SAMS-STC is the commercial Website/App of SAMS Social Talent Connect Pvt. Ltd. ("SAMS-STC").

This page serves to inform visitors regarding our policies relating to the collection, use, and disclosure of Personal Information of anyone using the app and website of SAMS-STC ("SAMS-STC Platform").

By using SAMS-STC Platform, you consent to the terms of our privacy policy ("Privacy Policy") in addition to our Terms of Service.

We will periodically update our Privacy Policy and post the revised version on our website. We encourage you to visit our website regularly to review the updated Privacy Policy and stay informed about any changes to the collection, use, and disclosure of your information.

SAMS-STC has designated a Data Protection Officer (DPO) responsible for:

• Compliance with DPDP Act and these policies
• Addressing data principal complaints and rights requests
• Conducting data protection impact assessments
• Investigating data breaches
• Maintaining breach register
• Liaising with Data Protection Board of India

Contact Data Protection Officer:

• Name: Kafil Akhtar
• Email: grievance@samsstc.com
• Phone: +(011) 4081 9900; 4165 3612
• Address: SAMS Social Talent Connect Pvt Ltd, 1/1B Choudhary Hetram House, Bharat Nagar, New Friends Colony, New Delhi – 110 025

Data principals may contact DPO for:

• Consent withdrawal requests
• Data access/correction/deletion requests
• Complaints or concerns about data handling
• Breach notifications
• Any other data protection matters

Privacy Policy Clause

If you choose to use our services, you agree to the collection and use of information as outlined in this Privacy Policy. The information collected is used to provide and improve the services offered by SAMS-STC. Your information will not be used or shared with third parties except as described in this Privacy Policy.

When using the SAMS-STC Platform, both individuals and organizations may be required to provide certain information to create a profile. For individuals, this may include personal details such as name, location, gender, profile picture, educational background, and professional information (e.g., current employer, etc). For organizations, this may include details such as the organization's name, location, mission, and the type of opportunities being posted.

This information will be collectively referred to as the Public Profile of the individual or organization using our platform. By using the SAMS-STC Platform, you acknowledge and consent to the following:

DATA PRINCIPAL RIGHTS UNDER DPDP ACT

By using SAMS-STC, you have the following rights under the Digital Personal Data Protection Act, 2023:

Right to Consent and Withdraw Consent (Section 6)

Consent Requirements:

• Consent must be explicit, specific, informed, and unambiguous
• Consent provided through clear affirmative action (checkboxes, buttons)
• You may provide separate consents for different purposes

Withdrawal Methods:

Dashboard: Settings > Privacy > Manage Consent

Email: support@samsstc.com with subject "Consent Withdrawal"

Phone: +(011) 4081 9900; 4165 3612 during business hours

Processing: Withdrawal processed within 5 business days Confirmation: Email sent with details of data handling post-withdrawal

Right to Access Your Data (Section 11)

• Request complete summary of personal data SAMS-STC holds about you
• Request submitted via: support@samsstc.com
• Response provided within 30 days
• Data provided in structured, machine-readable format (CSV, Excel, PDF)

Right to Correct Your Data (Section 12)

• Request corrections to inaccurate or incomplete data
• Corrections made within 15 days of verification
• Confirmation sent once corrected
• Most profile data can be edited by you directly in Settings

Right to Erasure and Deletion (Section 12)

• Request deletion of personal data at any time
• Deletion made within 15 days unless retention legally required
• 48-hour notice provided before deletion due to inactivity
• Confirmation of deletion sent via email
• Some data retained for legal compliance (tax records: 7 years)

Right to Data Portability

• Request data in structured, portable format
• Available for download through Dashboard or email request
• Processed within 30 days
• Provided in CSV, Excel, JSON, or PDF format

Right to Grievance Redressal

• Contact Data Protection Officer: grievance@samsstc.com
• Submit formal complaint to Data Protection Board of India if unsatisfied
• DPB Contact: [Official government contact]
• No charges for exercising these rights

Public Accessibility

a. By using the SAMS-STC Platform, Users consent to the collection and processing of their personal data for specific purposes chosen by the User. Users provide separate consents for:

• Job application processing
• GP-RAJA database inclusion
• Profile matching and recommendations
• Third-party data processor engagement
• International data transfers (where applicable)
• Marketing communications

Your Rights: Users have the right to access, correct, delete their data, or withdraw consent at any time by contacting the Data Protection Officer at grievance@samsstc.com

Requests processed within 30 days.

b. Public Profiles created by organizations will be visible on the SAMS-STC Platform and may appear in search engine results, enhancing their discoverability for relevant opportunities.

