Privacy Policy

1. Introduction

At Zerotonin, we are dedicated to safeguarding your privacy. This Privacy Policy is an integral part of the Zerotonin Terms of Service (ToS) and applies to all registered users, including both candidates and recruiters.

We collect information, including but not limited to your personal details, when you register and use our services. Your acceptance of this Privacy Policy shall be deemed as your explicit consent for us to use your personal data in the manner stated in this policy.

2. Personal Data Collected

We categorize data as Mandatory (necessary for account creation), Optional (intended to improve user experience), and Files/Documents.

For Doctors/Candidates:

• Basic Identity: Full Name, Phone Number, Email Address.
• Employment History: Hospital Name, Department, Designation, Experience.
• Education: Academic background, Qualifications, Medical Council Registration.
• Files: Registration certificates, Degree certificates, and generated PDF Resumes.

For Recruiters:

• User Details: Full name, work email, mobile number, and designation of authorized representatives.
• Organization Details: Institutional profiles used for employer branding and vetting.

3. Purpose of Processing

We process personal data only for the following purposes:

• Creating and managing user accounts and verifying identities.
• Enabling job discovery, applications, and recruitment communication.
• Displaying professional profiles to relevant, verified recruiters.
• Maintaining platform security and preventing fraudulent activities.

4. Data Sharing

We do not sell user data. Data is shared only to facilitate the functioning of the platform:

• With Recruiters: When a Doctor applies for a role, their profile details and CV become visible to the verified recruiter.
• With Service Providers: We integrate with industry leaders like AWS (SES/S3), MSG91 for OTPs, and MongoDB for secure data hosting.

5. Safety and Security Measures

Our codebase enforces strict security paradigms to protect organizational and medical professional data:

• Password Protection: All passwords are encrypted using the bcrypt hashing algorithm.
• Secure Authentication: Sessions rely on time-bound, stateless JSON Web Tokens (JWT).
• OTPs: Securely hashed OTPs with strict expiration and cooldown limits.
• File Security: Strict MIME-type allowlists and file size limits.

6. Data Retention

Personal data is retained only for as long as the user account remains active, as required for recruitment services, or as required by applicable law.

7. Your Rights

Depending on applicable law, you may have the right to access, correct, or request deletion of your personal data. Requests can be made using the contact details provided below.

8. Cookies & Tracking

Zerotonin uses essential cookies (such as JWT session tokens) required for authentication, security, and ensuring the platform functions correctly. We do not use invasive third-party tracking cookies or sell your browsing data to advertisers.

9. Contact & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact our Grievance Officer at:

Privacy & Legal Team
Email: support@zerotonin.com
Zerotonin Innovations Private Limited
Building No. 12/290, Ettumanoor, Kottayam, Kerala, Pin: 686631