Vibly

Privacy policy

Version 2026-10-13. Vibly runs Vibly (“we”, “us”).

This explains what personal data Vibly collects, why, who sees it, and the choices you have. We handle it in line with India’s Digital Personal Data Protection Act, 2023 and other applicable law. For this service we decide why and how your data is used (we are the “data fiduciary”).

1. What we collect

  • Account. Your email address (needed to sign in), the time you signed in, and a session cookie. If you sign in with LinkedIn, we receive your LinkedIn member identifier, name and verified email as LinkedIn provides them, and we record that your account is linked.
  • Profile (candidates). What you add or import: name, headline, location, summary, experience, education, skills, a LinkedIn link, your usual answers (expected pay, level, experience, availability, location) and your visibility choices. If you upload a CV, PDF or text to import, we read it to fill in your profile.
  • Applications. Your answers, the declarations you make when applying, any note and links you add (for example a resume link), and later activity on the application: follow-up answers, interview answers, messages, and withdrawal.
  • Companies and listings. Company details, listings, application questions, the people in your company workspace, and your notes, ratings, stage changes and messages about applicants.
  • Chats. What you type to the assistants, and their replies, so you can see your history.
  • Optional phone number. Only if you choose to verify it. Phone verification is currently switched off.
  • Use of the service. Token and reward records, reports you file, security and audit logs (such as when a listing is published), and technical data such as IP address and browser, used to keep the service safe and working.

We do not ask for your current salary, and we do not knowingly collect sensitive categories of data. Please do not put them in free-text fields.

2. Why we use it

  • To run the service: sign you in, show listings, let you apply, and let companies review applications.
  • To produce AI assistance: draft listings, screen applications against a listing’s requirements, answer companies’ questions about their applicants, and answer questions in chat (see section 4).
  • To send you email you need: sign-in links, messages from companies, interview invitations, and service notices. Marketing email is not sent without your choice, and email preferences and an unsubscribe link are provided.
  • To keep the platform safe: prevent fraud and abuse, enforce our terms, handle reports, and keep audit records.
  • To meet legal obligations and to improve the service using de-identified or aggregated data.

Where the law requires your consent, we rely on it: by using the service and sharing information you agree to this use. You can withdraw consent at any time (see section 7); the service may then be unable to work for you.

3. Who sees your information

  • Companies you apply to see your name, your application, your declarations, the profile details you chose to share, and whether your email, phone and LinkedIn are verified. They do not see your email address or phone number.
  • Everyone can see a public listing and its company page. A candidate profile is private unless its owner switches on a public profile in Settings; it is then visible to anyone who has its link (and kept out of search engines), showing only the sections the owner has left on, never an email address or phone number. The owner can switch it off or replace the link at any time.
  • Members of a company workspace see that company’s applicants. They are bound to keep it confidential.
  • Our service providers who process data for us under contract: cloud hosting, database hosting, email delivery, AI model providers, and sign-in providers such as LinkedIn. They may use it only to provide their service to us.
  • Authorities where the law requires, and a buyer or successor if the business changes hands (you would be told).

We do not sell your personal data.

4. AI and automated assessment

Applications are screened by an AI model that compares what you submitted with the listing’s requirements and gives the company a Match, Maybe or No match with reasons and evidence. Chat assistants answer using the platform’s data. To do this, the relevant text (your answers, profile details and declarations, never your email or phone number) is sent to our AI providers for processing. The AI result is a first-pass screen. It does not make hiring decisions, and a person at the company decides. Read more on how we use AI.

5. Where it is stored, and how long

Data is held with our cloud and database providers, which may be located outside India. We use access controls, encrypted connections and limited staff access, and we aim to keep data only as long as needed.

  • We keep your account and profile while your account is open.
  • Applications and the company’s records about them are kept so the company can run its hiring and keep an accurate record.
  • Audit, security and token records are kept as long as needed for safety, fraud prevention, accounting and legal reasons.
  • When you ask us to delete your account we delete or de-identify your personal data, except what we must keep by law or for legitimate safety and fraud purposes. Backups are overwritten on their normal cycle.

6. Cookies and local storage

We use a sign-in session cookie and similar storage that is strictly needed to run the service (for example to remember an application draft on your device, or whether a panel is open). We do not use advertising or tracking cookies. Because of this we do not show a cookie banner. If that changes, we will ask first.

7. Your rights and how to use them

You can ask us to: show you the personal data we hold about you and a copy of it; correct or complete it; delete it; withdraw your consent; and answer a complaint. You can already edit your profile and answers yourself, withdraw an application, and manage email preferences.

To use any other right, email us from the address on your account, say what you want, and we will confirm your identity and respond within 30 days. Self-service account deletion and data export are being added; until then these requests are handled by our team. You may also nominate another person to exercise your rights if you die or become unable to.

Use the contact address shown on our sign-in emails.

8. Children

Vibly is for people 18 and over. We do not knowingly collect data from children. If you think a child has an account, tell us and we will remove it.

9. Complaints

If you are not satisfied, write to our Grievance Officer. We will acknowledge within 2 working days and aim to resolve within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India once it is in operation for your complaint.

Use the contact address shown on our sign-in emails.

10. Changes

We may update this policy. The version date is at the top. If a change is significant we will tell you in the product or by email.