Privacy Policy

1. Introduction

Welcome to Exclusive Networking & Intelligence Platform ("ENIP", "we", "us", "our"), a community-building website and a mobile application available on Google Play Store and Apple App Store (collectively, the "Platform") owned and operated by Echelonera Technologies Private Limited, a company incorporated under the Companies Act, 2013, bearing CIN U62099RJ2023PTC090504, with its registered office at Flat No. M 70/110, Mansarovar, Jaipur, Rajasthan – 302020, India (the "Company").

This Policy has been prepared in accordance with, among other laws, the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made thereunder, the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, each as amended from time to time, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 and the Digital Personal Data Protection Rules, 2025.

By downloading, accessing, registering on, or otherwise using ENIP, you confirm that you have read, understood, and acknowledge this Privacy Policy as our notice of how we process your personal data. Where our processing is based on your consent, we ask for it separately in the App, for specific purposes, and you can withdraw it at any time (see Section 13). If you do not agree with this Policy, please do not use the Platform.

This Policy should be read together with our Terms of Use, End User License Agreement (EULA), Community Guidelines and Child Safety Policy, which are incorporated herein by reference.

This Policy is available in English and in Hindi and any other language of the Eighth Schedule to the Constitution of India that you request. Contact our Data Protection Officer if you need it in another language.

2. Who This Policy Applies To

This Policy applies to every person who downloads, browses, registers on, or otherwise uses ENIP ("you", "User", "Data Principal"). ENIP is intended for use only by individuals who are 18 years of age or older. By using ENIP, you represent and warrant that you meet this age requirement. Please see Section 12 (Children's Privacy and Age Restrictions) below.

3. Data We Collect

"Personal data" means any data about an individual who is identifiable by or in relation to such data.

We collect only the data that is reasonably necessary to provide, personalise, and secure the Services. Depending on which features you use, we may collect the following categories of information:

3.1 Information you give us directly

• Account registration data: name, email address (optional for mobile application), phone number, date of birth, gender (optional), profile photo (optional)
• Profile information: bio, interests, professional background, university or institution affiliation, LinkedIn link
• Communications: messages you send to our support team
• Messages, photos and videos you exchange with other users, which are stored on our servers to provide your chat history. ENIP may access this content where necessary for safety, to review reports, to enforce our Community Guidelines, or to comply with law.
• Content you create: community posts, comments and discussion content
• Resume/CV and the information extracted from it (education, professional experience, skills), where you choose to upload it
• Connections and interactions, such as connection requests, saved or viewed profiles, and reports or blocks you make

3.2 Information we collect automatically

• Device information: device type, operating system, unique device identifiers, mobile network
• Usage data: features used, time spent, interactions, clicks, search queries
• Log data: IP address, browser type, pages visited, access times, referring URLs
• Cookies and similar tracking technologies
• OTP verification data used solely to confirm your mobile number

We also automatically collect certain usage and diagnostic information such as app activity, feature usage, and crash and performance data to understand, secure and improve the Service. Where possible this information is analysed on an aggregated basis.

3.3 Information you volunteer

Any other information you choose to submit to us, including through customer support requests, surveys, or communications with our team.

We do not knowingly collect biometric identifiers, facial-recognition templates, or other Sensitive Personal Data beyond what is listed above unless you voluntarily provide it, and we do not create "virtual identity masks" or facial-recognition databases.

4. How We Collect Your Information

We collect data (a) directly from you when you create a profile, use a feature, or communicate with us; (b) automatically, through your use of the Platform (such as device information, log data, and interaction history); and (c) from trusted third-party service providers who support specific features, as described in Section 7 and Section 8.1.

