Privacy Policy &
Data Governance Ledger.
Last Updated: August 2026. This statutory policy governs how Ascent and Legion Hiresoft India Private Limited process candidate and agency information in strict compliance with the Indian Digital Personal Data Protection (DPDP) Act 2023.
Statutory Guarantees
Candidate Data Principal Rights
Right to Access (Section 11)
Candidates (Data Principals) have the right to receive a complete summary of all personal data, resume history, and interview records held and shared with client organizations.
Right to Correction & Erasure (Section 12)
Candidates can request immediate correction of inaccurate profile data or permanent, irreversible erasure of their records from the agency talent database.
Right to Grievance Redressal (Section 13)
Direct statutory access to our designated Data Protection Officer (DPO) with an enforceable resolution SLA within 7 business days.
Right to Nominate (Section 14)
Candidates have the statutory right to nominate an authorized representative to exercise data rights on their behalf in case of death or incapacity.
Roles of Parties (Data Fiduciary vs Data Processor)
Under the DPDP Act 2023, the recruitment agency deploying Ascent acts as the primary Data Fiduciary determining the purpose and means of candidate processing. Ascent acts as the Data Processor providing cryptographic consent logging, resume parsing, and secure cloud storage infrastructure.
Cryptographic Consent & Audit Logs
All candidate consents collected via WhatsApp, SMS, or Email Magic Links are signed with immutable SHA-256 hashes and timestamped with IP and user-agent records. These cryptographic ledger entries cannot be tampered with and serve as conclusive evidence under Section 6 of the DPDP Act 2023.
Data Residency & Enterprise Encryption
All customer and candidate records are hosted strictly within enterprise cloud data centers located physically within the Republic of India (Mumbai and Hyderabad regions) in accordance with Section 16 data localization directives. Data at rest is encrypted with AES-256 and data in transit is protected via TLS 1.3.
Designated Data Protection Officer (DPO)
For grievances, data export requests, or regulatory inquiries, contact our Data Protection Officer directly:
Official Email: admin@hiresoft.in
Legal Entity: Legion Hiresoft India Private Limited
Protect your candidate database with Ascent.
Ensure 100% DPDP 2023 compliance with automated WhatsApp consent links and cryptographic audit trails.