Your information, handled with care.

This notice explains what HRIN collects when you use the HRIN app, why we collect it, who it is shared with, how long it is kept, and the rights you have under the Digital Personal Data Protection Act, 2023.

Version 2.1 · Effective 13 September 2026

1. Who we are

HRIN is operated by ClanHQ Private Limited, Greater Noida, Uttar Pradesh, India. The HRIN app is at app.thehrin.org.

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for your personal data. That means we decide what is collected and why, and we are answerable to you for how it is handled. The Act calls you the Data Principal. This notice is written for you.

This notice covers the HRIN app, the website at thehrin.org, and HRIN programmes including CHAP. It is version 2.1, effective 13 September 2026. The app records which version you accepted when you joined.

2. What we collect

Here is everything we collect, grouped by the reason we collect it.

Account and verification. Your full name, email address, mobile number, LinkedIn profile URL, employer, designation, city and timezone. We use this to check that you are a working HR professional. Every application is reviewed by a person, not by an automated system.

Profile and directory. Your username, headline, bio, photo, skills, HR function, years of experience, interest tags, open-to-work flag, and the day and month of your birth.

We never collect your birth year. We collect only the day and the month, and only so the community can show birthday and anniversary cards. If you would rather not have that shown, leave the field empty.

Activity. Your posts, comments, reactions, bookmarks, poll votes, any reports you make about another member's content, and your last-seen time.

Poll votes are visible to community admins. They are not anonymous. The app tells you this on every poll before you vote.

Technical. A login session cookie, a referral cookie kept for 30 days, browser push subscription tokens if you turn on notifications, the one-time codes we email you to sign in, and standard server logs.

Courses and payments. If you buy a course, we keep an order record: your name, email address, the course, the amount paid, the date, and the payment reference Razorpay gives us. Your card, UPI and bank details are entered directly with Razorpay and never reach us.

Certificates are public. When you complete a course, your certificate is published as its own web page showing your name and the course you completed. Anyone with the link can open it. This is deliberate, so that an employer or anyone else can check the certificate is genuine.

3. Why we collect it, and your consent

We use your personal data only for these purposes:

To verify that you are a working HR professional.
To create and run your account and your public profile.
To show you in the member directory and let other members find you.
To let you post, comment, react, bookmark and vote in the community.
To send you sign-in codes, service messages, and notifications you have turned on.
To keep the community safe and to act on reports.
To process payments for courses, issue certificates, and keep the order records that tax and company law require.
To meet our legal obligations.

We rely on your consent, which you give when you apply to join and accept this notice. You can withdraw your consent at any time. If you withdraw it, we can no longer run your account, so withdrawing consent means closing the account. You can do that yourself from Settings in the app.

Order records are different. We keep them because the law requires it, not because of your consent, so withdrawing consent or deleting your account does not remove them. Section 7 explains how long they are kept and in what form.

We do not sell your personal data. We do not use it to train machine learning models. We do not use it for advertising.

4. Invite links and referrals

Members can invite people to HRIN with a personal invite link. If you apply through someone's link, we record that you came from them, and we tell that member whether your application was approved or not approved.

We are telling you this at the point we collect your application, because it is a disclosure of your information to another person. If you would rather your referrer was not told, apply without using the invite link.

5. The referral leaderboard

Members who bring other people into HRIN are listed by name on a leaderboard inside the community, ranked by how many of their referrals were approved. This is visible to other members. It shows the referrer's name, not the names of the people they referred.

7. How long we keep it

Active accounts. We keep your data for as long as your account exists.
Deleted accounts. When you delete your account we remove your profile, your posts and your comments. We keep one administrative record of the deletion, holding your name, email address and the date, for three years. We keep it so we can show that the deletion was properly carried out if it is ever questioned. It is not used for anything else. Order records for any course you bought are also kept, as set out below.
Order records. Kept for 8 years under the Companies Act, 2013, which is longer than the 6 years required under GST law. They survive account deletion. When you delete your account, the order record is anonymised: the amount, date, course and payment reference are kept, and it is no longer linked to your profile.
Rejected applications. Deleted 12 months after the decision.
Signups that were never verified. Deleted after 6 months of no activity.
One-time email sign-in codes. Valid for 15 minutes, then discarded.
Server logs. Kept for 90 days.

Copies in routine encrypted backups are overwritten as those backups cycle out.

8. Cookies

We use two cookies. Neither is used for advertising.

Login session cookie. Keeps you signed in as you move between pages. Without it you would have to sign in on every page.
Referral cookie. Set when you arrive through a member's invite link, and kept for 30 days. It records which member referred you so the referral can be credited when you apply.

You can clear or block cookies in your browser. If you block the login session cookie you will not be able to sign in.

9. Your rights

The Digital Personal Data Protection Act, 2023 gives you these rights. To use any of them, write to grievance@thehrin.org from the email address on your account.

Access. Ask us for a summary of the personal data we hold about you, what we have done with it, and who we have shared it with.
Correction and completion. Ask us to correct data that is wrong, complete data that is missing, or update data that is out of date. You can edit most of your profile yourself in the app.
Erasure. Ask us to delete your personal data. You can also delete your own account at any time from Settings in the app. Section 7 sets out what is removed, and the records we are required to keep.
Withdraw consent. Withdraw your consent at any time. Because we cannot run an account without it, this means closing your account.
Grievance redressal. Raise a complaint with our Grievance Officer about anything in this notice or how your data has been handled. See section 10.
Nomination. Nominate another person to exercise these rights on your behalf if you die or become unable to act for yourself. Write to the grievance address with the name and contact details of the person you are nominating.

We do not charge for any of this. We will ask you to confirm who you are before we act on a request.

10. Grievance Officer

If something about your data is wrong, or a request of yours has not been dealt with, contact our Grievance Officer.

Grievance Officer: Kapil Saxena
Email: grievance@thehrin.org
Operator: ClanHQ Private Limited, Greater Noida, Uttar Pradesh, India

We will acknowledge your complaint within 3 working days and give you a substantive response within 30 days.

If you are not satisfied with our response, or we do not respond in time, you can complain to the Data Protection Board of India.

11. Security and breach notification

We take reasonable technical and organisational measures to protect your data. Access to member data is limited to the people who need it to run HRIN. Data is encrypted in transit and at rest by our providers.

No system is completely secure. If your personal data is compromised, we will notify you and the Data Protection Board of India, as the Act requires. We will tell you what happened, what data was involved, and what you should do.

12. Age

HRIN is for working HR professionals aged 18 and over. We do not knowingly create an account for anyone under 18. If you believe someone under 18 has an account, write to the grievance address and we will remove it.

13. Languages

This notice is published in English. You can ask for it in any language listed in the Eighth Schedule to the Constitution of India by writing to grievance@thehrin.org.

14. Changes to this notice

If we change what we collect or what we do with it, we will publish a new version here with a new version number and effective date, and tell members in the app. The app records which version you accepted. Where the change needs your consent, we will ask for it before the change applies to you.

15. Contact

For anything about your personal data:

Grievance Officer: grievance@thehrin.org
Everything else: hr@thehrin.org

ClanHQ Private Limited, Greater Noida, Uttar Pradesh, India.