Who we are
Kaam is run by Kaam Job Career Pvt. Ltd., Techniplex Complex 2, VAV 515, off Veer Savarkar Flyover, Liliya Nagar, Malad West, Mumbai 400064, India. Under the Digital Personal Data Protection Act, 2023 (the DPDP Act) we are the data fiduciary for the personal data described here, and you are the data principal.
In this policy, "Kaam", "we" and "us" mean that company. "You" means the person the data is about, whether or not you have an account.
What this covers
This policy covers everything we run for people looking for work and building a career: kaam.com and your Kaam ID page at kaam.com/yourname, the Kaam app at kaam.com/mobile, Kai (our assistant, on the web and on WhatsApp), Kaam Bolo (the spoken CV), Resume Studio, Job Scout, Kaam Verified, the Headshot Studio, assessments and mock interviews, Learning, and the blog.
Kaam Hire at hire.kaam.com is our hiring product for restaurants, hotels and other businesses. Businesses using it are covered by its own terms. Where a business reaches you through Kaam Hire, this policy still governs what we do with your data.
This policy does not cover other companies' websites that we link to, including the job sites you go to when you apply. We tell you when you are leaving Kaam.
What we collect
Only what the feature you are using needs. Here it is, feature by feature.
Collected automatically
When you use Kaam we log the IP address, browser and device type, the pages you open and the features you use, and how you arrived. We turn IP addresses into an approximate city for local job results and for the visitor stats described in section 07. We use these logs to keep the service working, to stop abuse and to understand what is used.
From others, with your say-so
- LinkedIn import. If you ask us to import your profile, we fetch your public professional details through ContactOut and show them to you before anything is saved.
- DigiLocker. If you connect it, we receive only the documents you pick.
- Google sign-in. If you use it, we receive your name, email and profile photo from Google.
- Programmes you join. If you join Kaam through a partner programme such as Kaabil, the partner tells us you are part of it.
How we use it
We use your data for the purposes you gave it to us for, and for nothing that would surprise you:
- To run your Kaam ID: your page, your card and QR, your CV designs, the CV we shape for a particular job.
- To help you find work: matching you with roles, scouting job sites for you, sending alerts you asked for, telling you plainly when a link leaves Kaam.
- To let Kai guide you: Kai reads your profile, CV and past conversations so it does not ask twice, and remembers what you tell it so it can follow up.
- To verify you: reading the documents you give us, checking them, and showing the Verified tick you earn.
- To show you who is interested: the Profile Stats page shows you who has looked at your page (section 07).
- To keep Kaam safe and working: security, fraud prevention, debugging, and understanding usage in aggregate.
- To contact you about your account, and, if you have opted in, about jobs and Kaam news. You choose these in Settings.
- To meet our legal obligations.
Our legal basis is your consent, given when you create an account and when you switch on each optional feature, and the legitimate uses the DPDP Act allows, such as complying with law and responding to a request you make yourself. You can withdraw consent at any time by turning a feature off, deleting the data it holds, or deleting your account. Withdrawing consent does not undo what was lawfully done before.
AI and the companies that help us
Kaam is built on AI, and we are open about where it runs. Your data is sent to the providers below only to do the job named, under contracts that stop them using it for anything else. None of them may sell it or show you advertising.
We also build a mathematical summary of your profile (an "embedding") so we can match you with jobs. It stays on our servers and is deleted with your account. AI output is a draft for you to check, not professional advice; you decide what goes on your page and your CV.
Your public page and your stats
Your Kaam ID page at kaam.com/yourname is public by default, because that is what makes it useful as a passport for work. It shows what you have chosen to put on it, including your work photos and your spoken-English sample if you recorded one. Your email and phone are hidden by default. In Settings you can make the whole page private, show or hide your email and phone, and tell search engines not to index it.
Profile Stats shows you who looked at your page. For a visitor who is not signed in, we show the approximate city, device type, how they arrived and when, never the IP address. For a visitor who is signed in to Kaam, we show their name and a link to their page. This means that when you are signed in and open another member's page, they can see that you visited. Sign out first if you would rather not be seen.
