Privacy Policy

1. Who is responsible for your data

Lostmy Job Pvt. Ltd., operating the Website returntowork.in under the brand name Return to Work, is the Data Fiduciary. Contact details are provided at the end of this Privacy Policy.

2. Google user data

If you sign in with Google, we receive the following from your Google account, and nothing more:

What we do not access

We do not request or receive access to your Gmail, Google Drive, Google Contacts, Google Calendar, or any other Google service or Google user data beyond the three items listed above.

Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising or sell it. We do not transfer it to third parties except as necessary to provide or improve this service, to comply with applicable law, or as part of a merger or acquisition.

Withdrawing access

You can revoke our access at any time from your Google Account permissions, and you can ask us to delete your account and all associated data by writing to support@returntowork.in .

3. Other data we collect, and why

We collect this information on the basis of your consent, given by ticking the box on the intake form. We collect nothing beyond what these purposes require.

4. What we do not do

• We do not sell your data.
• We do not share it with employers, recruiters, agencies or job boards.
• We do not use it for advertising or to build a marketing list without asking you separately.
• We do not use your resume for any purpose other than preparing for and conducting your Conversation.

5. Who else can see it

Samaksh Gupta is the only person with routine access. Your data is also held by the third-party services used to run the Website, including:

• Google Workspace — sign-in, email, file storage, and Google Meet for the Conversation itself.
• WhatsApp (Meta) — if you contact us using the WhatsApp button on the Website, your message and phone number are held by Meta under its own privacy terms.
• Third-party hosting, form-submission and scheduling providers used by the Website, where applicable.

These providers process your data on our instructions and are bound to keep it confidential. We disclose data to a public authority only where the law requires it.

6. The Conversation itself

Conversations take place over Google Meet. We do not record or transcribe them, and automated note-taking or meeting-summary features are kept switched off.

Any notes are typed by hand and stored as described in Clause 9.

7. Reviews and testimonials

If you choose to leave a review after your Conversation, we collect the text of your review and the name you give with it. Leaving a review is optional.

We publish a review on the Website only where you have separately and expressly agreed to publication through a tick box provided for that purpose.

If you agree, we publish your first name and last initial unless you ask us to use something else. You may ask us to remove a published review at any time by writing to us, and we will do so.

8. Where your data is stored, and who this service is for

This service is offered only to persons resident in and located in India.

It is not offered, marketed or directed to persons outside India, and we do not knowingly collect the personal data of anyone outside India.

If we learn that a user is not resident in India, we will stop processing their data and delete it, save for anything we are required by law to retain.

Your data is stored on servers operated by the providers named above. Some of those providers may hold data on servers located outside India.

Where that is the case, we ensure the transfer complies with the DPDP Act and the rules made under it.

9. How long we keep it

• Resumes and intake form responses: 12 months from your Conversation, then deleted.
• Account and booking records: for as long as your account is open, and 12 months after you close it.
• Published reviews: until you ask us to remove them.
• Records we must retain by law: for the period the law requires.

You can ask us to delete your data sooner.

10. How we protect it

We use access-controlled accounts with strong, unique passwords and two-factor authentication, encrypted storage and transmission, HTTPS across the Website, and we limit access to those who need it.

No system is perfectly secure, but we take these obligations seriously.

If a breach affects your data, we will notify you and the Data Protection Board of India within 72 hours, as required.

11. Your rights

Under the DPDP Act you have the right to:

• Ask what personal data of yours we hold and how we have used it.
• Have inaccurate or incomplete data corrected or updated.
• Have your data erased, unless we are legally required to keep it.
• Withdraw your consent at any time.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if our response does not satisfy you.

To exercise any of these rights, email:

12. Children

This service is for adults. We do not knowingly collect the personal data of anyone under eighteen, and the intake form asks you to confirm your age.

13. Cookies

The Website uses only essential cookies. These are required to keep you signed in and to keep the site secure, and they cannot be switched off without the Website ceasing to work.

We do not use cookies to track you across other websites, and we do not use advertising cookies.

14. Changes to this policy

If we change how we handle your data, we will update this notice and the effective date at the top.

Where a change is material and affects data we already hold, we will contact you.

If we add any new Google API scope, this policy will be updated and re-submitted for verification before the feature goes live.

15. Contact