Privacy Policy

This Privacy Policy explains what personal data the Y-Axis Talent Cloud (“YTC” or the “Platform”) collects, why, what we do with it, who can see it, how long we keep it, and the choices and rights you have. It applies to candidates, to people who use YTC on behalf of employers, and to visitors. It is a notice, not a contract; your contract with us is the YTC Terms of Use. Where we ask for your consent, we ask separately, you can say no, and you can change your mind later.

2.1 YTC is operated by Y-Axis Solutions Private Limited, a company incorporated in India (CIN: U64203TG1999PTC030865), registered office 102, GS Chambers, Nagarjuna Circle, Banjara Hills/Punjagutta, Hyderabad, Telangana – 500082, India (“Y-Axis”, “we”, “us”).

2.2 The same company provides Y-Axis immigration consultancy, Job Search Services (JSS), document and verification services. We are the data fiduciary (India) and controller (under the GDPR and similar laws) for the personal data described in this Policy. Our engineering team, Y-Tech, is part of the company.

2.3 Where other Y-Axis group companies (for example Y-Axis Middle East DMCC in the UAE, and group companies in the United Kingdom and Australia) handle sales or support for YTC, they do so only on our instructions, as our processors (Section 15). They are not separately responsible for your data.

3.1 This Policy covers the YTC website (ytc.y-axis.com), mobile apps, employer portal, the “Ask Advisor” assistant, our WhatsApp channel, and the emails and messages we send about YTC.

3.2 It does not cover other Y-Axis services (immigration consulting, coaching, study abroad), which have their own notices, except where this Policy says we share data between YTC and those services. It does not cover what an employer does with information after you allow them to receive it; Section 23 explains that boundary.

Joining YTC does not buy any Y-Axis service and does not make you a sales prospect. You may be one, two or all three of the following, and we treat your data differently in each case:

• YTC member. You registered on YTC. We use your data to run the Platform for you. We do not pass your profile to our consultancy or sales teams, or send you promotional messages, unless you ask us to or switch those options on.
• Y-Axis prospect. You asked for a consultation, evaluation or call back, asked for a person to follow up, or switched on the optional consultant-contact preference. Your request and the profile information needed to answer it enter our customer relationship system (Salesforce) and are assigned to a consultant (Section 8).
• Y-Axis customer. You bought a service (Premium, verification, JSS, consultancy, documents). That service is governed by its own terms and Order Form, and we hold Service Records for it (Section 6).

You can see which of these apply to you, and change the optional choices, in Settings → My services.

Information we do not want. We do not ask for, and you should not include, information about your health, disability, religion, caste, political opinions, sexual orientation, trade-union membership or biometrics. If your résumé contains such information, we hold it only as part of the file you uploaded; we do not extract or use it, and you can remove it at any time.

Sensitive personal data (India). Passwords, financial information (such as bank statements supplied for a service) and identity documents are treated as sensitive personal data under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We collect them only for the stated purpose, with your consent, and protect them as described in Section 20.

6.1 If you buy a Y-Axis service, we may ask for documents needed to deliver it, for example passport copies, education certificates and transcripts, experience and reference letters, test reports, immigration forms, offer letters and, for some applications, financial documents. These are Service Records.

6.2 Service Records are held in our customer-relationship and document systems (Salesforce and MongoDB), hosted in United States. They are accessible only to your assigned consultant, the verification team and case-quality staff, and are sent outside Y-Axis only where the service requires it and you have instructed us (for example, to an immigration authority, an assessment body or an employer you have asked us to approach).

6.3 Service Records are never shown on your YTC profile, never visible to employers through YTC, and cannot be downloaded by anyone through YTC. Verification produces a status (for example “Employment verified”); the document stays in your Service Record. If you buy a second service, we ask before reusing documents you gave us for the first.

