Privacy Policy

Your privacy is our priority. Learn how we collect, protect, and handle your personal information at Flarebox.

Effective Date: July 19, 2026

Introduction

Our commitment to protecting your personal data.

At Flarebox, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. By signing in or creating an account (including via Google, Microsoft, or LinkedIn), you acknowledge that you have read this Privacy Policy and our Terms of Service and agree to the practices described here.

We comply with applicable Indian data-protection expectations and with Google's API Services User Data Policy (including Limited Use) and Microsoft identity platform requirements. Where Google or Microsoft require app verification for additional access, we complete that process and only ask for the minimum access needed for the features you choose to use.

Data Protected

Industry-standard encryption

Transparent

Clear data practices

Your Control

Manage your data rights

Information We Collect

Types of data we collect when you use our services.

Personal Information

  • Name and email address when you create an account
  • Profile information (college, graduation year, professional details)
  • Communication preferences and notification settings
  • Google / Microsoft / LinkedIn account information when you sign in or connect calendars
  • Student and alumni profiles, academic details, skills, and resumes you upload for network and opportunity features

Usage Information

  • Log data (IP address, browser type, pages visited)
  • Device information and browser details
  • Location information (city/country level only)
  • Cookies and similar tracking technologies

How We Use Your Information

The purposes for which we process your data.

Service Provision

  • • Provide and maintain our platform
  • • Connect you with alumni and mentors
  • • Connect students, alumni, colleges, and companies on the campus network
  • • Support opportunities such as drives, referrals, and interviews where relevant
  • • Schedule meetings via connected Google or Microsoft calendars when you enable them
  • • Manage your account and preferences

Communication

  • • Send service updates and announcements
  • • Provide customer support
  • • Respond to your inquiries
  • • Send important notifications

Improvement

  • • Analyze service usage patterns
  • • Improve user experience
  • • Develop new features
  • • Monitor platform performance

Security

  • • Detect and prevent fraud
  • • Address technical issues
  • • Ensure data security
  • • Comply with legal requirements

Profiles & Opportunity Sharing

Flarebox is a campus network. Opportunity and hiring features are one part of that network.

Flarebox is India's AI + alumni powered campus network. Community, mentorship, alumni connection, and college engagement are core to the product. Where opportunity features are used (for example campus drives or company talent discovery), your profile information, academic details, skills, assessment results, and resume may be shared with authorized college staff and partner companies for shortlisting, interviews, and related opportunity workflows — not as a stand-alone job board, and not for sale to data brokers.

What may be shared

  • Name, email, college, branch, year, and academic fields you provide
  • Skills, projects, and other profile fields on Flarebox
  • Resume / CV files you upload or attach when using opportunity features
  • Application status, assessment scores, and interview scheduling metadata when applicable

Who receives it & why

  • Partner companies participating in network opportunity features
  • Authorized college / campus admins managing eligibility and approvals
  • Limited to operating those features — not for advertising or resale
  • We do not sell student or alumni profiles to data brokers

You can update or remove resume files and profile fields from your account settings where available, or contact support@flarebox.in for access or deletion requests subject to legal and operational record-keeping needs.

Campus & Company Join (MoU)

Organizations must accept terms and complete MoU steps before joining.

Colleges (campus) and companies that request access to Flarebox organization features must complete our join process. Before approval, authorized representatives must review and accept these Terms, this Privacy Policy, and the applicable Memorandum of Understanding (MoU) / agreement presented in the join flow, then upload the signed MoU and any required verification documents.

  • We process organization details, contact information, verification uploads, and signed MoU files to evaluate and grant access.
  • MoU and join documents are stored securely and used for onboarding, compliance, and partnership administration — not sold.
  • Full obligations for campus and company joiners are set out in the Terms — Campus & Company.

Google User Data & API Usage

How we use Google sign-in and optional Calendar connect.

Flarebox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We complete Google's app verification where required and only use Google data to provide or improve the features you enable — never for advertising or sale to third parties. Platform emails (notifications, invites) are sent through Flarebox's own email service.

How we use Google access

  • Sign-in: We use your Google name, email, and profile photo to create and authenticate your Flarebox account.
  • Google Calendar (optional): Only after you explicitly connect Calendar. We use this access to create, update, and cancel interview or meeting events; check availability so we can avoid conflicts; and add Google Meet links when you choose Meet. Calendar data is not used for advertising.

What Google data we store

  • Basic profile (name, email, avatar) for your Flarebox account
  • OAuth access/refresh tokens needed to call Google APIs you authorized; stored securely and used only for those features
  • Calendar event IDs / Meet links created through Flarebox for interviews you schedule (so we can update or cancel them)
  • We do not sell Google user data. We do not use Google user data for ads. Human access is limited to security, abuse, or with your consent / legal requirement

Your control

Microsoft Account & Graph API

How we use Microsoft sign-in, Outlook Calendar, and Teams meetings.

When you sign in with Microsoft or connect Outlook Calendar, Flarebox uses Microsoft identity and Microsoft Graph only for authentication and the calendar / online-meeting features you enable. We follow Microsoft's platform terms and only use this access for those stated purposes.

How we use Microsoft access

  • Sign-in: We use your Microsoft identity (name, email, profile) to create and keep your Flarebox session signed in securely.
  • Outlook Calendar: When you connect Microsoft for scheduling, we create, update, and manage interview events on your calendar so candidates and recruiters get the right invites.
  • Teams meetings: When you choose Teams as the meeting option, we create online meeting links for interviews.

What we store

  • Profile basics and OAuth tokens needed for the features above
  • Event / meeting identifiers created through Flarebox for reschedule or cancel
  • We do not sell Microsoft user data or use it for advertising

Revoke Flarebox access anytime in your Microsoft account permissions or Microsoft Entra / work account admin settings.

Data Security

How we protect your personal information.

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

Technical Security

  • SSL/TLS encryption for all data transmission
  • Secure authentication with OAuth 2.0
  • Regular security audits and updates
  • Encrypted data storage at rest

Organizational Security

  • Limited access to personal data
  • Regular security training
  • Incident response procedures
  • Compliance with data protection laws

Your Data Rights

Rights you have regarding your personal data.

Access & Control

  • Access your personal information
  • Correct inaccurate data
  • Download your data
  • Request data portability

Deletion & Consent

  • Request deletion of your data
  • Withdraw consent anytime
  • Object to data processing
  • Restrict processing

Children's Privacy

Our policy regarding minors.

Our Service is not intended for children under 13 years of age. We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

How we handle updates to this privacy policy.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated policy on this page
Updating the "Effective Date" at the top
Sending email notifications for significant changes