1. Who we are
Aavtor.ai (the "Platform", available as a website and mobile app) is operated by My Hub Technologies Ltd, a company incorporated under the Companies Act, 2013 (CIN: U62011TS2026PTC213984), with its registered office at Plot 18, KA2 Towers, Jayabheri Enclave, Gachibowli, Hyderabad, Telangana 500032 ("Aavtor", "we", "us", "our").
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, Aavtor is the Data Fiduciary for the personal data described in this Policy.
2. Scope
This Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to all Users of the Platform and should be read with our Terms and Conditions.
This Policy does not cover third-party websites, apps or businesses you reach through the Platform. Once you deal directly with an Employer, Business or Service Partner, their own privacy practices apply.
3. Definitions
"User", "you", "your" means any Seeker, Employer, Business or Service Partner who registers with or accesses the Platform, including as a guest.
"Seeker" means a User looking for a job, service, accommodation or professional.
"Employer", "Business" or "Service Partner" means a User who lists jobs, properties, products or services on the Platform.
"Personal data" has the meaning given in the DPDP Act: any data about an individual who is identifiable by or in relation to such data.
"Processing" means any operation on personal data, including collection, storage, use, sharing and erasure.
"Applicable Law" means the DPDP Act, the Information Technology Act, 2000, and all rules, regulations and binding directions made under them, as amended.
4. Age requirement
The Platform is meant only for persons aged 18 years or above. At registration you confirm that you are at least 18.
We do not knowingly process the personal data of children (persons below 18), and we do not track, behaviourally monitor or target advertising at children. If we learn that we hold a child's data without verifiable parental consent, we will delete it and close the account. A parent or guardian may write to the Grievance Officer (Section 14) to report this.
5. Personal data we collect and why
We collect only what is needed for the purposes below. You can use the Platform as a guest with limited features.
| Category | Examples | Purpose | Basis |
|---|---|---|---|
| Account data | Name, mobile number, email, password (stored hashed), OTP verification records | Create and secure your account; log-in; service messages | Consent |
| Seeker profile | Qualifications, work history, skills, resume, preferences, preferred location | Match you with relevant jobs, services and Service Partners | Consent |
| Listing data | Business name, job openings, property details, service offerings, prices, GST or registration details you provide | Publish listings and match them to Seekers | Consent |
| Search and AI-chat inputs | Text or voice you enter in search or the AI assistant, and the responses generated | Understand your request and route it to suitable Users; show your chat history | Consent |
| Location | City, pin code, and precise device location only if you allow it in device settings | Show nearby services, jobs or accommodation | Consent (you can switch it off) |
| Communications | Messages, contact requests and connection logs made through the Platform | Facilitate contact; resolve disputes; prevent fraud and misuse | Consent; legitimate use for safety |
| Device and usage data | IP address, device ID, OS, app version, crash logs, features used, cookies | Run, secure and improve the Platform; prevent fraud; enforce usage limits | Consent; legitimate use for security |
| Transaction data (if you make a payment) | Plan purchased, amount, payment status, invoice details | Process payments, issue invoices, meet tax law | Consent; legal obligation |
What we do not want from you. Please do not upload Aadhaar numbers, bank or card details, health records, caste, religion or similar sensitive details in your profile, resume or chats unless a feature specifically asks for them. We do not store full card numbers; payments are handled by our RBI-authorised payment gateway partner.
6. Consent and legitimate uses
When you register or use a feature, we show you a notice describing the data and its purpose, and we ask for your consent through a clear affirmative action (for example, ticking a box or tapping "Agree"). The notice is available in English and, on request, in any language listed in the Eighth Schedule to the Constitution of India.
We may process personal data without consent only where the DPDP Act permits it as a "legitimate use", for example: data you voluntarily provide for a specific purpose without objecting; compliance with law or a court order; responding to a medical emergency or threat to life; or ensuring safety during a disaster.
