What this policy covers
This policy explains how ThinQBox Edge Private Limited handles personal data across its services. The Gmail-specific sections apply to ThinQBox Connect, operated from Survey No. 64, Building No. 9, 13th Floor, Madhapur, Shaikpet, Hyderabad 500081, Telangana, India.
Information we collect
Depending on the service, we may collect contact details, account and subscription information, support communications, usage data, and information you choose to provide. We use it to deliver and improve services, communicate with you, maintain security, and meet legal obligations.
How we collect information
We collect information directly from you, automatically when you use our websites or applications, from your organisation or institution where it provides access, and from third-party services that you deliberately connect. We collect only information reasonably necessary for the stated service.
How we use information
- Provide, personalise, maintain and improve our products and services.
- Create accounts, process subscriptions and deliver customer support.
- Detect fraud, abuse and security incidents and protect users and systems.
- Send essential service notices and, with consent where required, relevant marketing communications.
- Analyse aggregated or de-identified usage to understand performance and improve user experience.
- Comply with law, enforce agreements and establish or defend legal claims.
Where required, we rely on consent, performance of a contract, compliance with law, or legitimate business purposes recognised by applicable law. We do not use personal data for materially different purposes without appropriate notice or consent.
Cookies and similar technologies
Our services may use essential cookies, local storage and similar technologies for authentication, preferences, security and reliable operation. Analytics or advertising technologies, if introduced, will be described through an appropriate notice and consent mechanism where required. You can control cookies through your browser, but disabling essential cookies may affect functionality.
ThinQBox Connect and Gmail access
Connecting Gmail is optional. If a user chooses to connect their Google account, ThinQBox Connect requests read-only access to Gmail solely to identify recruitment and placement-related emails.
This may include emails relating to job applications, application confirmations, interview invitations, interview schedules, assessments, recruiter communications, offer communications, and application status updates.
We use this information only to provide the placement features requested by the user, including:
- Identifying recruitment and placement-related emails.
- Updating the user's job application and interview status.
- Identifying interview dates, times, company details, roles and other relevant recruitment information.
- Providing relevant application and interview alerts and notifications.
- Correctly organising and displaying placement-related information within the user's account.
ThinQBox Connect does not send, modify or delete emails through Gmail access. Gmail data is not used for advertising, retargeting, personalised advertising or unrelated marketing purposes.
ThinQBox Connect processes relevant emails only for the purpose of extracting placement-related information. We do not retain the full email content, email body, email subject or sender information after processing. We store only the structured placement details required to provide the service, such as company, role, application status, interview date or time, together with limited technical identifiers such as the Google message identifier and/or a non-reversible hash where required to prevent duplicate processing and maintain service reliability.
ThinQBox does not store or create a copy of the user's Gmail inbox or mailbox.
Access to Gmail occurs only after the user explicitly chooses to connect their Google account and grants the requested permissions through Google's OAuth consent process.
Sharing and service providers
We do not sell personal data. We may use vetted hosting, cloud infrastructure, payment, communications, analytics, security, customer-support and professional-service providers only where reasonably necessary to operate our services. Depending on the product and features enabled by the user, providers may include platforms from Google, Amazon Web Services, Anthropic, OpenAI and communications providers such as Meta's WhatsApp services. Providers receive only information necessary for the relevant enabled function and are subject to applicable contractual, confidentiality and security obligations.
Google user data is not shared with advertising platforms for advertising, profiling, retargeting or personalised advertising. Where a user has specifically enabled a communication channel such as WhatsApp for placement notifications, only the minimum structured placement-event information necessary to deliver that requested notification may be transmitted through the relevant communications provider. The content, subject, sender or body of Gmail messages is not provided to such communications providers.
We may also disclose information where required by law, to protect rights and safety, or during a corporate transaction subject to appropriate safeguards.
For ThinQBox Connect, your placement team or institute cannot see your inbox or personal emails. They may see only the placement progress and placement-related information made available through the ThinQBox service.
AI systems and automated processing
Some ThinQBox services may use artificial-intelligence providers to classify information, generate suggestions or automate workflows. We apply data minimisation and provider controls appropriate to the service. Google Workspace data obtained through restricted or sensitive Google API scopes is not used to create, train or improve general-purpose artificial-intelligence or machine-learning models. AI-assisted outputs may be incomplete or inaccurate and should be reviewed before important decisions.