c. Public Profiles created by individuals/ candidates will not be publicly visible. These details will be accessible to employers only when they apply to jobs posted by them on the SAMS-STC Platform. Additionally, based on the candidates' consent at the time of registration on the platform (see Clause 4 below), SAMS-STC may share their profile with employers posting jobs for which they are eligible, or match their preferences.

d. For individuals or organizations responding to Social Sector Opportunity (SSO) posts (viz. RFPs/ Tenders/ Consultancies/ Events, etc.), personal and organizational information shared will be treated in compliance with applicable data protection regulations. SAMS-STC will ensure that such information is used only for the intended purpose of the SSO and not for any unrelated activities without prior consent.

Service Integration

Public Profiles will be used to facilitate productive outcomes from Job and SSO posts, including Requests for Proposals (RFPs), grants-related updates, or other announcements on the SAMS-STC Platform.

Enhanced Visibility

For individuals, Public Profiles increase visibility to potential employers, collaborators, and recruiters. For organizations, Public Profiles enhance outreach to qualified candidates and collaborators, maximizing engagement with the right audience.

4. GP-RAJA Database

Candidates who have explicitly consented to be included in SAMS-STC's Database of General Purpose -- Resumes and Job Applications (GP-RAJA Database), acknowledge and agree that their information may be shared with all employers, recruiters, or entities subscribing to this database. Employers/recruiters will use this information solely for recruitment-related purposes, in alignment with the preferences specified by candidates.

Consent Withdrawal: Candidates who have consented to be included in the GP-RAJA Database may withdraw their consent at any time, and their data will be deleted from the database within 10 business days in accordance with the Digital Personal Data Protection Act, 2023.

Notification: You will receive 48-hour advance email notice before your profile is deleted from GP- RAJA due to inactivity (1 year without login/activity). The notice includes a reactivation link to prevent deletion.

Networking and Collaboration

Public Profiles may also be leveraged to connect individuals with peers and organizations with potential partners, fostering collaboration and professional growth.

Responsible Use

Users agree to provide accurate and up-to-date information in their Public Profiles. SAMS-STC reserves the right to moderate or remove content that is misleading, inappropriate, or violates the platform's terms of use.

We are committed to protecting your data and ensuring it is used responsibly to support professional growth and organizational objectives, in compliance with applicable data protection regulations.

We may additionally collect Personal Identification Information of Users that is available on the internet, such as from Truecaller, Facebook, LinkedIn, Twitter and Google, or publicly available information that we acquire from service providers. We collect this information to identify users and for better communication, processing and personalization of the Services provided by the third-party service provider.

OUR MISSION AND COMMITMENT TO TRANSPARENCY

The mission of the SAMS-STC Platform is to empower individuals, candidates, and organizations in the social sector by connecting talent with opportunities and enabling successful collaborations. We provide tailored solutions to enhance recruitment, improve operational efficiency, and foster sustainable growth.

Transparency Commitment: We are committed to responsible practices and being transparent about:

• The data we collect
• How we use it
• With whom it is shared
• Your rights regarding your data
• How to exercise those rights

HOW WE SHARE YOUR DATA

For Job Applications

When individuals/candidates use our services and tools to access job opportunities with our customers and partners, including employers or prospective employers, we share their Public Profile details (e.g. job title, educational qualifications, and relevant professional experience) exclusively with employers for positions they have specifically applied to.

Profile Recommendations: Additionally, based on instructions and preferences opted at the time of registration, SAMS-STC may circulate candidate profiles to recommend them for relevant job opportunities that align with their skills, experience, and preferences. This ensures that candidates have access to job opportunities while maintaining control over how their profiles are shared.

For Social Sector Opportunities (SSO)

For Social Sector Opportunities (SSO) such as RFPs, Tenders, Consultancies, and Events, we typically facilitate exploration or participation in opportunities.

Sharing Principle: If you respond to or express interest in any SSO posted on SAMS-STC, your Public Profile and relevant details will be shared exclusively with the respective organizations, entities, or persons managing those opportunities. This sharing is limited to the specific SSO you have responded to.

Recommendations: SAMS-STC may additionally recommend your profile for other SSOs matching your expertise, based on preferences and permissions specified by you at the time of registration.

For GP-RAJA Database Subscribers

For candidates who have consented to be included in the General Profiles Database (GP-RAJA), SAMS-STC may share your profile with subscribing employers, recruiters, or entities seeking talent for job opportunities or SSOs that align with your qualifications and preferences.

