1. Who We Are
StepUpiq ("we", "us", "our") is a career ecosystem platform operated from Bengaluru, India. Our website is stepupiq.com. We act as a Data Fiduciary under the DPDP Act, 2023.
2. Information We Collect
We collect the following personal data when you use StepUpiq:
- Account information: name, email address, phone number, password (encrypted)
- Profile data: work experience, education, skills, resume, profile photo
- Job preferences: desired role, salary expectations, location preferences
- Usage data: pages viewed, features used, time spent, device and browser information
- Content you create: steps, insights, explore posts, comments, reviews
- Financial data: earnings, referral bonuses, payout details (when applicable)
- Communication data: messages sent through the platform
- Location data: only when you explicitly provide it for Explore posts or job preferences
3. Google User Data
When you sign in or sign up using "Sign in with Google", we access limited data from your Google account through Google OAuth 2.0. This section specifically addresses our handling of Google user data as required by the Google API Services User Data Policy.
Data Accessed
When you authenticate with Google, we access only the following data from your Google account:
- Your name (first name and last name)
- Your email address
- Your profile photo URL
We request only the openid, email, and profile scopes. We do not access your Google contacts, calendar, drive files, Gmail messages, or any other Google services data.
How We Use Google User Data
The data received from Google is used solely for the following purposes:
- To create your StepUpiq account (if signing up for the first time)
- To authenticate your identity when logging in
- To pre-fill your profile name and photo so you don't have to enter them manually
We do not use your Google data for advertising, marketing to third parties, or any purpose unrelated to your StepUpiq account functionality.
Data Sharing
Your Google user data is never sold, rented, or shared with any third party. It is used exclusively within StepUpiq for the purposes described above. The only exceptions are:
- When required by Indian law or a valid legal order
- With your explicit consent
Data Storage and Protection
Google user data is stored in our secured MySQL database hosted on Hostinger's infrastructure in accordance with industry-standard security practices:
- All data is transmitted over HTTPS (TLS 1.2+)
- Passwords are never stored from Google OAuth — authentication tokens are used instead
- Database access is restricted to authorized application code only
- We do not store Google OAuth refresh tokens or access tokens beyond the authentication session
Data Retention and Deletion
Google user data (name, email, profile photo URL) is retained as part of your StepUpiq account for as long as your account remains active. You may:
- Update or remove your Google-provided profile data at any time from your Edit Profile page
- Disconnect Google sign-in from your account via Settings → Connected Accounts
- Delete your entire account and all associated data (including Google-sourced data) from Settings → Delete Account, or by emailing support@stepupiq.com
Upon account deletion, all Google user data is permanently erased from our systems within 30 days.
StepUpiq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Your Data
We use your personal data for the following purposes:
- To provide and maintain our services — job matching, referrals, freelancing, collaborations
- To personalize your experience — recommended jobs, steps, and content
- To process referral bonuses and earnings payouts
- To communicate with you — notifications, updates, and support
- To improve our platform — analytics, bug fixing, feature development
- To prevent fraud and ensure platform safety
- To comply with legal obligations
- StepUpiq administrators can access uploaded documents for support, moderation and dispute resolution. Every document view by an employer or administrator is recorded.
5. Data Sharing
We do not sell your personal data. We share data only in these cases:
- With employers: when you apply for a job, your application snapshot, including your résumé, is shared with that employer. Verified employers may also view your résumé if you are referred to one of their jobs, or if your résumé visibility is turned on in your privacy settings. It is on by default, and you can turn it off at any time. Employers who already received an application from you keep that application.
- With brands — when you apply to a collab campaign, your collab profile is shared
- Public profile — information you choose to make public is visible to all users
- Service providers — hosting (Hostinger), analytics, and email services
- Legal requirements — when required by Indian law or government authorities
6. Your Rights Under DPDP Act 2023
As a Data Principal, you have the following rights:
- Right to Access — view all personal data we hold about you
- Right to Correction — update or correct inaccurate data
- Right to Erasure — request deletion of your account and data
- Right to Nominate — designate a nominee to exercise your rights
- Right to Grievance Redressal — raise complaints about data handling
You can correct your data and control what is shown on your profile from Settings in your dashboard, and delete your account from Settings → Delete Account.
To get a copy of the personal data we hold about you, email support@stepupiq.com from the email address on your account and ask for it. There is no download button for this yet; we send the copy to that same address. You can use the same address to nominate someone, or to raise a complaint about how your data is handled.
7. Data Retention
We retain your personal data for as long as your account is active. When you delete your account, we erase your data within 30 days, except where retention is required by law. De-identified analytics data may be retained indefinitely.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including encrypted passwords (bcrypt), HTTPS encryption, CSRF protection, and secure session management. However, no method of transmission over the Internet is 100% secure.
9. Cookies
We use essential cookies for session management and authentication. We do not use third-party tracking cookies or advertising cookies. Analytics cookies, if used, are privacy-respecting and anonymized.
10. Children's Privacy
StepUpiq is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will delete their account and data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website. Your continued use of StepUpiq after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related inquiries or to exercise your rights:
Email: support@stepupiq.com
Address: Bengaluru, Karnataka, India
You may also raise a complaint with the Data Protection Board of India if you are not satisfied with our response.