5. Permissions We Request and Why

• Camera Access — We request access to your device's camera for user-initiated features: taking or uploading a profile photo or media and participating in audio/video calls. The camera is activated only for the feature you initiate and is never used in the background. Live video during calls is streamed through our real-time communication provider and is not recorded or stored by us.
• Microphone Access — We request microphone access for user-initiated voice and video calls and live audio sessions. Audio is captured only for the duration of the call or session you initiate and is processed in real time through our communication provider. We do not listen in the background, and live call audio is not stored by us.
• Photo/media Access — Profile photos and media you upload are stored securely with your account until you delete them or your account is deleted. Resume files are not stored. Text is extracted from your resume on your device and sent to our AI infrastructure partner to fill in your profile, and request logs containing that text are deleted within 30 days. If you delete your account, uploaded media is removed within 30 days. Live video/audio during calls is not stored.
• Internet Access — Required automatically to let the app communicate securely with ENIP's backend for authentication, chat, discovery, and media uploads. This permission does not require runtime approval.
• Precise real-time geolocation data — With your permission, we collect approximate or precise location to enable nearby-user discovery and recommendations and to provide city/place autocomplete during profile setup through Google Maps / Places. Location access is optional: you can decline it or turn it off in device settings and continue to use other features. Other users see only an approximate distance/area rather than your exact location.
• SMS (OTP only) — ENIP uses SMS strictly to deliver and auto-read a one-time password for mobile-number verification during sign-up and login. We do not read, store, or access the general content of your SMS inbox, and no broad SMS-reading permission is required where the Android SMS Retriever / SMS User Consent APIs (or the iOS equivalent) are used.

You can grant or withdraw any of these permissions at any time through your device's operating-system settings. Withdrawing a permission may limit or disable the corresponding feature but will not affect your ability to use the rest of the Platform.

Any particular access is used only while you are actively using the relevant feature. We do not access these permissions in the background, and we do not create standing recordings or surveillance of your device.

6. How We Use Your Information

We use your data described above to:

• create, verify, and maintain your account, including OTP-based authentication;
• operate core discovery and matching features, including showing you relevant profiles and recommendations;
• enable communication features such as chat, voice, and video calls;
• power AI-based search understanding, ranking, recommendations, and matching (see Section 7);
• maintain the safety, security, and integrity of the Platform, including detecting fraud, impersonation, and violations of our Community Guidelines;
• review and act on reports of content or conduct that violates our Community Guidelines, verify age, and report unlawful content (including child sexual abuse material) to the appropriate authorities where the law requires;
• respond to your requests, questions, and support tickets;
• send you service-related notifications; and
• comply with applicable law, regulation, legal process, or enforceable governmental request.

7. AI Features and Automated Processing

ENIP uses artificial intelligence to support search understanding, profile discovery, recommendations, matching, and ranking, and to help extract structured profile information from resumes you choose to upload. These AI features are designed to improve your experience on the Platform and are not used to make any decision that produces a legal effect on you or similarly significantly affects you.

Some AI features (such as AI-powered search, matching and resume information extraction) involve sending the relevant input data such as your search queries and, where you upload a resume, the resume content to our AI infrastructure partner, OpenRouter, which may process such requests using models hosted outside India depending on the model selected.

ENIP does not permanently store call transcripts arising from voice or video calls, and does not create or maintain biometric templates, facial-recognition databases, or "virtual identity mask" profiles of any User.

8. Data Sharing

We do not sell or rent your personal data and we do not share it with third parties for their own marketing purposes. We share your personal data only:

8.1 — With other users

ENIP is anonymous by default. Other users can see your professional details, such as your current role, experience, company, skills and education. Your name, profile photo and other identifying details are shared with another user only after you and that user both agree to a mutual reveal, and only the details you choose to reveal. ENIP is not responsible for how other users use information they see on the Platform.

8.2 — With Service Providers

We share information with third-party vendors who perform services on our behalf, including cloud hosting, analytics, customer support, email delivery, push notifications, and AI infrastructure. These parties are contractually bound to handle your data securely and only for specified purposes. List of the third-party vendors are mentioned below:

• Firebase Cloud Messaging (Google) — to deliver push notifications (push token only)
• LiveKit — to enable real-time voice and video calling (call/media stream data only)
• Google Maps / Places — to power nearby-discovery features (location queries only)
• Firebase Analytics and Firebase Crashlytics (Google) — where enabled, for aggregate usage analytics and crash diagnostics
• OpenRouter — to power AI-assisted search, matching and resume information extraction (search queries and extracted resume text)
• Google Cloud — to host our servers, chat data and system logs

We may share aggregated or anonymised data with venue partners, institutional partners, and event organisers to enable Platform features. Individual-level data is shared only with your consent.

