Back to home

Privacy Policy

Last updated: 09 July 2026 · Maintained by Navin Mishra, Refer-Me IN.

🔒
Bank-Grade Data Minimization

ReferMeIn strictly adheres to data privacy standards. We never collect, store, or process sensitive identifiers like your PAN card. If a target enterprise system requires duplication checks, you handle that exchange directly and securely with your matched human insider.

Plain-English summary

We collect only what is needed to route a referral: your name, email, corporate domain (for employees), a link to your work, and a short pitch. We never sell, rent, or share your data with recruiters, agencies, or ad networks. Payments are handled by Razorpay — we don't store card or UPI details on our servers.

1. Who we are

Refer-Me IN is operated by Navin Mishra ("we", "us"), an individual proprietor based in India. For any privacy question, write to privacy@refermein.in.

2. What we collect

  • Account: email, role (hunter / insider / company), corporate domain if applicable.
  • Profile: display name, avatar (optional), proof-of-work link, pitch text (max 150 chars).
  • Referral requests: the role you applied for, the linked employee, timestamps, escrow state.
  • Payments: handled entirely by Razorpay. We store only a reference ID, amount, and state — never card, CVV, or full UPI VPAs.
  • Logs: anonymous request logs (IP, user agent, path) kept 30 days for abuse detection.

3. How we use it

Strictly to (a) route your referral to the right employee, (b) run the 48-hour escrow SLA, (c) process refunds automatically, and (d) send transactional email or WhatsApp updates about your requests. No marketing spam, no lookalike audiences.

4. Who we share with

  • Supabase — database and authentication hosting (data resides in the AP-South region where possible).
  • Razorpay — payment gateway and escrow processing.
  • Twilio — transactional SMS / WhatsApp notifications you opt into.
  • Cloudflare — CDN, DDoS protection, and edge hosting.

We do not share personal data with recruiters, agencies, ATS vendors, or advertising networks. Ever.

5. Your rights (DPDP Act 2023)

You can request access, correction, or erasure of your data at any time by emailing privacy@refermein.in. We respond within 7 working days. You can also delete your account from the profile page — this triggers a hard delete of your personal records within 30 days.

6. Retention

Active accounts: retained while your account is open. Closed accounts: personal data purged within 30 days; financial records retained for 7 years as required by Indian tax law.

7. Cookies

We use only functional cookies (session token, sign-in state). No third-party ad or analytics cookies.

8. Grievance officer

Under the Information Technology Act 2000 and DPDP Act 2023:

Name: Navin Mishra
Role: Grievance Officer, Refer-Me IN
Response SLA: Acknowledged in 48 hours, resolved in 15 days.

9. Changes

We'll post material changes to this policy on this page and email active users at least 7 days before they take effect.