7.1 Sources. Directly from you when you register, build your profile, upload documents, buy services or message us; automatically from your device when you use YTC; from verification sources you direct us to (institutions, employers, test providers); from employers when they interact with your profile (views, messages); and from other Y-Axis services if you are already a Y-Axis client and ask us to pre-fill your profile.

7.2 Accounts migrated from the previous Y-Axis Talent Cloud jobsite. If you had an account on the previous version of the Y-Axis Talent Cloud, also operated by Y-Axis Solutions Private Limited, we have moved your account, profile and résumé to the new Platform after giving you notice. The company responsible for your data has not changed. Your profile is Private until you choose otherwise, and you will not receive marketing unless our records show you positively opted in on the previous site (you can switch it off in one tap). Withdrawals, unsubscribes and deletion requests made on the previous site have been carried over. Accounts inactive for more than 24 months were not migrated. On first login we ask you to accept the YTC Terms of Use; until you do, you can only view, export or delete your data.

7.3 Information we generate or infer. YTC turns what you give us into a structured profile and creates information you did not type:

• Standardised data: job titles mapped to the ISCO-08 occupation classification and national equivalents (ANZSCO, NOC/TEER, SOC, KldB); skills tagged to a skills taxonomy; dates normalised.
• Parsed data: text extracted from your resume into profile fields (Section 9).
• Scores and classifications: the Global Indian Score (GIS), its Employability, Mobility and Quality pillars, your GIS tier, Odds Meter indicators, and pool or talent-type classifications (Section 10).
• Recommendations: suggested skills, certifications, services or actions.
• Activity signals: profile completeness, responsiveness, last-active date.

Generated and inferred information is shown to you, is corrected automatically when you correct its inputs, and is deleted when your profile is deleted.

When your data enters Salesforce. Your YTC profile does not go to our customer relationship system (Salesforce) when you register. It goes there, as an enquiry assigned to a consultant, only when you: (a) ask for a consultation, evaluation or call back; (b) buy or start a service; (c) ask, through Ask Advisor or support, for a person to follow up; or (d) switch on “Let a Y-Axis consultant contact me about my options”. We then transfer only what the request needs — normally your name, contact details, occupation, experience, target countries, work-authorisation status and, for an evaluation, your profile summary and provisional scores — and we tell you on the request screen that this is happening.

What the consultant may do. Answer your request, deliver the service you bought, and keep the notes and records needed to do so. Consultants may not send you promotional offers unless your marketing preference is on. Within Salesforce we may organise enquiries (for example, by target country or service requested); we do not use YTC scores to decide whether to serve you.

Marketing. Promotional messages about Y-Axis services, by email, SMS, WhatsApp or call, are sent only if your marketing preference is on. You can use YTC purely as a jobsite and never receive them. We do not sell your personal data and we do not give your profile to advertisers.

9.1 India. We process your information under the Information Technology Act, 2000 and the Sensitive Personal Data Rules, 2011, with your consent obtained at registration and, for specific activities, when you switch them on. The substantive provisions of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 are scheduled to apply from 14 May 2027. This Policy and our consent choices are designed to meet sections 5 and 6 of that Act, and we will also rely on the “legitimate uses” in section 7 where they apply (for example, information you voluntarily provide for a specified purpose, and processing required by law).

9.2 EU / UK. Where the GDPR or UK GDPR applies: performance of our contract with you (account, profile, scores, paid services); your consent (discoverability, contact-detail sharing, résumé download, WhatsApp, marketing, consultant contact, non-essential cookies); our legitimate interests (security, fraud prevention, product improvement using minimised data, defending claims), balanced against your interests; and legal obligations (tax, accounting, responding to authorities).

9.3 Other jurisdictions. See Section 27.

Automated outputs can be wrong or incomplete. A person can review anything that affects your standing on YTC, and we do not use solely automated processing to make decisions that have legal or similarly significant effects on you.