A CV we shape for a job is served from a link only you and the people you send it to have. Anyone with that link can open it, so share it as you would a document.
Where it is kept
Kaam's servers and database are in Mumbai, India. Some of the companies in section 05 process data outside India to do their work, for example the AI providers and WhatsApp. We share with them only what the task needs, under contract, and we do not transfer personal data to any country the Government of India has restricted.
How long we keep it
- While your account is open, we keep what you have put on Kaam so your passport keeps working. You can delete any single item, such as a voice note, a photo, a document or a CV, at any time.
- When you delete your account, we delete your profile, CVs, uploaded files, voice recordings, photos, documents, conversations with Kai, assessments, saved jobs and settings from our systems at once, and from backups within 30 days. Visitor records of your page are deleted with it.
- We keep a record that the account was deleted, with the email address and the reason you gave, so we can honour the deletion and answer any later dispute.
- Where the law requires it, for example payment records for businesses, we keep that data for the period the law sets.
- Visitor logs for pages you view (see section 07) are kept with the page owner's stats until they delete their account or we purge old logs.
If you do nothing on Kaam for a long time we may write to you before we treat the account as dormant. We will not delete an account without telling you first.
Your rights
Under the DPDP Act you have the right to:
- Know what personal data we hold about you, what we do with it and who we have shared it with. Most of it is on your own pages. For a full summary, write to us.
- Correct anything that is wrong or incomplete. Edit it yourself in your profile or Settings, or ask us.
- Erase your data. Delete individual items from your profile, or delete your whole account from Settings. It takes effect immediately.
- Withdraw consent for any optional feature by turning it off or removing what it holds. It is as easy to withdraw as it was to give.
- Nominate someone to exercise these rights for you if you die or cannot act. Write to us to record a nominee.
- Have a grievance heard. Write to the Grievance Officer in section 15. If you are not satisfied with our answer, you may approach the Data Protection Board of India.
We answer requests within 30 days. We will ask you to confirm you are the account holder before we act on a request, to protect your data from someone pretending to be you. You may also ask for a copy of the data you have given us in a common file format; we provide this on request.
Under 18
Kaam is for people who are 18 or older. We do not knowingly collect personal data from anyone younger, and we do not track children or show them advertising. If you are under 18 and want a Kaam ID for your first job, a parent or guardian must create it with you and give their consent, as the DPDP Act requires. If we learn that we hold data on a child without that consent, we delete it. Tell us at privacy@kaam.com.
Security
Kaam Job Career Pvt Ltd holds ISO/IEC 27001:2022 certification (Certificate No. 26MEQXM37, issued by Magnitude Management Services Pvt Ltd, EGAC accredited, valid to 18 September 2029) for the design, development, deployment, hosting and operation of its SaaS products, digital platforms, web and mobile applications and customised software solutions, including cloud infrastructure, DevOps, data processing and technology operations. What that covers is on our Security page.
- All traffic to Kaam is encrypted in transit (HTTPS).
- Passwords are stored only as salted hashes. Sign-in with a one-time code is available.
- Uploaded files are stored outside the reach of scripts, and identity documents and generated CVs are served only through a checked download, never a public folder.
- Access to production systems is limited to the people who run them, and every write to the database goes through prepared statements.
- We keep backups so we can recover from failure, and we purge deleted data from them within 30 days.
No system is perfect. If a breach affects your personal data, we will tell you and the Data Protection Board of India in the form and time the law requires.
Changes to this policy
When we change what we collect or how we use it, we update this page and the date at the top. For changes that matter to you, such as a new category of data or a new kind of sharing, we will tell you by email or inside Kaam before they take effect, and where the law requires it we will ask for your consent again.
Grievances and contact
Techniplex Complex 2, VAV 515, off Veer Savarkar Flyover, Liliya Nagar, Malad West, Mumbai 400064
privacy@kaam.com
We acknowledge grievances within 72 hours and resolve them within 30 days. If we cannot, we will tell you why and when.