Privacy Policy

Overview & Scope

Stellanex ("Stellanex," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit our websites, use our products or services, interact with us, or apply for positions with us (including full-time, part-time, contract, and internship roles).

This Policy applies to information we process as a data controller in connection with our websites, services, recruitment activities, and related communications. It does not cover processing by third-party websites or services that have their own privacy policies.

For most processing described in this Policy, the data controller is Stellanex Pvt. Ltd., India. You can contact us using the details in the "Contact Us" section below if you have questions about this Policy or our data practices.

Key Definitions

For ease of understanding, when we use the following terms in this Policy, we mean:

• Personal data / personal information – any information that identifies or can reasonably be linked to an identified or identifiable individual.
• Processing – any operation performed on personal data, such as collecting, recording, organizing, storing, using, disclosing, or deleting it.
• Controller – the organization that decides why and how personal data is processed (in most cases, this is Stellanex).
• Service providers – third-party companies that process personal data on our behalf to help us provide services, such as hosting, analytics, background verification, or communications.

Information We Collect

The information we collect about you depends on how you interact with us—for example, whether you are visiting our website, subscribing to updates, using our services, or applying for a role. We may collect the following categories of information:

How We Collect Information

We collect personal information in the following ways:

• Directly from you – when you fill out forms, create an account, apply for roles, participate in interviews or assessments, contact us, or otherwise interact with us.
• Automatically – when you use our websites or services, through cookies, logs, and similar technologies.
• From third parties – such as recruitment platforms, background or academic verification providers, analytics and hosting providers, or professional or academic references you have provided.

How We Use Your Information

We use the information we collect for the purposes set out below. Depending on your location and the context, our processing may be based on different legal grounds, such as your consent, the need to perform a contract with you, our legitimate interests, or compliance with legal obligations.

• Providing and improving our services: To operate, maintain, and improve our websites, products, and services, and to develop new features. (Typically based on performance of a contract or our legitimate interests.)
• Recruitment & hiring: To process job and internship applications, evaluate qualifications, conduct interviews and assessments, perform background or academic verification where appropriate, and make hiring decisions. (Typically based on steps prior to entering into a contract, our legitimate interests, and legal obligations.)
• Managing employment or internship relationships: To manage onboarding, payroll or stipends, benefits, performance, and compliance obligations for employees and interns. (Typically based on contracts and legal obligations.)
• Communications: To respond to your inquiries, send updates about your applications, provide information about our services, and communicate important notices such as policy changes or security alerts. (Typically based on your request, performance of a contract, or legitimate interests.)
• Analytics & improvement: To understand how our websites and services are used, diagnose issues, and improve performance and usability. (Typically based on our legitimate interests and, where required, your consent for certain cookies or similar technologies.)
• Security & fraud prevention: To monitor, detect, and prevent unauthorized access, fraud, abuse, or other harmful activities, and to maintain the security of our systems. (Typically based on legitimate interests and legal obligations.)
• Marketing & engagement: To send you newsletters or updates about our work or events, where permitted by law and your preferences. (Typically based on your consent or our legitimate interests; you can opt out at any time.)
• Legal & regulatory compliance: To comply with applicable laws, regulations, and legal processes, respond to lawful requests, and establish, exercise, or defend legal claims.

Where we rely on consent, you may withdraw your consent at any time using the mechanisms provided (for example, cookie settings, unsubscribe links, or our contact details), without affecting the lawfulness of processing before withdrawal.

Information Sharing & Disclosure

We do not sell your personal information. We may share your information only as described in this Policy and in accordance with applicable law:

• Within Stellanex: With teams and personnel who need access to the information for the purposes described in this Policy, such as HR, recruiting, hiring managers, mentors, and relevant project or operations teams.
• Service providers: With trusted third-party service providers that perform services on our behalf, such as hosting and infrastructure providers, applicant tracking systems, background or academic verification agencies, analytics providers, communication tools, and security and support services. These providers are contractually required to use the data only as instructed and to protect it appropriately.
• Partners and clients (where relevant): For certain client-facing roles or projects, we may share limited information about candidates or team members with clients, where necessary and appropriate, and subject to confidentiality obligations.
• Legal and regulatory authorities: We may disclose information when required to do so by law, regulation, court order, or governmental request, or when we believe such disclosure is necessary to comply with legal obligations or to protect our rights or those of others.
• Business transfers: In the event of a merger, acquisition, reorganization, sale of assets, or insolvency event, your information may be transferred to the acquiring or successor entity, subject to appropriate safeguards and continued protection consistent with this Policy.
• With your consent: We may share your information with third parties when you instruct us to do so or otherwise provide your explicit consent.