11.1 What the GIS is. The Global Indian Score is a number from 0 to 100 computed from your profile as Employability × 0.50 + Mobility × 0.30 + Quality × 0.20. Each pillar uses specific profile fields (experience, occupation demand, verification level, language scores, work-authorisation status, education and outputs). Tiers are set at fixed thresholds (80 / 60 / 40). The GIS is first computed as a provisional score at onboarding and becomes firmer as you verify information. The same inputs always produce the same score. We publish the weights and fields on the “How the GIS is built” page and your dashboard shows your pillar breakdown.

11.2 What Odds Meter is. An indicator of how likely a candidate with your occupation, experience and work-authorisation status is to obtain employer-sponsored work in a destination, based on published visa criteria and shortage lists. It is an estimate about a category, not a prediction about you, and it is shown only to you, never to employers.

11.3 What they are not. GIS, Odds Meter, tiers and pool labels are informational. They are not a guarantee of employment, an immigration or visa determination, professional advice or an employer decision.

11.4 How they affect visibility. If you are discoverable, employers can sort and filter by GIS and tier, so your score affects where you appear. Curated pools such as “Best & Brightest” require a minimum GIS and a review by a Y-Axis manager; no one is added to or excluded from a curated pool by the score alone. Your score never makes your profile invisible within the scope you have chosen.

11.5 Your rights over scores. You can see how your score was computed, correct any input (the score re-computes automatically), ask us to check the computation, and ask for a human review of any YTC outcome that depends on your score. We respond within 15 days.

12.1 Your profile is Private when you register. Discoverability is a feature of Premium Membership: buying Premium makes the visibility control available to you but does not switch anything on. Your profile stays Private until you choose a scope, and you can return to Private at any time without losing Premium. A free member never has to pay to remain private.

12.2 “Authorised Employer” means an employer account that has reached at least the Verified Business level of our Employer Trust Ladder and has accepted the YTC Employer Data Use Terms.

12.3 Within your chosen scope, we may proactively present your profile to Authorised Employers looking for your occupation, including in curated pools. You may opt out of curated pools in Settings without turning off discoverability.

12.4 What employers see: your profile fields, standardised occupation, verification statuses (not the underlying documents), GIS number, pillar breakdown and tier, work-authorisation status, and your contact details only if you share them. Employers never see: identity documents or verification evidence, Service Records, payment or purchase history, your messages with other employers, your Ask Advisor conversations, or your Odds Meter. Before you become discoverable we show you a preview of exactly what an employer will see.

12.5 Changing to Private takes effect on YTC immediately. It does not recall information an employer already holds (Section 23), but we will tell those employers that you have withdrawn.

13.1 Employers access YTC under the Employer Terms of Use and Employer Data Use Terms, which restrict them to legitimate recruitment for identified roles and prohibit resale, scraping, bulk harvesting, building databases, unsolicited marketing, discriminatory use, sharing outside their recruitment chain, excessive retention, re-identification and using your data to train AI systems.

13.2 YTC offers employers no filters on nationality, gender, age, religion, caste or other protected characteristics; this is enforced in the product, not only in the contract. We log every employer view of your profile and every message, and you can see this on your dashboard.

13.3 Downloads. At launch, employers cannot download your résumé; they can only view it on YTC. If we enable downloads in future, we will ask for your specific consent, it will be off for your profile unless you switch it on, and every download will be logged and shown to you.

13.4 Global sharing. If you choose “Employers worldwide”, employers outside India will see your profile and may process it in their country under that country’s law. If you choose “Employers in India”, we do not show your profile to employer accounts registered elsewhere.

13.5 Premium, Curated, Verified. Premium is a purchased entitlement that makes the discoverability control and listed features available; it does not change your score or mean any employer will contact you. Curated means a Y-Axis consultant prepared your profile under a service you bought; you approve it before publication. Verified means a specific fact was checked by the stated method on a stated date with a stated validity period; it is never granted for payment alone and does not guarantee employment or a visa.

14.1 Your data is stored in our platform database (MongoDB) and customer relationship system (Salesforce), hosted in United States. Some of our processors operate outside India, including in the UAE, the United Kingdom and Australia.