Withdrawing consent. You can withdraw consent at any time, as easily as you gave it, through Settings > Privacy in the app or by writing to [info@aavtar.com]. Withdrawal does not affect processing already done. After withdrawal we will stop processing and erase the related data within a reasonable time, unless law requires us to keep it. Some services may stop working without the data they depend on.
Marketing. We send promotional messages only with your separate opt-in. You may opt out at any time through the unsubscribe link, Settings, or by replying STOP. Service and security messages (OTP, account alerts) are not marketing and will continue while your account is active. Commercial SMS and calls follow TRAI's Telecom Commercial Communications Customer Preference Regulations, 2018.
7. AI processing
Aavtor uses artificial intelligence to understand what you are looking for and to match you with relevant Users and listings.
What is processed: the text or voice input you give the AI assistant or search, your account identifier (or an anonymous device token for guests), and limited profile and location context needed to return relevant results.
Where it is processed: AI inference runs on infrastructure controlled by Aavtor and hosted by our cloud service provider. We do not send your prompts or inputs to external AI providers such as OpenAI, Anthropic or Google.
Training: we do not use your prompts, chats or outputs to train or fine-tune AI models without your separate, explicit consent. If we seek that consent, we will tell you what data is used, and you may refuse or withdraw it without losing access to the Platform. Where possible we will use de-identified data.
Limits of AI output: AI responses and matches are suggestions. They may be incomplete or wrong, so please verify details before acting on them. We do not use AI to make decisions that produce legal effects for you without human review.
Chat history: stored so you can see past conversations. You can delete individual chats or your whole history from Settings.
8. Cookies and similar technologies
Cookies, SDKs and device identifiers can identify your device and are treated as personal data.
| Type | What it does | Your choice |
|---|---|---|
| Essential | Log-in, security, load balancing, fraud prevention | Always on; the Platform will not work without them |
| Functional | Remember language, location and preferences | Can be switched off |
| Analytics | Measure usage and app crashes through analytics and crash-reporting tools | Off until you agree |
| Marketing | Measure campaigns and show relevant offers through advertising partners | Off until you agree |
You can change your choices at any time through the cookie banner, app settings, or your browser and device settings.
9. Who we share personal data with
We do not sell your personal data. We share it only as follows:
Other Users, to make a match. When you connect with or respond to another User, we share what is needed for that connection, such as your name, profile or listing, and the contact details needed to get in touch. Once shared, that User's use of your data is governed by their own practices, so share only what you are comfortable with.
Partner businesses you choose to engage. Where you request a product or service fulfilled by a partner business, we share only the details needed to fulfil that request, and we name the partner before you confirm the request.
Data Processors. Service providers who process data on our instructions under written contracts, including cloud hosting, SMS/OTP, email, payment gateway, analytics and customer support tools. They may not use your data for their own purposes.
Authorities. Law enforcement agencies, courts, tribunals or regulators when required by Applicable Law or a lawful order, including requests under the Information Technology Act, 2000 and the rules made under it. We check that each request is lawful and share only what it requires.
Business transfers. A buyer, successor or merged entity in a merger, acquisition or sale of assets, bound to protect your data as this Policy does. We will notify you before your data becomes subject to a different policy.
Our professional advisers, such as auditors and lawyers, under duties of confidentiality.
10. Storage and cross-border transfer
Your data is stored on servers located in [India]. Some of our processors may store or process data outside India. Any such transfer will follow section 16 of the DPDP Act, and we will not transfer data to any country the Central Government restricts. We require such processors to protect your data to the standard in this Policy.
