) — store your profile, résumé, and application data so we can run the hiring service for you. This is necessary to provide the service.
  • Share your profile with employers (optional) — let recruiters view your profile when you apply to, or match with, a role.
  • AI analysis of your profile (optional) — generate strengths/gaps (SWOT), genuineness signals, and match scores from your data.
  • Product & opportunity updates (optional) — send you non-essential emails / SMS about jobs, events, and new features.

Who we share it with

We share your data with employers only when you consent — for example, when you apply to a role or accept an introduction. Recruiters cannot bulk-export GuildTrek profiles, and we never sell your data.

To run the service we use trusted processors under data-processing agreements: cloud hosting, email delivery, SMS/WhatsApp delivery, video-meeting and transcription providers, and AI/LLM providers used to analyse résumés. Some of these processors may store or process data outside India; where they do, we take steps to keep your data protected consistent with the DPDP Act.

Your rights

As a Data Principal under the DPDP Act, you have the following rights:

  • Access — obtain a summary of the personal data we process about you and how
  • Correction & completion — update inaccurate or incomplete information
  • Erasure — ask us to delete your account and personal data (subject to legal retention windows)
  • Withdraw consent — turn off any optional purpose at any time, as easily as you gave it
  • Nomination — nominate another person to exercise your rights in the event of death or incapacity
  • Grievance redressal — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved

Withdrawing consent

You can withdraw consent for any optional purpose at any time from Settings → Privacy & consent inside your account — it takes effect going forward and is as easy as giving consent was. Withdrawing consent for a purpose does not affect processing already carried out lawfully.

To erase your account entirely, use “Request account deletion” on the same page. We action erasure requests within 30 days, subject to any legal retention obligations.

Children’s data

GuildTrek is intended only for people aged 18 or older. We do not knowingly create accounts for, or process the personal data of, children (persons under 18). If we learn that we have collected a child’s data without verifiable parental consent, we will delete it.

How long we keep it

We keep your data for as long as your account is active. When you close your account or your erasure request is actioned, we delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. tax, fraud-prevention, or regulatory obligations).

Backups are purged on a rolling 90-day cycle.

Grievance Officer & DPO

For any privacy question, to exercise a right, or to raise a grievance, contact our Grievance Officer / Data Protection Officer at privacy@guildtrek.com. We acknowledge requests within 5 business days and respond within the timelines set by the DPDP Act.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.


This document was last updated on 15 July 2026. Questions? legal@guildtrek.com