Privacy Notice
Last updated:
PerkNavigate ("we", "us") is an information website for Indian employees. This notice explains what personal data we collect, why, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act). We collect as little as possible. You can use almost everything on the site without giving us any personal data.
1. What we collect and why
| Data | When | Purpose | Basis |
|---|---|---|---|
| Email address, sector (government, private or both), page where you signed up | You join perk alerts, or unlock the Perk Report PDF | Send the alerts or report you asked for | Your consent (tick-box) |
| Messages you send to perknavigate@gmail.com | You contact us | Reply to you and fix errors | Your consent / voluntary provision |
| Text you submit to the Community page (title, body, optional display name, sector, organisation type and email), and a one-way hash of your IP address | You submit a tip or guide | Review and, if approved, publish your text; contact you if you gave an email; limit spam | Your consent (tick-box) |
| Analytics data (pages viewed, device type, approximate location, performance) | Only after you press Accept on the cookie banner | Understand which pages help and improve speed | Your consent |
Data that stays in your browser. Saved perks, claim ticks, notes, your Perk Finder answers (sector, organisation type, pay level or CTC band, city tier, family) and your cookie choice are stored in your own browser (localStorage). We do not receive or store them on our servers. Clearing your browser data deletes them.
We do not ask for your name, phone number, Aadhaar, PAN, salary slip or employer name. Please do not email us such documents.
Community submissions. Nothing you submit is published until our team approves it, and we may edit it. Published text appears with your optional display name, never your email. Do not include personal data about yourself or others. Your email and the IP hash are never shown publicly. Ask us at the address below to remove a published contribution or delete your data.
2. Cookies and analytics
Essential storage (remembering your cookie choice and your saved perks) does not need consent. Analytics cookies are off until you accept. We use Google Analytics 4 and Vercel Analytics. You can change your choice at any time by clearing this site's data in your browser; the banner will appear again.
3. Who we share data with
We do not sell personal data. We use service providers (data processors) who handle data only on our instructions: Vercel (hosting and analytics), Supabase (database that stores newsletter signups and community submissions), Google (analytics, only with consent) and our email-sending provider. Some of these process data outside India. We transfer data only to countries and providers permitted under the DPDP Act and its rules.
4. How long we keep it
Newsletter emails are kept until you unsubscribe or ask us to delete them, then erased within 30 days. Emails you send to us are kept for up to 12 months after the matter is resolved. Analytics data follows the retention period set in the analytics tool (up to 14 months).
5. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and who we share it with;
- ask us to correct or complete it;
- ask us to erase it;
- withdraw consent at any time (as easy as giving it — use the unsubscribe link in any email, or write to us);
- nominate another person to exercise these rights if you die or become incapacitated;
- use our grievance redressal process below.
We respond to requests within 30 days.
6. Grievance redressal
For any privacy request or complaint, write to perknavigate@gmail.com with the subject "Privacy request". If you are not satisfied with our reply, you may complain to the Data Protection Board of India once it is constituted and accepting complaints.
7. Children
PerkNavigate is for working adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.
8. Security
We use HTTPS, restrict database access to our server, and keep personal data to the minimum needed. No system is perfectly secure. If a breach affects your data we will notify you and the Board as the law requires.
9. Changes
We will update this notice when our practices change and change the "Last updated" date above. For material changes we will ask for fresh consent where required.