Early Access Privacy Notice

ByteSized Careers is currently operated by Guhan Purushothaman from Srinagar Colony, Saidapet, Chennai, Tamil Nadu, India. Depending on the law that applies, Guhan Purushothaman is the data fiduciary or controller for the processing described here.

Privacy, legal and grievance contact: legal@bytesizedcareers.com.

This is a pre-launch registration experience for a future creator-economy hiring marketplace. It records interest from people seeking work, people seeking talent, and people on both sides. It does not currently provide accounts, publish profiles, introduce users, rank candidates, make matches, or make employment decisions. Joining does not guarantee admission, a launch date, work, applicants, interviews, offers, placements, or any other outcome.

Depending on the answers you choose to give, the site stores:

• your full name and email address (required to start a new registration);
• whether you are looking for work, hiring, or both;
• job or talent categories and section-specific “Other” answers;
• work-format, organisation-type, platform, niche, experience, availability, hiring-timeline, and team-size selections;
• an optional portfolio or company URL;
• an optional phone number and selected country, stored in a standard international format;
• separate, optional choices for future WhatsApp messages, SMS, and phone calls, together with the consent-copy version, recording time, and form source; and
• an optional final note and other open-text responses.

Most questions after name and email can be skipped. A phone number is not verified, does not trigger an OTP, and by itself is not consent to receive calls, SMS, WhatsApp, or marketing. Every phone channel starts unselected and may be chosen independently only after a valid number is entered. Please do not put health, financial, government-identity, account credentials, or other sensitive information in free-text fields.

The site also records or processes:

• registration, completion, verification, and update timestamps and status;
• first-touch and last-touch campaign source, medium, campaign, content, term, geography, placement, referral code, external referrer hostname, landing page, capture time, and attribution version when available;
• a request IP address transiently for abuse prevention; the application stores a peppered hash in a ten-minute rate-limit bucket rather than the raw IP address;
• request and error information in hosting logs, which may include ordinary network and device metadata handled by the hosting provider;
• an opaque lead identifier and a cryptographically random resume credential in local browser storage; and
• admin sign-in information received through GitHub OAuth for the restricted operator dashboard.

The site has no advertising pixels, behavioural advertising SDKs, or general audience analytics in the inspected implementation. Browser language is used on the device to suggest a phone country and is not separately stored by the application.

When verification is available, ByteSized Careers sends a six-digit code to the address you entered. The database stores a keyed hash of the code—not the code itself—together with expiry, attempt, request, delivery, and provider-message metadata. A code expires after ten minutes and verification attempts are limited.

Depending on which features are available, people on the early-access list may receive email verification; registration confirmation or administration; reminders reasonably connected to an incomplete registration; important early-access, security, privacy or legal changes; launch announcements; invitations to access or register for the marketplace; and, after suitable marketplace functionality exists, notices that a potentially relevant opportunity, participant, talent requirement or recruiter need may exist.

Relevance notices and active matching are not available today. A future notice would be an indication of potential relevance only—not a promise of suitability, a reply, interview, engagement, job, candidate, hire, introduction or commercial outcome. Unrelated promotional advertising is separate from these early-access and marketplace-related messages. If you separately choose WhatsApp, SMS, or phone calls, that choice permits occasional early-access and potentially relevant opportunity updates through only the selected channel if and when that channel becomes available. Matching and phone outreach are not active today.

You may opt out of optional launch, invitation and relevance-related emails using an unsubscribe method included in the message, where available, or by contacting legal@bytesizedcareers.com. An opt-out does not by itself delete the waitlist record. Necessary service, security, legal or request-response messages may still be sent. Deletion is a separate request. No optional bulk campaign should begin until a dependable suppression or unsubscribe process is operating.

You can withdraw one or more phone-channel choices at any time by contacting legal@bytesizedcareers.com. Withdrawal applies to future contact through that channel and does not affect processing already carried out lawfully. Removing the saved phone number in the resumable form clears all three channel choices. Standard carrier charges may apply.

• to create, save, restore, and administer your early-access registration;
• to verify control of an email address and deliver related service messages;
• to understand demand, research product needs, and design the future marketplace using submitted preferences and aggregate summaries;
• to organise early-access participants by the roles, skills, work and talent they are interested in;
• to notify you when ByteSized Careers launches or begins opening access and invite you to register;
• if you separately select a phone channel, to preserve that choice and use only that channel for the disclosed occasional updates if and when it is activated;
• to prepare an invitation with some supplied fields pre-filled, where technically available, for you to review and submit;
• after suitable functionality exists, to identify and notify you about potentially relevant talent, recruiter requirements, opportunities or marketplace activity;
• to respond to requests and maintain accurate records;
• to secure the service, rate-limit abuse, diagnose failures, and protect users and infrastructure; and
• to understand which outreach, campaign, community, partnership, or referral first brought a registration and which explicit source most recently preceded completion;
• to measure saved, verified, and completed registrations by campaign and improve early-access promotion without advertising pixels or behavioural profiles.

No current feature uses the information to make a solely automated decision with legal or similarly significant effects. The admin dashboard presents descriptive totals and filters; it does not score or rank people.