Benefit: This enables subscribers to directly contact you for present or future roles or opportunities, enhancing your visibility and access to social sector engagements and opportunities.

Withdrawal: You may withdraw from GP-RAJA at any time through Settings > Privacy > Manage Consent or by emailing support@samsstc.com.

Information We Collect

1. Contacts List.

When you sync your contacts with our Services, we import and store the contacts list to our servers. You have the option to deny us the access to your contacts list.

We also receive personal data (including contact information) about you when others import or sync their contacts with our Services.

2. Location Information.

When you give location permission, we access information that is derived from your GPS. We may use third-party cookies and similar technologies to collect some of this information.

• 3. Storage.
• When you opt-in for storage permission, we access your device storage like gallery photos.
• 4. Camera.

Granting camera permission allows us to access the photo that you click to be displayed on your resume.

• 5.Microphone.
• Voice and audio information when you use audio features.

DATA RETENTION AND DELETION SCHEDULE

SAMS-STC maintains clear data retention timelines in compliance with the Digital Personal Data Protection Act, 2023:

Job Application Data (RAJAs)

• Retention Period: 180 days from position closure (filled or cancelled)
• Trigger for Deletion: Position closure date + 180 days
• User Notice: 48 hours before deletion via email with option to export data
• Exception: Data retained if candidate explicitly requests or if legal requirement

General Purpose Database (GP-RAJA) Data

• Retention Period: 1 year from last activity (last login, profile update, or application)
• User Inactivity Definition: No login or account activity for 12 consecutive months
• Trigger for Deletion: Inactivity date + 48-hour notice period
• User Notification: Email notice 48 hours before deletion with reactivation option
• Reactivation: Simple login prevents deletion

Active User Profiles (Non-Database)

• Retention Period: For duration user maintains active account with consent
• Activity Monitoring: Profile activity resets inactivity clock upon login/update
• Exception: Data retained indefinitely if consent maintained and account active

Rejected Applications

• Retention Period: 90 days from rejection notification
• Trigger: Rejection date + 90 days OR user requests deletion
• User Notice: Email notification 30 days before deletion

Employer Account Data

• Retention Period: Duration of account + 3 years post-termination
• Rationale: Contractual, tax (7 years), and audit requirements
• Exception: Personal data of job applicants follows applicant data schedule

Audit Logs and Access Records

• Retention Period: Minimum 1 year from last transaction
• Applies to: Consent records, withdrawal requests, data access logs, deletion confirmations, breach records
• Purpose: Regulatory compliance, breach investigation, audit trail
• Breach Records: Retained for 3 years

Hour Pre-Deletion Notice

Mandatory Notification: Before deleting your data due to inactivity or purpose fulfillment, SAMS-STC will send you an email notification at least 48 hours in advance.

Notice Content:

• Reason for deletion (inactivity, purpose fulfilled, etc.)
• Data categories affected
• Link to reactivate or extend your account
• Option to export your data before deletion

User Action: You may reactivate your account or update your profile within 48 hours to prevent deletion.

Non-personal Identification Information

We may collect non-personal identification information about users whenever they interact with our site. Non-personal identification information may include the type of mobile phone and technical information about users, such as the operating system and the Internet service providers utilized including IP address and other similar information.

Usage and Technical Information

We collect information about how you interact with our Services. This information may include your IP address, geographical location, browser type, referral source, length of visit, pages viewed and items clicked.

Information Collection

For a better experience, while using our Services, you are required to provide us with certain personally identifiable information for your Public Profile, including but not limited to:

• Identity information, such as your first name, last name, gender, date of birth, username and/or similar as may be verified by voter ID card, PAN or driving license;
• Contact information, such as your mobile number, postal address, email address and telephone number;
• Professional information, such as your education, work experience, skills, salary, photo, city, area and other relevant details. Professional information helps you to get more from our Services, including helping employers find you. Please do not post or add personal data to your resume that you would not want to be publicly available.
• Feedback and correspondence, such as information you provide when you respond to surveys, participate in market research activities, report a problem with Service, receive customer support or otherwise correspond with us;
• Usage information, such as information about how you use the Service and interact with us; and
• Marketing information, such as your preferences for receiving marketing communications and details about how you engage with them.

How We Use It

To effectively provide and introduce any new Services to you, we collect and use certain information, including, but not limited to, such as:

• We may use your email id to send you updates on job/other opportunities
• We log your visits and use of our Services
• We receive data from your devices and networks, including location data
• We may further request and store additional information
• To monitor usage or traffic patterns (including to track users' movements around the Services) and gather demographic information
• To communicate directly with you, including by sending you information about new jobs, products and services
• To deliver you a personalized experience. May come in the form of messages, delivering tailor- made ads based on your interest and browsing history

To the extent permitted by applicable law, we may record and monitor your communications with us to ensure compliance with our legal and regulatory obligations and our internal policies. This may include the recording of telephone conversations for compliance, training and monitoring purposes, which will be communicated to you in advance.

