Privacy Policy

This policy explains what personal data CA Way (“we”, “us”), operating caway.in, collects, why, who we share it with and the choices you have. We aim to process personal data in line with India’s Digital Personal Data Protection Act, 2023 and the rules made under it.

1. What we collect

• Account details from Google sign-in: your name, email address and Google profile picture link. We do not receive your Google password.
• Student profile: name, email, mobile number, city, CA level, preferred cities and domains, LinkedIn profile link (optional) and your resume (PDF).
• Recruiter details: firm name, contact person, email, phone and LinkedIn link entered when posting an opportunity.
• Activity on CA Way: jobs you save, applications you make, application statuses, outcomes you report, and reports you submit.
• Technical data: basic information needed to run the site securely, such as login cookies, and anonymous page view counts for listings.

2. Why we use it

• To let you sign in, save jobs, apply and track applications.
• To share your application with the recruiter you apply to (see section 3).
• To let recruiters post opportunities, review applicants and receive a daily summary email.
• To keep the platform safe: preventing spam, fake listings and misuse.
• If you opt in, to send you occasional updates about new opportunities. You can opt out at any time.

We process your data on the basis of your consent, given when you set up your profile or post an opportunity, and for the legitimate uses permitted by law, such as security.

3. Who can see your data

• When you apply on CA Way, the recruiter who owns that listing can see your name, email, mobile number, city, CA level, LinkedIn link and resume. They see this only for listings you applied to.
• When you apply by email or on a firm’s site, you send your details to the firm yourself; CA Way only records that you applied.
• CA Way administrators can access data to operate and support the platform.
• Service providers that host and run CA Way on our behalf: Supabase (database, login and file storage), Hostinger (website hosting and email), Resend (recruiter summary emails), Google (sign-in) and Cloudflare (spam protection).
• We do not sell your personal data. We may disclose data if required by law.

Recruiter contact details entered on a listing are never shown to students.

4. How long we keep it

We keep your account data while your account is active. If you delete your account, we delete your profile, resume and saved jobs. Records of applications you already sent remain visible to the recruiter concerned, without your resume, so that they can complete their hiring process. We may keep limited records where the law requires.

5. Security

Resumes are stored in private storage and recruiters receive short-lived links only for applicants to their own listings. Access to data is restricted by role. No system is perfectly secure, but we take reasonable steps to protect your data.

6. Your rights

• Access and correct your data from your dashboard’s Profile page.
• Delete your account from the Profile page, or by writing to us.
• Withdraw consent for updates at any time; this does not affect applications already sent.
• Raise a grievance with us using the contact below. If you are not satisfied, you may approach the Data Protection Board of India.

7. Children

CA Way is meant for CA students and professionals. If you are under 18, please use CA Way only with the involvement of a parent or guardian.

8. Changes

We may update this policy. We will change the “Last updated” date above and, for significant changes, tell you on the site.

9. Contact and grievances

Email hello@caway.in. We aim to respond to privacy requests within 7 days.