Privacy Policy

1. Who we are

This policy explains how BRC STAR (OPC) PRIVATE LIMITED (CIN: U34100RJ2019OPC066948, registered in Anupgarh, Rajasthan, India) collects, uses and protects personal information when you use this application at app.brcstar.in (the "Platform").

2. Information we collect

• Account data: name, email address and the password hash you provide when creating an account.
• Profile data: details you add such as organisation, designation, phone number, country, city, website and biography.
• Application data: the content of applications and messages you submit through the Opportunities portal or contact form.
• Technical data: IP address, browser user-agent and session metadata, used for security and rate limiting.

3. How we use your information

• To create and manage your account and sessions.
• To process, review and respond to applications and enquiries.
• To communicate important account or platform notices.
• To protect the Platform against fraud and abuse.

We do not sell your personal information. We do not use your personal information for advertising.

4. Lawful basis and storage

We process personal data on the basis of the contract with you (your account) and our legitimate interests in operating the Platform securely. Data is stored on secure database infrastructure (e.g. Vercel Postgres / Neon). Passwords are stored only as one-way bcrypt hashes and are never readable in plain text.

5. Retention

We retain account and application data for as long as your account is active, plus a reasonable period afterwards to meet legal and audit obligations. You may request deletion at any time (see Section 8).

6. Cookies

We use an essential session cookie for authentication and a theme preference stored on your device. See our Cookie Policy for full details.

7. Security

We apply secure, httpOnly session cookies, bcrypt password hashing, server-side validation, rate limiting on authentication and contact endpoints, and security headers. No transmission or storage method is completely infallible, but we take reasonable measures to protect your data.

8. Your rights

Subject to applicable law (including the Digital Personal Data Protection Act, 2023, when in force), you may request access to, correction of, or deletion of your personal data, and withdraw consent where processing is consent-based. Contact us at contact@brcstar.in for any request.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.