Last Updated: August 2026. This statutory policy governs how Ascent and Legion Hiresoft India Private Limited process candidate and agency information in strict compliance with the Indian Digital Personal Data Protection (DPDP) Act 2023.
Candidates (Data Principals) have the right to receive a complete summary of all personal data, resume history, and interview records held and shared with client organizations.
Candidates can request immediate correction of inaccurate profile data or permanent, irreversible erasure of their records from the agency talent database.
Direct statutory access to our designated Data Protection Officer (DPO) with an enforceable resolution SLA within 7 business days.
Candidates have the statutory right to nominate an authorized representative to exercise data rights on their behalf in case of death or incapacity.
Under the DPDP Act 2023, the recruitment agency deploying Ascent acts as the primary Data Fiduciary determining the purpose and means of candidate processing. Ascent acts as the Data Processor providing cryptographic consent logging, resume parsing, and secure cloud storage infrastructure.
All candidate consents collected via WhatsApp, SMS, or Email Magic Links are signed with immutable SHA-256 hashes and timestamped with IP and user-agent records. These cryptographic ledger entries cannot be tampered with and serve as conclusive evidence under Section 6 of the DPDP Act 2023.
All customer and candidate records are hosted strictly within enterprise cloud data centers located physically within the Republic of India (Mumbai and Hyderabad regions) in accordance with Section 16 data localization directives. Data at rest is encrypted with AES-256 and data in transit is protected via TLS 1.3.
For grievances, data export requests, or regulatory inquiries, contact our Data Protection Officer directly:
Official Email: admin@hiresoft.in
Legal Entity: Legion Hiresoft India Private Limited
Ensure 100% DPDP 2023 compliance with automated WhatsApp consent links and cryptographic audit trails.
Statutory Response SLA: Within 48 business hours