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

9. Cross-Border Data Transfer

Your primary account and profile data is stored on servers located in India. Certain AI-related requests may be routed through and processed by our AI infrastructure partner using models hosted outside India, depending on the specific model selected for that request. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to receive a level of protection consistent with this Policy and applicable law, including the DPDP Act's provisions on cross-border transfer of personal data.

10. Data Security

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• encryption of data in transit (TLS/HTTPS);
• secure authentication and OTP-based verification;
• role-based access control and authorisation checks;
• secure backend infrastructure with restricted production access;
• audit logging and security monitoring; and
• periodic vulnerability assessments.

No method of electronic storage or transmission is completely secure, and while we work hard to protect your personal data, we cannot guarantee its absolute security.

11. Data Retention and Account Deletion

We retain your personal data for as long as your account is active or as needed to provide you services. You may delete your account at any time through the in-app account deletion option. We will delete or anonymise your personal data and account from the App immediately and from our backend systems within 30 days, except where we are required to retain data for legal compliance, dispute resolution, or enforcement of our agreements.

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide and maintain our services, comply with applicable legal and regulatory obligations, resolve disputes, enforce our agreements, prevent fraud and abuse, and maintain the security and integrity of our services. Upon expiry of the applicable retention period, or where the personal data is no longer required for the relevant purpose and no lawful basis for continued retention exists, we will delete, anonymise, or otherwise securely dispose of such personal data in accordance with applicable law and our data retention and deletion procedures. Where you request deletion of your account, we will process such request within a reasonable period, subject to any personal data that we are required or permitted to retain under applicable law, including for legal, regulatory, tax, accounting, security, dispute-resolution, or enforcement purposes.

12. Children's Privacy, Age Restrictions and Child Safety

ENIP is strictly for Users who are 18 years of age or older. We do not knowingly permit anyone under 18 to register for or use ENIP, and we do not knowingly collect personal data from anyone under 18. Users must confirm their date of birth and confirm they are at least 18 years old during onboarding. If we become aware that a person under 18 has created an account or provided us with personal data, we will take steps to delete the relevant account and data. If you believe a minor is using ENIP, please contact or inform us by writing at [email protected]. For more details refer to our Child Safety Policy.

13. Your Rights as a Data Principal

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and the processing activities carried out on it;
• Correct, complete, and update inaccurate or outdated personal data;
• Erase personal data that is no longer necessary for the purpose for which it was collected, including by deleting your account;
• Withdraw consent to our processing of your personal data at any time, with effect for future processing (withdrawal will not affect processing already carried out, and may limit or end your ability to use certain features);
• Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity;
• Grievance redressal — raise a complaint about our handling of your personal data with our Data Protection Officer, and, if unresolved, with the Data Protection Board of India.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. You can withdraw consent at any time from app settings or by writing to [email protected]; withdrawing is as easy as giving consent. You may complain to the Data Protection Board of India only after you have used our grievance redressal process. We will respond within the time frame required under applicable law.

14. Cookies and Similar Technologies (Website)

Our website may use cookies and similar technologies to keep you signed in, remember your preferences, and understand aggregate usage of the website. You can control or disable cookies through your browser settings; doing so may affect certain website functionality.

15. Data Protection Officer Contact

In accordance with applicable Indian law, we have designated a Data Protection Officer to address any questions, concerns, or grievances regarding this Policy or our handling of your personal data:

We will acknowledge and address grievances in accordance with the timelines prescribed under applicable Indian laws.

16. Data Breach Notification

In the event of a personal data breach that is likely to affect you, we will notify you and, where required, the Data Protection Board of India, in the manner and within the timelines prescribed under the DPDP Act and its rules.

17. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Policy on the Platform with a revised "Last Updated" date, and, where changes are material, we will provide additional notice (for example, an in-app notification or email). Your continued use of ENIP after such changes constitutes your acceptance of the updated Policy.