International Transfers

Because we operate globally and use international service providers, your information may be stored and processed in countries other than the one in which it was collected. Where required by applicable data protection laws, we implement appropriate safeguards (such as contractual protections) to ensure that your information remains protected when it is transferred across borders.

Data Security

We implement technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and, where appropriate, at rest
• Access controls, authentication mechanisms, and role-based permissions
• Secure development, logging, and monitoring practices
• Vendor due-diligence and contractual security requirements for service providers
• Employee and intern training on data protection and privacy
• Secure backup and recovery procedures

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. Where you use accounts or credentials, you should also take steps such as using strong, unique passwords and not sharing them with others.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, for tax, accounting, or legal defense purposes). In general:

• Full-time job applications: We typically retain application data for up to 2 years for recruitment analytics and future opportunities, unless you request earlier deletion, subject to legal requirements.
• Internship applications: We typically retain internship application data for up to 1 year for future opportunities, unless you request earlier deletion, subject to legal requirements.
• Employee records: Employment records are retained as required by applicable labor, tax, and social security laws.
• Internship records: Internship records are generally retained for up to 2 years after completion for reference and potential conversion opportunities, unless a longer period is required by law.
• Website usage data: Analytics and log data are typically retained for up to 2 years to help us understand usage patterns and maintain security.

When personal information is no longer required, we will delete it, anonymize it, or securely store it in accordance with our data retention practices and applicable law.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and to understand how our services are used. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We may use different types of cookies, including:

• Strictly necessary cookies: Required for the website to function properly (for example, security and session management).
• Functional cookies: Help remember your preferences and settings.
• Analytics cookies: Help us understand how visitors use our site so we can improve performance and user experience.
• Marketing or advertising cookies: May be used, where applicable, to measure the effectiveness of campaigns or to show relevant content on other sites.

You can control or delete cookies through your browser settings and, where implemented, through any cookie banner or preferences center we provide. Please note that disabling certain cookies may impact the functionality or performance of our website.

Marketing, Communications & Profiling

We may send you communications about our services, events, or updates if you have signed up to receive them, requested information, or where permitted by law based on our legitimate interests. You can opt out of marketing communications at any time by using the unsubscribe link included in such emails or by contacting us.

We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significant impacts on you in the context of recruitment or general use of our websites. Where we use analytics or scoring to support decisions, those decisions also involve human judgment.

Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include:

• Access: The right to request access to the personal information we hold about you.
• Correction: The right to request correction of inaccurate or incomplete information.
• Deletion: The right to request deletion of your personal information, subject to legal or contractual requirements.
• Restriction & objection: The right to request that we restrict or stop certain processing, or to object to processing based on our legitimate interests or for direct marketing.
• Portability: The right to receive certain personal information in a structured, commonly used format and to have it transmitted to another organization, where technically feasible.
• Withdrawal of consent: Where we rely on consent, the right to withdraw consent at any time.

The availability of these rights and the way they can be exercised may differ depending on your jurisdiction (for example, EU/UK residents, Indian residents, certain US states, etc.). You may also have the right to lodge a complaint with a data protection authority or other regulator in your jurisdiction.

To exercise your rights, please contact us using the methods described in the "Contact Us" section. We may need to verify your identity before responding to your request. We aim to respond within 30 days, or within any legally-required timeframe. In some cases, we may be unable to fully comply with a request (for example, where we must retain certain data for legal reasons), and we will explain the reasons if this occurs.

Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by Stellanex. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party websites or services you visit.

Children's Privacy

Our websites and services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information without appropriate consent, please contact us so that we can take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice (such as a banner on our website). We encourage you to review this Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices (including requests to exercise your privacy rights), please use the form below or contact us using the other details provided: