Privacy Policy

Last updated 7 August 2026

Wath is a job portal operating in India, available at wath.in and as the Wath Android app. This policy explains what we collect, why, and what you can do about it. It covers both the website and the app, which share one account and one database.

What we collect

If you are looking for a job:

• Your name, mobile number and email address, used to create and verify your account.
• Anything you put in your CV — work history, education, skills, salary expectations and any photo or document you upload.
• Which jobs you view, save, apply to, like or comment on.
• Skill test attempts and their results. While a timed test is in progress the app also records whether you left the test screen and how long each question took, so that a verified badge means something to employers.
• Walk-in drive registrations.

If you are hiring:

• Your company details, contact information and the documents you submit for verification.
• Your job posts, walk-in drives and any images or attachments on them.
• Your activity on applicants — stages, ratings, notes, interview times and messages you send to candidates.

Everyone:

• Your IP address and browser or device type, kept in security logs to detect abuse and to rate-limit sign-in and one-time-password requests.
• If you allow notifications in the app, a device token issued by Google Firebase Cloud Messaging, used only to deliver notifications to your device.
• Whether you opened or clicked a link in emails we send you, so we can stop emailing people who do not want to hear from us.

The Android app requests only three permissions: internet access, network state, and notifications. It does not access your location, contacts, camera roll, microphone or call logs. When you attach a file, Android's own picker hands us that one file — the app cannot browse your storage.

What we do with it

• Run the service: show you relevant jobs, let you apply, let employers review applications, and issue verified skill badges.
• Verify identity, by one-time password over WhatsApp, SMS or email.
• Keep the platform safe — detecting fraudulent job posts and abusive behaviour.
• Send you service messages about your applications, interviews and account.

We do not sell your personal data, and we do not share it with advertisers.

Who else sees it

• Employers see your CV and profile when you apply to their job, or when they invite you to apply. An employer who has not interacted with you does not see your contact details.
• Razorpay processes payments. Card and UPI details are entered in Razorpay's own checkout and never reach our servers — we store only whether a payment succeeded and its reference number.
• Amazon Web Services hosts the platform and delivers our email.
• Google Firebase delivers push notifications.
• Meta (WhatsApp Business) delivers one-time passwords sent over WhatsApp.
• Where the law requires it, or to establish or defend a legal claim.

Certain things are public by design: a job post, a company profile, and a CV you have chosen to share by link are visible to anyone with the address, and may be indexed by search engines.

Artificial intelligence

Some optional features use a third-party large language model — CV writing suggestions, job matching, applicant ranking and job-post advice. Where these are switched on, the relevant text (for example, your CV summary or a job description) is sent to that provider to generate the result. It is not used to train their models. Every AI feature can be switched off by the platform administrator, and the product works without them.

How long we keep it

We keep your account data for as long as your account exists. Security and audit logs are kept for a limited period for fraud investigation. If you delete your account, we remove your profile and CV; records an employer needs to keep for their own hiring compliance, and records we are legally required to retain, may survive in a reduced form.

How it is protected

Passwords are stored hashed, never in readable form. Session tokens are short-lived and rotate. Traffic runs over HTTPS. Integration credentials are encrypted at rest. No system is perfectly secure, but we treat account data as something worth defending.

Your choices

• View and correct your profile and CV at any time from your account.
• Turn off notifications in your device settings, or unsubscribe from our emails using the link at the bottom of any of them.
• Ask us to delete your account and personal data.
• Ask us for a copy of what we hold about you.

Children

Wath is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes materially we will update the date above and, where the change affects you meaningfully, tell you in the app or by email.

Contact

Questions, corrections or deletion requests: privacy@wath.in