14.2 We transfer personal data outside India only to countries not restricted by the Government of India under the DPDP Act, and under contracts that require the recipient to protect it to a standard at least as high as this Policy.

14.3 For personal data of EU or UK residents, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, supported by transfer risk assessments. You may request a copy of the relevant clauses from our privacy contact.

15.1 We use service providers for: cloud hosting and storage; customer relationship management and service delivery (Salesforce); databases and document storage (MongoDB); email and marketing delivery (Salesforce Marketing Cloud and Microsoft 365); SMS and WhatsApp messaging (Infobip); payment processing (CCAvenue, Mosambee, Paytm for Business); analytics (Google Analytics 4 and Microsoft Clarity); AI language-model services (Amazon Bedrock); identity and credential verification; and security.

15.2 Y-Axis group companies act as our processors for local sales and support: Y-Axis Middle East DMCC (UAE).

15.3 Each processor acts only on our written instructions, is bound by contract to protect your data, and may not use it for its own purposes. Our AI providers are contractually prohibited from training their models on data we send them. The current list of processors and their countries is published and we update it when we add a processor.

We use cookies and similar technologies as described in our Cookies Policy, which is the authoritative statement of what we use and why. In short: essential cookies run the service and do not need your consent; functional, analytics, advertising/measurement and third-party embed technologies stay off until you accept them in the cookie banner; and you can change your choice at any time from “Cookie settings” in the footer. We honour Global Privacy Control (GPC) signals.

17.1 Service messages (security alerts, one-time passwords, application status, receipts, and changes to this Policy or the Terms) are part of providing YTC and are sent by email and, if you opt in, by WhatsApp or SMS. Service emails do not contain tracking pixels.

17.2 Marketing (new services, offers, events and other Y-Axis services) is sent only if you have opted in, and every marketing message includes a way to unsubscribe. We apply unsubscribe requests within 24 hours.

17.3 WhatsApp is optional. We send WhatsApp messages only if you tick the WhatsApp option, and you can stop them at any time in Settings or by replying STOP. WhatsApp messages are delivered through Infobip and are also subject to WhatsApp’s own privacy terms. A WhatsApp opt-in is not a marketing consent.

17.4 For SMS and calls in India we comply with the Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI).

We do not use your identifiable résumé, profile, messages or documents to train machine-learning or language models, ours or anyone else’s, without your separate and specific consent, which we do not ask for at registration. We may use aggregated or anonymised data (for example, the distribution of skills across occupations, or how often a recommendation is followed) to improve our scoring rules, recommendations and product. Anonymised data cannot be linked back to you.

When you delete your account we delete R1, R2, R3 and R5 within 30 days, retain R6 and R8 as required by law, and anonymise R4. We do not keep your identifiable data or scores for model training after deletion.

We protect personal data with role-based access controls, encryption in transit and at rest, network and application monitoring, logging of access to candidate data, vendor security due diligence, staff confidentiality obligations and an incident-response process. No system is completely secure; we apply reasonable and proportionate safeguards, keep improving them and act quickly if something goes wrong. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires, including the Indian Computer Emergency Response Team (CERT-In), the Data Protection Board of India once the DPDP Rules apply, and, where the GDPR applies, the supervisory authority within 72 hours. You are responsible for keeping your password confidential and telling us immediately about unauthorised access.

21.1 Depending on where you live, you may have the right to: access your personal data and obtain a copy; correct inaccurate or incomplete data (including scoring inputs); delete your data; withdraw consent at any time for anything based on consent, without affecting what happened before; object to or restrict certain processing; port the data you gave us in a machine-readable form; obtain human review of decisions based solely on automated processing that significantly affect you; nominate another person to exercise your rights if you die or become incapacitated (India, once the DPDP Act applies); and complain to us and to a regulator.

