Privacy Policy

Effective: 1 Falgun 2081 BS (13 February 2025)Last updated: 1 Falgun 2081 BSGoverned by Nepal Law

Summary: ConvexHire is operated by Convex Technologies Pvt. Ltd., registered in Nepal. We collect only the personal data necessary to provide our job-board services and do so in compliance with the Privacy Act 2075 (2018) and the Electronic Transactions Act 2063 (2006) of Nepal. We never sell your data.

1. About This Policy

This Privacy Policy describes how Convex Technologies Pvt. Ltd. ("ConvexHire", "we", "us", "our") collects, uses, stores, and discloses information about you when you use our website at convexhire.com and the services we provide (collectively, the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of the Service.

This Policy is governed by and construed in accordance with the laws of Nepal, including the Privacy Act 2075 (2018), the Electronic Transactions Act 2063 (2006), and any applicable regulations issued thereunder.

2. Data We Collect

2.1 Information you provide directly

Full name, email address, and password when you register an account
Professional information including your CV/résumé, work history, skills, and education
Profile photo (optional)
Contact details such as phone number and location (district/province)
Cover letters, application answers, and any other content you submit
Payment and billing details if you subscribe to a paid Employer plan
Communications you send to us via contact forms, email, or support tickets

2.2 Information collected automatically

IP address and approximate geolocation (country/city)
Browser type, operating system, and device information
Pages visited, time spent, and click-stream data via cookies and similar technologies
Referring URLs and search queries that led you to our site
Job search queries and saved listings

2.3 Information from third parties

Profile data from LinkedIn or Google if you choose to sign up via OAuth
Publicly available professional information you have made visible on other platforms

3. How We Use Your Data

We use your personal data strictly for the following purposes:

To create and manage your account and deliver the Service
To match your profile with relevant job listings and employers
To forward your application materials to prospective employers on your behalf
To process payments for Employer subscriptions
To send you transactional notifications (application updates, password resets)
To send you optional job-alert emails where you have opted in
To improve and personalise the Service through analytics
To prevent fraud, abuse, and security incidents
To comply with legal obligations under Nepal law

We do not use your data for automated decision-making that produces legal or similarly significant effects without your explicit prior consent.

4. Legal Basis Under Nepal Law

Under the Privacy Act 2075 (2018) of Nepal, we rely on the following lawful grounds to process your personal data:

Consent: For optional communications such as marketing emails and push notifications. You may withdraw consent at any time.
Contractual necessity: To perform the agreement between you and ConvexHire when you register and use the Service.
Legitimate interest: For fraud prevention, security monitoring, and improving the Service, provided these interests do not override your fundamental rights.
Legal obligation: Where processing is required to comply with applicable Nepal legislation or a lawful order of a competent authority.

The Electronic Transactions Act 2063 (2006) further governs the legal validity of electronic records, digital signatures, and online transactions conducted through the Service.

6. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide the Service. Specifically:

Account data is retained for the duration of your account and for up to 2 years after account deletion for legal and dispute-resolution purposes.
Application records may be retained for up to 1 year after the closure of a job listing to allow employers to respond to regulatory enquiries.
Financial records are retained for 5 years as required by the Income Tax Act 2058 (2002) and the Value Added Tax Act 2052 (1995) of Nepal.
Server logs and analytics data are retained for no more than 90 days in anonymised or aggregated form.

7. Your Rights

Under the Privacy Act 2075 (2018) and the Constitution of Nepal (Article 28 — Right to Privacy), you have the following rights in relation to your personal data:

Right to access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data, subject to our legal retention obligations.
Right to restrict processing: Ask us to limit how we use your data in certain circumstances.
Right to data portability: Receive your account data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@convexhire.com. We will respond within 30 days as required under Nepal law. You also have the right to lodge a complaint with the Department of Information Technology, Ministry of Communication and Information Technology, Government of Nepal.

8. Security Measures

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

TLS 1.3 encryption for all data in transit
AES-256 encryption for data at rest
Role-based access controls limiting employee access to personal data
Regular security audits and penetration testing
Multi-factor authentication for all administrative accounts

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the competent authority within 72 hours of becoming aware of the breach.

9. Cookies

We use cookies and similar tracking technologies to operate and improve the Service. Please refer to our Cookie Policy for full details on the cookies we use, their purpose, and how to manage your preferences.

10. Children's Privacy

The Service is not directed to individuals under the age of 16 years, and we do not knowingly collect personal data from children. Under the Children's Act 2075 (2018) of Nepal, if we become aware that a child under 16 has provided us personal data without verifiable parental consent, we will promptly delete it. If you believe a child has submitted information to us, please contact privacy@convexhire.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable Nepal law. When we make material changes, we will notify you by email (to the address on file) or by posting a prominent notice on the Service at least 15 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Company: Convex Technologies Pvt. Ltd.
Registration: Registered under the Companies Act 2063 (2006), Nepal
Address: Kathmandu, Bagmati Province, Nepal
Email: privacy@convexhire.com
Phone: +977-1-XXXXXXX