How We Protect Your Information

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our app.

The data is stored securely on our servers with the following protections:

• Encryption in Transit: TLS 1.2 or higher for all data transmission
• Encryption at Rest: AES-256 or equivalent for stored data
• Access Controls: Role-based access with authentication
• Audit Logging: All data access logged and monitored
• Regular Security Audits: Annual third-party security assessments
• Breach Detection: Real-time monitoring and alert systems

Sharing Your Personal Information

We do not sell, trade, or rent users personal identification information to any third party. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates and advertisers for the purposes outlined above.

SAMS-STC may transfer personal data outside India only to countries approved by the Indian government under the Digital Personal Data Protection Act, 2023 per Section 16. Transfers to

blacklisted countries are prohibited.

Monitoring: SAMS-STC monitors government notifications quarterly to ensure compliance with approved transfer destinations.

Safeguards: All international transfers subject to equivalent data protection standards through:

• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Processor agreements requiring equivalent protection

SAMS-STC's platform integrates apps from third-party service providers that may collect personally identifiable information about you. These third parties are contractually bound to:

• Process data only per SAMS-STC's instructions
• Maintain confidentiality
• Implement appropriate security measures
• Notify immediately of breaches
• Assist with data subject rights requests
• Delete data upon instruction

Link to privacy policy of third-party service providers used by the app [...]

Data Sharing Practices

SAMS-STC serves as a platform and aggregator, connecting candidates, employers, and organizations. As a service provider, SAMS-STC has limited liability in the usage and sharing of personal information, which is shared only to facilitate platform-related services and activities. We do not disclose, transfer, or share your personal information except in the following cases:

• Affiliates and Group Companies: We may share your information with our affiliates or group companies for internal business operations, administrative purposes, general corporate activities, and to support career development or organizational needs.
• Employers and Organizations: If you post jobs, RFPs, grants, or other opportunities on the SAMS-STC Platform, your details may be shared with relevant candidates, organizations, or partners to facilitate the services offered on the Platform.
• Candidates: Information about jobs and opportunities posted on the Platform may be shared with candidates whose profiles align with the requirements. By registering on the Platform and agreeing to this Privacy Policy, candidates consent to SAMS-STC sharing such information to enable service delivery.
• Potential Recruiters and Organizations: SAMS-STC may share profiles and related details of registered candidates with recruiters or organizations if the candidate's profile matches a job description. SAMS-STC may also recommend such profiles to other employers or jobs based on the

candidate's stated preferences, for enhancing their access to suitable roles. By applying to jobs on the SAMS-STC Platform, candidates consent to sharing their credentials with employers/recruiters, who may contact them for both current or future job opportunities.

• Regulatory, Legal, or Judicial Authorities: SAMS-STC may disclose your information when necessary to:
• Respond to legal processes or court orders, or establish or defend legal rights;
• Investigate, prevent, or respond to unlawful activities, fraud, threats to safety, or violations of our Terms of Service;
• Comply with applicable laws or regulations.
• Business Transfers: In the event of a merger, acquisition, financing, or sale of assets, SAMS-STC may share your information with the parties involved in the transaction.
• Third-Party Service Providers: We may share your information with third-party service providers to:
• Deliver Platform services;
• Maintain and enhance the Platform's functionality;
• Send you communication related to offers, products, or services.

These third-party providers are contractually obligated to maintain the confidentiality of your information and may only use it for the specific purposes outlined above. All processors must comply with DPDP Act requirements.

By using the SAMS-STC Platform, candidates, employers, and organizations consent to the data- sharing practices described above, all aimed at enabling the responsible and transparent delivery of platform-related services.

SAMS-STC's Limited Role and Liability

SAMS-STC serves as a neutral platform and aggregator, providing tools and services to connect candidates, employers, and organizations. While we facilitate the sharing of information to enable these connections, we do not guarantee or assume responsibility for the accuracy, validity, or use of shared information by third parties. Users are responsible for ensuring that the information they share and access complies with applicable laws and regulations.