21.2 To exercise a right, use Settings (most actions can be done there directly), email privacy mailbox: trustandsafety@y-axis.com, or write to our Grievance Officer (Section 26). We will verify your identity, respond within 15 days for most requests (30 days where the law allows and the request is complex), and tell you if we cannot comply and why.

If you have an open paid engagement, we tell you what each action means for it before you confirm.

Once an employer holds your information in a form they keep outside YTC (for example, a résumé you sent them, or a download if that feature is ever enabled), the employer is responsible for that copy under the law that applies to them, as an independent data fiduciary or controller. Y-Axis remains responsible for having disclosed it lawfully, for the contract restricting how they may use it, for logging the disclosure and for telling you who received it. To exercise rights over an employer’s copy, contact the employer; we will give you their contact details. If you withdraw discoverability, we notify employers who downloaded your résumé in the previous 12 months.

YTC checks employer accounts to the level shown on their trust badge, but no check makes fraud impossible. Never pay anyone for a job, visa or interview. Y-Axis never asks candidates for placement fees and no genuine employer on YTC may do so. Report suspicious employers, messages or offers using “Report” on the profile or message, or to trustandsafety@y-axis.com; we acknowledge within 24 hours, act within 2 business days and tell you the outcome.

YTC is for adults. You must be 18 or over to register, and we check date of birth at registration. We do not knowingly collect personal data from anyone under 18; if we learn we have, we delete it.

If you are in the EU or UK, you may also contact our EU/UK representative and you have the right to complain to your data protection authority. Once the complaint jurisdiction of the Data Protection Board of India applies to data fiduciaries, you may complain to the Board after first raising the matter with us.

European Economic Area and United Kingdom. You have the rights in Section 21 under Articles 15–22 of the GDPR / UK GDPR. Our lawful bases are in Section 9.2 and international transfers in Section 14. You may complain to your local supervisory authority or, in the UK, the Information Commissioner’s Office.

United Arab Emirates. If Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies to you, you have rights of access, correction, erasure, restriction, portability and objection (including to direct marketing), and to withdraw consent, exercisable as in Section 21. Your data is transferred to India under contractual protections. Y-Axis Middle East DMCC acts only on our instructions. No Y-Axis entity in the DIFC or ADGM handles YTC data.

Saudi Arabia. If the Personal Data Protection Law applies to you, you have rights to be informed, of access, to obtain a copy, of correction and of destruction, and to object to direct marketing. We transfer your data to India only for the purposes in this Policy and limited to what those purposes need, under contractual protections, and we will notify the Saudi Data and AI Authority (SDAIA) and you of a breach affecting you as the law requires.

Other GCC states (Qatar, Bahrain, Oman, Kuwait). You have rights of access, correction, deletion and objection to marketing under your national law, exercisable as in Section 21.

Singapore. You may withdraw consent and access and correct your data under the Personal Data Protection Act 2012. We do not send marketing to Singapore numbers registered on the Do Not Call Registry.

Canada. You may access and correct your data and withdraw consent. If you are in Quebec, some profile outputs are produced by automated processing (Section 10); you may ask for the information used and submit observations.

Australia. You may access and correct your data and complain to the Office of the Australian Information Commissioner. Section 10 describes our automated processing.

United States. If a state privacy law applies to you, you may have rights to know, access, delete and correct your data, to opt out of targeted advertising and of any “sale” or “sharing”, and not to be discriminated against for exercising them. We do not sell personal data for money. If you accept marketing cookies, advertising partners may receive device identifiers and browsing activity, which some state laws treat as “sharing” for targeted advertising; you can opt out by selecting “Reject non-essential” in Cookie settings or by enabling Global Privacy Control.

We will update this Policy as YTC develops. For clarifications, we publish the new version, record the change in the changelog and tell you in-app. For any new purpose or new category of recipient that depends on your consent (for example, enabling résumé downloads or any use of identifiable data for AI training), we will ask for your specific consent before we begin; existing consents will not be treated as covering it. Each version carries a version number and effective date; earlier versions are available on request.