Privacy Policy

DeskBuz collects only the minimum personal data required to operate the Platform safely and lawfully. Specifically, we collect your email address strictly for the following purposes:

• Authentication: to create and secure your account, verify your identity at sign-in, and allow password reset.
• Abuse prevention: to prevent spam, automated bot submissions, duplicate reviews, and other forms of misuse of the Platform.

We do not collect your name, employer name, phone number, address, or any other directly identifying personal information for the purpose of public listings. Any profile metadata you choose to submit (such as job role, experience band, or city) is collected solely as aggregate workplace data and is not linked back to you.

Your anonymity on the Platform is a foundational guarantee, not a feature. We have engineered our systems so that personal identifiers and public content live in completely separate, decoupled data stores:

• Your email address is stored only in our private, access-controlled authentication database, protected by encryption in transit and at rest.
• The reviews, salary breakdowns, ratings, and other content you submit are stored independently and contain no link, foreign key, or join path back to your authentication identity in any public-facing query or API response.
• No employee, administrator, or third party can look up a review or salary entry and trace it back to a specific user email through the public Platform.

Every review and salary listing visible on DeskBuz is 100% anonymous to the public, to corporate entities, and to other users.

DeskBuz never sells, rents, leases, trades, or shares your individual professional identity, email address, account record, or any personally identifiable information with:

• Employer corporations, recruiters, HR departments, or background verification agencies;
• Third-party marketing companies, advertising networks, or data brokers;
• Any external entity for the purpose of profiling, retargeting, or commercial solicitation.

We may share strictly anonymised, aggregated statistics (for example, "average software engineer salary in Bangalore") that cannot be used to identify any individual user. We may also disclose information when required by a valid legal order from a court or government authority of competent jurisdiction under Indian law.

All personal data is stored on secure servers with industry standard safeguards including encryption in transit (TLS), encryption at rest, access controls, audit logging, and the principle of least privilege. We retain authentication data only for as long as your account remains active, or as required by applicable law.

Under the DPDP Act, you (as a "Data Principal") have the following rights with respect to your personal data held by DeskBuz (the "Data Fiduciary"):

• Right to Access: You may request a summary of the personal data we hold about you and the purposes for which it is processed.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your account and associated personal data at any time. On verified request, your authentication record will be permanently deleted. Public, anonymised content you previously submitted may remain on the Platform as it cannot be linked back to you.
• Right to Grievance Redressal: You may raise any concern relating to your data through the contact below.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act.

To exercise any of these rights, please email us at privacy@deskbuz.com from the email address associated with your account. We will acknowledge your request promptly and act on it within the timelines prescribed by the DPDP Act.

By creating an account on DeskBuz, you provide free, specific, informed, and unambiguous consent to the processing of your personal data for the purposes described in this Policy. You may withdraw your consent at any time by deleting your account via the process described in Section 5. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Material changes will be notified through the Platform. Your continued use of DeskBuz after such changes constitutes acceptance of the updated Policy.