Privacy Policy
Last Updated: October 19, 2026 • Compliance Standard: Digital Personal Data Protection (DPDP) Act
1. Commitment to Candidate & Expert Anonymity
At InsideWork, we believe authentic workplace conversations are only possible when participants feel entirely safe from retaliation, unsolicited recruiting pitches, and professional exposure. We treat privacy not as an afterthought, but as the foundational architecture of our platform.
This Privacy Policy explains how InsideWork collects, uses, encrypts, and protects your information when you access insidework.in (including www.insidework.in) and our associated consultation services.
2. Information We Collect
We collect only the minimum information necessary to authenticate identity, verify employment currency, and execute consultations:
- Account email address (for login and receipts)
- Pseudonymous display name (user-controlled)
- Consultation topics and scheduled time preferences
- Payment transaction reference IDs (we do NOT store raw card details)
- Official corporate work email address (for OTP verification only)
- Public professional title and office location (e.g., “Senior Frontend Engineer, Bangalore”)
- Consultation availability schedule and fee settings
- Bank account or UPI details (processed securely for payouts)
3. The Corporate Email & Privacy Shield
Your corporate work email address (e.g. employee@company.com) is used solely for domain ownership confirmation via a time-limited 6-digit challenge code. We will NEVER:
- Display your work email address publicly on the marketplace.
- Reveal your work email or personal identity to the job seeker you consult with.
- Notify your employer, HR department, or management that you are participating on InsideWork.
- Sell, lease, or monetize your contact information to third-party recruiters or advertisers.
4. Technical Security & Database Isolation
InsideWork implements rigorous, defense-in-depth security controls:
- PostgreSQL Row Level Security (RLS): Consultation rooms and private messages are isolated at the database engine level. Only the two verified participants of a specific booking can query their chat transcript.
- In-Transit Encryption: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / SSL).
- Rate-Limiting Cooldowns: Sensitive endpoints (such as OTP dispatches and password recovery requests) are protected by cryptographic rate limiters to prevent brute-force attacks.
5. Sub-Processors & Third-Party Service Providers
InsideWork partners with industry-leading infrastructure providers who maintain SOC 2 and ISO 27001 certifications:
PCI-DSS Level 1 compliant gateway processing escrow payments and verified Indian banking payouts.
Encrypted cloud database infrastructure with strict Row Level Security policies.
Delivers one-time verification challenge codes and password reset links with SPF/DKIM verification.
6. Data Retention & Your Rights
You maintain full ownership of your personal data. Under applicable privacy regulations, you have the right to:
- Request an export copy of all personal data held in your account.
- Request the permanent erasure of your account and profile records from our live database.
- Revoke your corporate employment verification badge at any time from your settings tab.
To request account deletion or data portability, contact our Data Protection Officer at privacy@insidework.in.
7. Privacy Inquiries & Grievance Officer
For questions, complaints, or feedback concerning our data practices, reach our designated privacy desk:
Grievance / Privacy Desk: InsideWork Data Privacy Team
Email: privacy@insidework.in
General Support: support@insidework.in
Address: Bangalore, Karnataka, India