11. How long we keep data
We keep personal data only as long as needed for the purpose it was collected for, then erase it, unless a law requires us to keep it longer.
| Data | Retention |
|---|---|
| Account, profile and listings | While your account is active. On deletion, erased within 30 days, except as below |
| Chat and AI history | Until you delete it or your account, whichever is earlier |
| Inactive accounts | If you do not log in for [24] months, we will notify you at least 48 hours before erasing your data, so you can log in to keep it |
| Security, access and traffic logs | At least one year, as required by the DPDP Rules, 2025, and any longer period required by CERT-In directions |
| Invoices and transaction records | As required by tax and company law (generally eight years) |
| Data needed for an ongoing dispute, investigation or legal claim | Until it is finally resolved |
12. Security and breach notification
We use reasonable security safeguards, including encryption in transit and at rest, access controls on a need-to-know basis, logging and monitoring of access, regular backups, and contracts requiring our processors to do the same.
No system is completely secure. Please keep your password and OTPs private and tell us immediately at [info@aavtar.com] if you suspect your account has been misused. We are not responsible for loss caused by your own disclosure of credentials, but this does not limit our own legal duty to keep your data secure.
If a personal data breach occurs, we will, as required by the DPDP Act and the DPDP Rules, 2025:
- inform affected Users without delay, describing what happened, the likely consequences, what we are doing, and steps you can take;
- inform the Data Protection Board of India, with a detailed report within 72 hours of becoming aware of the breach (or any longer period the Board allows); and
- report to CERT-In where required, within the time it prescribes.
13. Your rights
Under the DPDP Act you have the right to:
Access: obtain a summary of the personal data we process about you, the processing activities, and the identities of Data Fiduciaries and Data Processors we have shared it with.
Correction and updating: correct inaccurate or misleading data, complete incomplete data, and update your data.
Erasure: ask us to erase data no longer needed, unless law requires us to keep it.
Withdraw consent at any time, as set out in Section 6.
Grievance redressal: raise a complaint with us and receive a response within the time set out in Section 14.
Nominate another individual to exercise your rights in case of your death or incapacity.
How to exercise them: through Settings > Privacy in the app, or by writing to [info@aavtar.com] from your registered email or mobile number. We may verify your identity before acting. We will respond within the timelines in Section 14, and we do not charge for these requests.
Your duties: the DPDP Act also requires you not to impersonate another person, not to suppress material information, not to file false or frivolous complaints, and to provide only verifiably authentic information when you seek correction or erasure.
14. Grievances and Complaints
If you have any questions, concerns, or complaints regarding the Platform, our services, or the processing of your personal data, you may contact us using the details below:
Email: info@aavtar.com
Address: My Hub Technologies Ltd, Plot 18, KA2 Towers, Jayabheri Enclave, Gachibowli, Hyderabad, Telangana 500032
Phone: +91 9991311311
We will review and address complaints in accordance with applicable laws and within the prescribed timelines. Any grievance officer details will be published here once an officer is appointed.
15. Complaints to the Data Protection Board and other disputes
If you are not satisfied with our response, or we do not respond in time, you may complain to the Data Protection Board of India under section 13 of the DPDP Act, after first using our grievance process.
Nothing in this Policy or in our Terms limits your right to approach the Data Protection Board or any other authority under Applicable Law. Contractual disputes not within the Board's jurisdiction are governed by the dispute resolution clause in our Terms and Conditions, subject to the laws of India and the courts at Hyderabad, Telangana.
16. Changes to this Policy
We may update this Policy when our practices or the law change. The "Last updated" date above shows the latest version, and earlier versions are available on request.
For material changes, especially a new purpose of processing or a new category of recipient, we will notify you through the app, email or SMS before the change takes effect and, where the law requires, ask for your fresh consent. Continued use alone will not be treated as consent to a new purpose.
17. Platform disclaimer
Aavtor is an intermediary that connects Seekers with Employers, Businesses and Service Partners. We are not responsible for the accuracy of information other Users provide, or for any agreement or transaction between Users. Please use caution, never pay advance fees for jobs, and report suspicious listings to the Grievance Officer.
18. Contact us
My Hub Technologies Ltd
Plot 18, KA2 Towers, Jayabheri Enclave, Gachibowli, Hyderabad, Telangana 500032
Privacy and data rights: [info@aavtar.com]
General support: [info@aavtar.com]
Phone: +91 9991311311