Privacy notice

AgroNex is software that companies use to hire and manage their people. Two different kinds of personal data pass through it, and they are not governed the same way.

• For your own AgroNex account, AgroNex is the Data Fiduciary — we decide what is collected and why.
• For the employee and candidate records inside a company's workspace, that company is the Data Fiduciary and AgroNex is its Data Processor. We hold and protect the data; the company decides what goes in it and who may see it.
• So a candidate or employee asking about their record should ask the company they applied to or work for. We will help that company answer, and we will pass on any request that reaches us first.

• What: the name, contact details, work history and CV you submit on this form.
• Why: to assess your application, contact you about it, and consider you for similar roles at the company you applied to or work for.
• Who sees it: the hiring team at the company you applied to or work for. It is not sold, shared with other employers, or used for advertising.
• How long: 24 months from your last contact with us, then deleted automatically along with your CV.
• Your choices: you can ask to see a copy of what we hold, correct it, or have it deleted at any time — from the application-status page, or by writing to us.

• What: your employment record — personal and contact details, role and pay, attendance and leave, and the statutory identifiers (PAN, UAN, ESIC) and bank details needed to pay you.
• Why: to employ you and to meet the obligations that come with employing you — payroll, provident fund, insurance and tax.
• Legal basis: this is processing necessary for your employment and for the company you applied to or work for's legal obligations, not something you are asked to opt into. It cannot be withdrawn while those obligations stand.
• Security: bank account, PAN, UAN and ESIC numbers are encrypted in the database. Documents and photographs are not publicly reachable and are served only after a permission check.
• How long: 8 years after you leave, which is what Indian payroll and tax record-keeping requires. Anything not needed for that is removed sooner.

Your employer decides what goes into your record and who can see it. Ask them first; we will help them answer.

• What: your name, work email, phone number and the record of what you did in the application.
• Why: to give you an account, keep it secure, and show your organisation who changed what.
• Who sees it: administrators of your own company's workspace, and AgroNex staff when they are supporting you.
• How long: while your account exists, plus the audit trail for 3 years.

• Bank account numbers, PAN, UAN and ESIC numbers are encrypted in the database, so a stolen backup does not hand them over.
• CVs, photographs and employee documents are stored outside the public web root and served only after a permission check — there is no URL that works without a session.
• Administrators must use two-factor authentication.
• Every company's data is isolated at the database query level, and the isolation fails closed: a query that does not name a company returns nothing rather than everything.
• Reads of salary, bank details and CVs are recorded, so it is possible to say who looked at what.
• Data past its retention period is deleted automatically, files included.

• Access — ask for a copy of what is held about you.
• Correction — ask for anything wrong or out of date to be fixed.
• Erasure — ask for it to be deleted, unless it has to be kept by law.
• Withdrawal — where we rely on your consent, take it back at any time. Doing so does not undo what was lawful before.
• Grievance — complain to the officer named below, who will respond within 30 days.
• Escalation — if you are not satisfied, complain to the Data Protection Board of India.

More detail on how to complain, and what happens next, is on the data protection page.