Google Limited Use
ThinQBox's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements.
Google user data accessed by ThinQBox Connect is used only to provide or improve the specific user-facing placement features for which the user granted access. Any improvement involving Google user data is limited to the functionality directly provided to and visible to the user and does not include training general-purpose AI or machine-learning models.
We do not sell Google user data.
We do not use Google user data for advertising, retargeting, personalised advertising or marketing unrelated to the functionality requested by the user.
We do not transfer Google user data to data brokers, information resellers or third parties for advertising, profiling or marketing purposes.
We do not allow humans to read Google user data except where necessary for security purposes, to comply with applicable law, where the user has provided explicit consent for specific data to be accessed, or where access is necessary for the operation or support of the user-facing service and is permitted under Google's applicable policies.
Any use, storage or transfer of Google user data is limited to providing the ThinQBox Connect features described in this Privacy Policy.
Data security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data, including access controls, least-privilege practices, encryption in transit and where appropriate at rest, secure authentication, logging, monitoring, backups, vulnerability management and confidentiality obligations. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed. If a personal-data breach occurs, we will investigate, mitigate harm and provide notifications where required by applicable law.
Retention, deletion and disconnection
We retain personal data only for as long as necessary to provide the service, maintain legitimate business and security records, resolve disputes and meet applicable legal obligations. Retention periods may vary depending on the type and purpose of the data.
For Google user data accessed through Gmail, we retain only structured placement information and limited technical identifiers necessary to provide the placement-related features described in this Privacy Policy. We do not retain the full email content, email body, subject or sender information after processing.
Users may disconnect their Google account from ThinQBox Connect at any time through the available account or integration settings. Disconnecting Gmail stops ThinQBox Connect from accessing new Gmail data and stored Google authorisation tokens are revoked or deleted.
Following disconnection, Google-derived placement data and associated technical identifiers that are no longer necessary for another lawful purpose will be deleted or anonymised within 30 days, subject to limited retention required for security, fraud prevention, legal compliance, dispute resolution or another applicable legal obligation.
Users may also revoke ThinQBox Connect's access through their Google Account permissions.
Users may request deletion of Google-derived data previously stored by ThinQBox at any time by contacting us at info@thinqbox.in. Upon receiving a valid deletion request, we will delete applicable Google-derived personal data from our systems, subject only to limited retention permitted or required by applicable law.
International data transfers
Our service providers may process data in countries other than your own. Where required, we use recognised contractual or legal safeguards and assess providers' privacy and security practices. By using an enabled third-party integration, you understand that information necessary for that integration may be processed where the provider operates.
Children's privacy
Our general services are not directed specifically to children. Under applicable Indian data-protection law, a person under 18 years of age is treated as a child for relevant personal-data processing requirements.
Where processing of a child's personal data requires verifiable consent from a parent or lawful guardian, ThinQBox will process such data only after the required verifiable consent has been obtained through an appropriate mechanism, unless an applicable legal exemption permits the processing.
A user under 18 years of age must not connect a personal Gmail account to ThinQBox Connect unless ThinQBox has made an appropriate verifiable parent or guardian consent process available for that user, or the processing is otherwise permitted under applicable law.
If we become aware that a child's personal data has been processed in a manner that requires parental or guardian consent and the required consent has not been obtained, we will take reasonable steps to restrict or delete the affected personal data as appropriate.
We do not knowingly use children's personal data for targeted advertising and do not use Google Workspace data belonging to children for advertising or general-purpose AI model training.
Your choices and rights
Subject to applicable law, you may ask to access, correct, update, delete or receive information about your personal data; withdraw consent; object to or restrict certain processing; opt out of non-essential marketing; and raise a grievance. Withdrawal of consent does not affect processing already carried out lawfully and may limit services that require the relevant data. Requests can be sent to info@thinqbox.in, and we may verify your identity before acting.
Grievance Officer
Sharath B
Grievance Officer
THINQBOX EDGE PRIVATE LIMITED
Hyderabad, Telangana, India
info@thinqbox.in
You may contact the Grievance Officer regarding questions, concerns, complaints or requests relating to the processing of your personal data.
Changes
If this policy changes, we will update this page and the date above.