Privacy Policy

IndiGate (“we”, “our”, “Indobox Group”) operates cross-border HR and talent-placement services between India and Japan.

This Privacy Policy describes how we collect, use, store, transfer, and protect personal information of:

• Job seekers (“Candidates”)
• Employers / Partner companies (“Clients”)
• Users of our website (https://indigate.work)
• Participants in IndiGate programs, internships, interviews, or training

This policy complies with:

• Japan Act on the Protection of Personal Information (APPI / 個人情報保護法)
• India Digital Personal Data Protection Act (DPDP Act, 2023)
• Relevant international standards for HR data management

By accessing or using IndiGate, you consent to the terms of this Privacy Policy.

Primary Data Controller (Japan):

Indobox Inc.

Address: 1-2-32 Tsurumai, Showa-ku, Nagoya, Aichi, Japan

License: Employment Placement License No. 23-ユ-303072

Joint Data Controller (India):

Indobox India Private Limited

Hyderabad, Telangana, India

Both entities may process your data as part of IndiGate’s cross-border HR service.

3.1 Candidate Information

We may collect:

• Name, gender, date of birth
• Contact information (email, phone, address)
• Resume / CV (EN & JP)
• Educational background
• Skills and certifications (JLPT, engineering skills, etc.)
• Employment history
• Nationality and visa status
• Interview videos, assessment results
• Preferences (desired job type, location, salary)
• Any other information required for job application

3.2 Employer Information

• Company name, address, department
• Contact person details
• Job descriptions, hiring requirements
• Communication history with IndiGate

3.3 Website & App Information

• IP address, device information
• Browser type, access logs
• Form submission content
• Cookies (for session management only)

We use personal data for:

1. Recruitment and job placement activities
2. Matching candidates with employers
3. Internship management and coordination
4. Japanese language training and pre-employment programs
5. Visa application support and relocation assistance
6. Communication with users
7. Improvement of IndiGate services
8. Legal compliance and license obligations
9. Preventing fraudulent or harmful activity

We do not sell personal data.

Under APPI and DPDP, IndiGate processes data under:

• Consent of the individual
• Execution of HR-related services requested by users
• Legal obligations (Japan employment laws)
• Legitimate business interests
• Contractual necessity

Because IndiGate operates in Japan and India, your data may be transferred between:

• Indobox Inc. (Japan)
• Indobox India Pvt. Ltd. (India)

We ensure that both entities follow strict confidentiality rules and appropriate security standards.

We retain personal data for:

• Active candidates: up to 5 years
• Placed candidates: 7 years (legal requirement in Japan)
• Employer records: 7 years
• Website logs: 1 year

You may request deletion at any time unless legal obligations require retention.

We implement:

• Access control to candidate databases
• Encryption of stored data
• Secure communication channels (HTTPS)
• Staff confidentiality agreements
• Regular monitoring for unauthorized access

We may share candidate data with:

• Potential employers (with consent)
• Japanese and Indian authorities (for visa purposes)
• Training partners (JLPT, onboarding, etc.)
• Background verification vendors (if required)

We never share data with unrelated third parties.

Candidates and employers may:

• Request access to their data
• Correct inaccuracies
• Request deletion
• Withdraw consent
• Request disclosure of usage purposes
• File a complaint

Contact: contact@indigate.work

We may update this policy. The latest version will always be published on our website.