ByteSized Careers is operated from India. Depending on the law and purpose, processing may be justified by your request to join and use early access; consent where it is requested and legally necessary; legitimate interests in operating, securing, researching and improving a proportionate pre-launch service where those interests are not overridden by your rights; or compliance with a legal obligation. Consent can be withdrawn for future processing that relies on it, without affecting processing already carried out lawfully.

This notice does not claim that every foreign privacy law applies to every visitor. People in some locations may have additional rights under applicable law and may direct requests to the contact above.

The public flow uses two first-party localStorage records. bytesized_waitlist_resume, containing an opaque lead ID, a raw resume credential, and a saved-at time. It lets the same browser restore saved answers. The server stores only a one-way hash of that credential and rejects it after 30 days; an invalid record is cleared when the site next checks it. The browser copy otherwise remains until it is cleared by the flow, the user, or browser controls.

bytesized_waitlist_attribution contains only the accepted campaign and referral fields, external referrer hostname, landing path, capture time, and attribution version. It has no email, phone, resume credential, advertising click ID, or cross-site identifier. It preserves first and last touch across the requested registration journey and remains until replaced by valid campaign data or cleared through browser controls. Once a lead exists, the server-side lead record is authoritative.

Restricted admin pages use first-party Auth.js session, CSRF, callback, and short-lived OAuth security cookies. There are no analytics or advertising cookies in the audited version. See the Cookie & storage notice for the detailed table and browser controls.

Information is processed only as needed by the following confirmed providers:

• Vercel hosts and delivers the application and processes request, deployment, and runtime log data.
• Neon hosts the production PostgreSQL database and its managed infrastructure and backups.
• Resend receives the destination email address, sender details, verification content (including name and code), and delivery metadata to send transactional verification email.
• GitHub provides OAuth sign-in for allowlisted administrators and returns profile/account information within the requested read:user and user:email scopes.

Information may also be disclosed to professional advisers where reasonably necessary; to legal or public authorities where required; to protect rights, safety and the service; to investigate abuse; or to a successor if ownership or structure changes, subject to applicable notice, purpose and safeguard requirements. Early-access information is not currently visible to recruiters, talent or the public.

ByteSized Careers does not sell personal information or share it for cross-context behavioural advertising in the inspected version.

ByteSized Careers is operated from India. Service providers may process information in India and in other countries in which they or their subprocessors operate, subject to their contractual, technical and legal safeguards. The protections and rights available in another country may differ from those in your location.

We retain early-access information for as long as reasonably necessary to operate and develop ByteSized Careers, maintain the early-access list, communicate about launch and access, prepare future marketplace invitations, identify potentially relevant marketplace needs, protect the service, resolve disputes and comply with legal obligations.

Verification codes expire after ten minutes and server-side resume authority expires after 30 days. Security and rate-limiting data may be kept for a shorter period appropriate to its purpose. Provider copies and backups may remain temporarily under provider retention cycles. Information may be retained where reasonably necessary for legal claims, fraud prevention, security or legal compliance. We do not promise immediate removal from every backup. Deletion requests are assessed under the disclosed purposes and applicable law.

Current controls include encrypted HTTPS transport, restricted GitHub-authenticated admin access, independent allowlist checks, hashed resume credentials and verification codes, pepper-hashed rate-limit subjects, bounded validation, expiry and attempt limits, and an authenticated CSV export. Providers also apply their own infrastructure controls. No online system can be guaranteed completely secure. Users should not share resume links or credentials and should notify the privacy contact of suspected misuse.

Subject to the law that applies, you may ask for a copy of your information, correction, deletion, restriction or objection, withdrawal of consent, or information about processing. You may also complain to the relevant regulator. Send requests to legal@bytesizedcareers.com. There is no automated privacy-request portal today.

To protect the record, the operator will verify a request using reasonable information linked to the registration—normally control of the submitted email address—and may ask for limited additional evidence if necessary. We should not request more identity information than needed. We will review the associated information and, as appropriate, provide a reasonable copy or summary, correct it, delete or anonymise it, or explain why some information must be retained. Completion of the request is recorded. Grievances may also be sent to legal@bytesizedcareers.com.

ByteSized Careers is intended only for people aged 18 or older. You must be at least 18 years old to submit an early-access registration or otherwise use this website. We do not intentionally collect personal information from people under 18. If we learn that an under-18 user submitted information, we will assess and delete it unless continued retention is required by applicable law.

Early-access information may later be used to prepare a marketplace registration invitation with certain fields pre-filled where technically available. No submission automatically becomes a marketplace account or public profile, and no information automatically becomes visible to recruiters, talent or the public. You must be able to review, correct and submit the marketplace registration before activation. An account or invitation is not guaranteed, and the features and onboarding process may change before launch.

After suitable marketplace or matching functionality becomes available, supplied preferences may help identify potentially relevant talent, recruiter requirements, opportunities or participants. Registration does not mean active matching is taking place now, and potential relevance never guarantees suitability or an outcome.

This notice may change as the pre-launch service develops or the law changes. Material changes should be highlighted before they take effect and, where appropriate, sent to the contact address on file. A new notice and marketplace terms will be needed before accounts, profile visibility, matching, recruiting, paid features, or broader communications launch.

Privacy, legal notices, rights requests, opt-outs and grievances: legal@bytesizedcareers.com
Operator location: Srinagar Colony, Saidapet, Chennai, Tamil Nadu, India