Skip to content

Legal // DPDP Act 2023

Privacy Policy

Who we are

mereProjects is a talent-showcase and recruitment portal for Indian CSE and EE students and graduates. This policy explains how we process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

What we collect, and why

  • Account data (email, role) — to create and secure your account.
  • Profile data (name, photo, education, skills, projects, social handles, availability) — the stated purpose: profile creation and sharing with recruiters for hiring.
  • Sensitive fields (date of birth, phone, address, CTC, verification documents) — private by default, never shown publicly, and shared with recruiters only through the consented contact-reveal flow.

Consent

We capture explicit, granular consent at signup (with version, timestamp, and IP recorded) and before any new purpose. Withdrawing consent is as easy as giving it: withdraw in Privacy settings and your profile is delisted from recruiter search immediately.

Your rights as a Data Principal

  • Access — download all your data as machine-readable JSON from Privacy settings.
  • Correction — every field of your profile is editable by you.
  • Erasure— "Delete my account" soft-deletes immediately and permanently purges personal data after a 30-day grace period.
  • Grievance redressal — see below.

Minors

mereProjects is intended for students aged 18 and over, and we ask you not to register before then. Publishing a profile requires a date of birth, and if it shows you are under 18 the profile stays private: it is never published, never appears in recruiter search, and your contact details are never revealed. The date is self-declared — we do not verify it — and we do not currently offer a guardian-consent route to lift the block.

Retention & residency

Your account and profile database is hosted in India (Mumbai). Uploaded files — profile photos and project media — are held on Cloudflare R2 with an Asia-Pacific location preference. That is a preference rather than a guarantee, so those files may rest outside India. Transactional email is sent through Resend, which processes it outside India.

Contact reveals and profile views are logged and visible to you in your activity ledger. Delete your account and everything is erased after a 30-day grace period.

Resume import

If you use the resume importer, the PDF you upload is sent to OpenRouter and on to the AI model provider it routes to, both outside India, purely to read the document. It is deleted from our storage as soon as it has been read, whether that succeeded or failed, and we never publish it. The details we extract stay private to you until you choose to save them to your profile, and are erased if you never do.

The importer is optional. Every field it fills can be typed in by hand instead, and nothing about your profile depends on using it.

Grievance Officer

Email jollyks@gmail.com or use the grievance page. We acknowledge within 72 hours and resolve within statutory timelines.