In the event of a data breach, SAMS-STC will:

• Notify the Data Protection Board of India within 72 hours of breach discovery
• Notify affected Users within 72 hours via email and SMS
• Provide details on: breach nature, data affected, potential consequences, mitigation measures
• Take necessary steps to contain and mitigate the breach
• Maintain detailed breach records for regulatory compliance
• Offer assistance resources (credit monitoring if financial data exposed)

User Actions: If you become aware of potential breach, report immediately to dpo@sams-stc.com.

Use of Shared Information

You agree to use the information provided through the SAMS-STC Platform solely for the intended purposes. Misuse of any shared information, including for personal or unauthorized business purposes, will result in the immediate termination of your account and restricted access to the SAMS- STC Platform in the future.

Log Data

Whenever you use our Service, including our sites, app and platform technology, such as when you view or click on content (e.g., learning video) or perform a search, install or update one of our mobile apps, post messages or apply for jobs and in a case of an error in the app we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as log-ins, cookies, your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics to identify you and log your use.

Log Data will be retained only for as long as necessary to fulfill the purposes for which it was collected, in compliance with the Digital Personal Data Protection Act, 2023.

Retention Period: Minimum 1 year from date of entry for compliance and audit purposes. Breach- related logs retained for 3 years.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

This Service does not use these "cookies" explicitly. However, the app may use third party code and libraries that use "cookies" to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Cookies will be used only for the purposes specified in this Privacy Policy, and Users may withdraw their consent at any time by:

• Adjusting browser settings to refuse cookies
• Contacting support@samsstc.com to opt-out
• Using platform settings to manage cookie preferences

Cookie Types:

• Essential (required for platform function)
• Analytics (track usage patterns, can be disabled)
• Marketing (personalized ads, can be disabled)

Service Providers

We may employ third-party companies and individuals due to the following reasons:

• To facilitate our Service
• To provide the Service on our behalf
• To perform Service-related services
• To assist us in analyzing how our Service is used

We want to inform users of this Service that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

One-to-one Messages

SAMS-STC has access to the one-to-one messages of users of our app and we review these messages periodically for moderation of trust and safety related concerns. However, SAMS-STC never shares this data with any third-party.

Security

We value your trust in providing us your Personal Information, and constantly striving to use commercially acceptable means of protecting it. Please note that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

These Services do not address anyone under the age of 18. SAMS-STC does not knowingly collect personal data from individuals under the age of 18.

Accidental Collection: If such data is collected inadvertently, it will be deleted immediately upon discovery.

Parental Notification: If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at dpo@sams-stc.com so that we are able to take necessary actions.

Age Verification: At registration, users confirm they are 18+ years old. False age declaration results in account termination.

No Impersonation or False Information to be Provided

You have to use your actual name on the SAMS-STC Platform and are required to input your correct phone number to use our Services. You will be getting a job based on your SAMS-STC account and must not falsely represent yourself as another person or representative of another person, to use our Services. You will not provide false or incorrect information, for any reason whatsoever.

Trust and Safety

SAMS-STC takes the trust and safety all its users seriously. We do not allow content that promotes abuse, fraud, MLM/network marketing, job openings that charge fees, suicide, self-harm, or is intended to shock or disgust users. Strict action is taken against such content and with people posting such messages/content in the group.

To ensure the best possible experience for all the users, we have established some basic guidelines called the Community Guidelines. The Community Guidelines gets updated periodically. You will be notified when this happens.

Disclaimer

SAMS-STC does not hold any responsibility for any incident, fraud, cheat or crime that may happen to any users. We advise you to check and verify information of other users before proceeding with any transactions or interaction among users. Also, do not share your private information on group, to prevent the use of such information for any unsafe purposes.

When you see something inappropriate or come across an offending content, click on the 3 vertical dots on the top right corner of the post and choose to 'report' post. This alerts the admins about the post and allows for necessary action to be taken.

What to do if you find suicide and self-injury related content:

If you come across content in which someone expresses suicidal thoughts or is engaging in self-harm, click on the 3 vertical dots on the top right corner of the post and choose to 'report' post. This alerts the admins about the post and allows for necessary action to be taken.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

Any changes to this Privacy Policy will be communicated to Users in accordance with the Digital Personal Data Protection Act, 2023 through:

• Email notification to registered email address
• In-app notification upon next login
• Prominent notice on platform homepage

30-day notice period before material changes take effect

Users who do not agree to changes may delete their account before changes take effect.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at:

• Email: grievance@samsstc.com
• Data Protection Officer: Kafil Akhtar
• Phone: +(011) 4081 9900; 4165 3612
• Address:
  SAMS Social Talent Connect Pvt. Ltd.
  1/1B Choudhary Hetram House, Bharat Nagar,
  New Friends Colony, New Delhi – 110 025