Privacy Policy
Last updated: 2026-09-26
This Privacy Policy explains how GoodMorning Kolkata ("GoodMorning Kolkata", "we", "us") collects, uses, shares and protects personal data when you use goodmorningkolkata.com and the GoodMorning Kolkata service (together, the "Service").
1. Who we are
GoodMorning Kolkata is operated by K Network, Kolkata, West Bengal 700156, India.
For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made under it, we are the Data Fiduciary for the personal data described in this policy. For users outside India, we are the data controller in the equivalent sense.
Contact for privacy questions: privacy@goodmorningkolkata.com
Grievance Officer (Information Technology Act 2000, the IT Rules 2021, and the DPDP Act): Grievance Officer, K Network — grievance@goodmorningkolkata.com. If you have a complaint about how we handle your personal data, contact the Grievance Officer first; we will acknowledge it within 24 hours and aim to resolve it within 15 days, per the IT Rules 2021.
2. What data we collect
We collect only what the Service actually needs to run. This table maps every category to the real features.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account | Name, email address, @handle, password (stored as a salted hash — we never see or store it in plain text), preferred language (English or বাংলা), account type (founder, investor, mentor, employee, student, business owner) | You, when you sign up |
| Sign-in via Google or LinkedIn | Your name, email address and profile photo, as released by Google or LinkedIn (see §5) | Google / LinkedIn, only if you choose that sign-in method |
| Profile | Avatar and cover photo, headline, bio, location, website, social links, skills, "open to collaborate" flag | You, if you choose to add them |
| Community content | Posts, ideas (including anonymous ideas — see below), comments, polls, likes, upvotes, saves/bookmarks, follows, reports you file | You, when you use the Service |
| Business listings | Startup/business name, description, logo, cover image, category, stage, location, tags, team members, products, updates, reviews, verification details (the website or email used to verify the listing) | You, if you list or manage a business |
| Jobs and applications | Job postings you create; if you apply to a job: your name, email, phone, résumé/CV file, LinkedIn/portfolio links, location, experience, notice period, expected salary, your answers to the employer's screening questions, and a cover note | You, when you post a job or apply to one |
| Events | Events you create, and your registration/attendance for events | You, when you host or register for an event |
| Account security | Two-factor authentication status, connected sign-in providers, login history (approximate location and device from your IP and browser), active sessions | Created automatically as you use the Service |
| Device and log data | IP address, browser and device type, pages visited, timestamps, referring page | Automatically, from your browser/device |
| Cookies | See our Cookie Policy | Automatically |
Anonymous ideas. If you post an idea anonymously, we still record your account against it internally (for moderation and abuse prevention), but it is never shown publicly, and never shown to other users — not even to you when you view the idea as any other visitor would.
Business verification. We verify a listed business through its official website or a business email address. We keep a record that verification happened and how, not the verification email's full contents beyond what's needed to confirm it.
We do not knowingly collect financial or payment information — payments for jobs, services or listings, if any, happen off this platform (see our Terms of Service).
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (DPDP) / basis (GDPR-equivalent) |
|---|---|---|
| Create and secure your account, sign you in | Account data, security data | Your consent when you sign up; our legitimate interest in keeping accounts secure |
| Provide the Service — show your profile, publish your posts, list your business, run job applications and events | Profile, content, business, job, event data | Performance of our contract with you (our Terms of Service) |
| Verify a business listing | Website/email used to verify | Performance of our contract; legitimate interest in listing quality |
| Prevent fraud, spam and abuse; enforce our Community Guidelines and Terms | Account, content, device/log data | Legitimate interest; legal obligation where applicable |
| Send you service emails (confirmations, security alerts, application/notification updates) | Account, email | Performance of our contract |
| Send you optional marketing or product updates | Your consent (you can opt out any time) | |
| Sign you in with Google or LinkedIn | Name, email, photo from that provider | Your consent, given when you choose that sign-in method |
| Respond to grievances and legal requests | Whatever the request requires | Legal obligation |
We do not use your data to make automated decisions that produce legal or similarly significant effects on you.
