Privacy Policy

At waitlist & signup

• Name, email address, location, and the role you select (candidate or employer), this is all we ask for at this stage.

Once your profile is active

• Professional information: skills, experience, education, certifications, and compensation expectations.
• Resume, portfolio, or profile content you upload.
• Identity or business verification details, where verification is part of your account type.
• Messages, nods, and interactions with other Platform users, once a match is confirmed.

Employer accounts specifically

• Organization name, business contact details, and authorized-user information.
• Business verification, billing, and credit/transaction information.
• Job postings and hiring requirements.

Collected automatically

• IP address, device and browser information, and basic session/security logs.
• Usage patterns — pages viewed, searches, general interaction with the Platform — used to keep things secure and improve the product.

• Matching. To run SignalScore™, generate your NodFit™ score, and surface relevant opportunities or candidates.
• The Platform itself. To create and manage your profile, operate the nodding/matching mechanic, and enable messaging once there's a Double Nod™.
• Security. To prevent fraud, abuse, and unauthorized access, and to keep accounts genuine.
• Improvement. To understand usage patterns and improve matching quality and product features, generally through aggregated or de-identified analysis.
• Communication. To send you account and match-related updates. Marketing or product emails, where sent, are opt-in or easily unsubscribed from — consistent with the "one email, when it matters" approach on our site.

This is the part of our privacy approach that's genuinely different from a typical job board, so it's worth explaining plainly:

• Blurred until mutual. Names and identifying profile details stay blurred to the other side until both parties have independently nodded, a NodNod™. Both sides see only the profile information and relevant skills needed to evaluate fit. Identities are revealed only after mutual interest.
• Blocked companies. Candidates can block specific companies, including a current employer, from ever seeing their profile. This is enforced structurally, at the account level, not as a setting either side can bypass.
• No cold outreach. Employers cannot message or contact a candidate who hasn't nodded first. There's no resume database to cold-scrape.

Once a NodNod™ happens, both parties can see each other's full relevant profile information and begin messaging.

Double Nod uses SignalScore™, our in-house matching technology, to analyze signals from both a candidate's profile and an employer's listing and produce a single shared match percentage — NodFit™ — visible identically to both sides.

• SignalScore™ evaluates signals like skills, experience, compensation range, availability, hiring timeline, and role expectations, among others.
• NodFit™ is a decision-support tool, not a guarantee. It does not determine who gets hired, that decision always rests with the employer and candidate, based on their own judgment.
• We aim to keep this process explainable: your NodFit™ score should never feel arbitrary or like a black box.
• We review our matching systems on an ongoing basis to reduce the risk of unfair or biased outcomes.

• The other side of a match. Once there's a NodNod™, relevant profile information becomes visible to that specific matched party never before, and never to anyone else.
• Service providers. We work with hosting, analytics, communications, payment, and verification providers who process data on our behalf, under confidentiality and data-protection terms.
• Legal requirements. We may disclose information where required by law, court order, or lawful government request.
• Business transfers. In the event of a merger, acquisition, or similar transaction, data may transfer as part of that deal, subject to the same protections described here.

We do not sell, rent, or trade personal data to third parties, and we do not allow employers to bulk-export or scrape candidate data off the Platform.

We use encryption in transit and at rest, access controls, authentication safeguards, and ongoing monitoring appropriate to the sensitivity of the data involved. Employer business verification and payment data receive the same level of protection as candidate personal data.

No system is perfectly secure, and we won't claim otherwise, but security is treated as a core requirement of the product, not an afterthought.

Subject to applicable law, you can:

• Access the personal data we hold about you.
• Correct inaccurate or outdated information.
• Delete your account and associated data.
• Withdraw consent for optional processing (e.g. marketing emails) at any time.
• Ask questions about how your data is being used, and get a real answer.

To exercise any of these, email us at the address in the Contact section below. We aim to respond within a reasonable timeframe, and in any case within the limits required by law.

Where applicable, we process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules. This includes providing clear notice, obtaining consent where required, allowing easy withdrawal of that consent, maintaining reasonable security safeguards, and supporting your rights as a Data Principal under the Act, including access, correction, erasure, grievance redressal, and (where permitted by law) nominating someone else to act on your behalf.

We keep personal data only as long as reasonably necessary, to provide the service, meet legal and tax obligations, resolve disputes, and enforce our agreements. Waitlist data for accounts that never activate is deleted on a reasonable schedule rather than kept indefinitely. Once data is no longer needed, it's securely deleted or anonymized.

The Platform is intended for individuals who are at least 18 years old. We do not knowingly collect personal data from anyone younger, and we'll delete such data promptly if we become aware of it.

We may update this Privacy Policy as Double Nod evolves. We'll update the "Last updated" date above, and where a change is significant, we'll make a reasonable effort to notify you directly rather than leaving it to be discovered.

Questions about this policy, or want to exercise any of the rights above? Email legal@doublenod.com. A real person reads every message.