4. Who we share it with
We do not sell your personal data. We share it only with:
- Service providers who process it on our behalf, under contract, only for the purposes above:
- our hosting provider, Contabo, whose servers for this Service are located in Germany;
- our transactional email provider, to send confirmation, security and notification emails;
- a content delivery / security network, if one is added later (this policy will be updated first);
- Google and LinkedIn, only as needed to sign you in if you choose that method (see §5);
- Other users, as the Service's normal function: your public profile, posts, business listings, job postings and reviews are visible to other visitors by design, except anonymous ideas (§2) and anything you mark private in your settings;
- Law enforcement or regulators, only when required by Indian law or a valid legal process, or to protect the rights, safety or property of GoodMorning Kolkata, our users, or the public;
- A successor, if GoodMorning Kolkata is ever acquired or merged — you would be notified and this policy would continue to apply until replaced.
5. Google user data
If you sign in with Google, we request only these scopes: openid, email, and profile. We use them solely to create and sign you into your GoodMorning Kolkata account and to pre-fill your name and profile photo. We do not use this data for advertising, and we do not transfer it to any other app or third party except as strictly necessary to provide the Service (for example, our hosting and email providers acting on our behalf, per §4).
GoodMorning Kolkata's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. LinkedIn sign-in data
If you sign in with LinkedIn, we request only your basic profile information (name, email address, profile photo) to create and sign you into your account, in the same way as §5. We do not use it for advertising, and we do not transfer it to any other app or third party except as strictly necessary to provide the Service.
7. How long we keep it
Account and profile data: for as long as your account is active.
Account deletion: when you delete your account (Settings → Account → Delete, or see our data deletion instructions), it enters a 30-day grace period during which you can cancel the deletion. After 30 days, we permanently delete your account, profile, posts, ideas and other content, except what we must keep for legal, tax, security or dispute-resolution reasons (for example, records of a resolved abuse report, or transaction records if any).
Job applications and résumés: kept while the job listing is open and for a reasonable period after, so employers can review past applicants; deleted or anonymised once no longer needed for that purpose or on your request.
Server and security logs: kept only for a limited period for security and troubleshooting purposes, then deleted or anonymised.
Login history: the most recent entries only, rolling.
8. Security
We use industry-standard measures to protect your data: encrypted connections (HTTPS) everywhere, passwords stored as salted hashes, optional two-factor authentication, private storage with short-lived signed links for sensitive files like résumés (never a public URL), and audit logging of sensitive actions (like downloading someone's résumé). No system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your data and will notify affected users and the relevant authority as required by law if a breach materially affects you.
9. International data transfers
Our hosting infrastructure is located in Germany (see §4). Data may also be processed in India by us and by service providers we use. Where personal data is transferred outside your country, we rely on the service provider's own safeguards (such as their compliance with EU/EEA data protection law where applicable) and take reasonable steps to ensure it is protected consistently with this policy.
10. Children
The Service is for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has provided us data, contact support@goodmorningkolkata.com.
11. Your rights, and how to exercise them
Under the DPDP Act (and, for users outside India, equivalent rights under laws like the GDPR), you have the right to:
- Access the personal data we hold about you;
- Correct or update inaccurate or incomplete data;
- Withdraw consent you previously gave (for example, for marketing emails), without affecting anything we did before you withdrew it;
- Erase your data (see §7 and our data deletion instructions);
- Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity (a right specific to the DPDP Act);
- Grievance redressal — raise a complaint with our Grievance Officer (§1), and, if unresolved, with India's Data Protection Board once constituted.
Most of these you can do yourself, any time, in Settings → Account and Settings → Privacy. For anything else, email support@goodmorningkolkata.com. We will respond within the time the law requires.
12. Cookies
We use a small number of cookies to keep you signed in, protect the Service, and remember your language. Full details, including every cookie's name, purpose and lifetime, are in our Cookie Policy.
13. Changes to this policy
We may update this policy as the Service changes. If we make a material change, we will post the updated policy here with a new "Last updated" date, and — for significant changes — notify you by email or an in-app notice before it takes effect.
14. Contact us
Questions about this policy or your data: support@goodmorningkolkata.com. See also our Contact page.