Privacy Policy

This Privacy Policy explains how Natton Technologies Private Limited ("we", "us"), which runs the Natton SkillX brand, collects, uses, shares and protects your personal data. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here.

It applies to our website (nattonskillx.com), the forms on it, the AI Placement Hub, and the programs, workshops, events and counselling sessions we run.

Information you give us

• Contact details: your name, phone number, and optionally your email address and city.
• About you or your institution: your role (for example student, parent, teacher or principal), school, college or organization name, class, and the program or topic you are interested in.
• For students under 18: the parent or guardian's name and their confirmation of consent.
• Bookings and registrations: the consultation, workshop or event you choose, your preferred day and time, and any message you add.
• CareerX quiz: your answers to the career interest quiz.

If you use the AI Placement Hub

• Your sign-in email address.
• The resume details you enter (such as education, experience and skills) and the job descriptions you paste.
• Your answers in mock interviews, whether typed or spoken.
• The job role, location and filters you search for.

Information collected automatically

• Basic technical data such as your IP address, browser and device type, which our hosting provider records in server logs to run and secure the website.
• Usage data through Google Analytics, only if you allow Analytics cookies. See our Cookie Policy.

We process your personal data on the basis of the consent you give when you submit a form or use a tool, and, where the law allows, for legitimate uses such as meeting legal obligations. We use it to:

• Reply to your inquiry and contact you by phone, WhatsApp, SMS or email about it.
• Arrange and deliver the programs, workshops, events, consultations and counseling you ask for.
• Issue certificates of completion and confirm a certificate when someone asks us to verify it.
• Run the AI Placement Hub tools for enrolled students.
• Understand how the website is used and improve it (only with Analytics consent).
• Keep the website and our systems secure and prevent misuse.
• Meet our legal, tax and regulatory obligations.

We do not sell your personal data, and we do not use it for decisions made only by automated means that have legal or similarly significant effects on you.

Many of our learners are school students. Under the DPDP Act, anyone under 18 is a child, and we take extra care with their data.

• We process a child’s personal data only with the verifiable consent of their parent or lawful guardian. Our forms ask the parent or guardian to confirm this, and for programs run through a school, the school arranges this with parents.
• We do not track or monitor the behavior of children, and we do not direct targeted advertising at them.
• The Analytics cookies on our website are not intended for use by children, and we do not knowingly use them to profile children.

We share personal data only with service providers who help us run our services, and only as much as they need. They process it on our behalf.

• Website hosting: the provider that hosts our website and its server logs.
• Database: Supabase, which stores the details you submit through our forms and the Placement Hub, with access restricted to our authorized staff.
• AI model providers (Placement Hub only): when you use the Resume Builder or Mock Interviewer, the text you enter, which can include details from your resume, is sent to the AI model provider we have chosen at the time, such as Google (Gemini), Anthropic, Groq, OpenRouter or Together AI, to generate your results. Their own terms and privacy policies apply to that processing. The CareerX quiz and our other forms do not use these AI providers.
• Voice in mock interviews: if you choose voice mode, your browser's built-in speech recognition turns your speech into text. In some browsers, such as Google Chrome, this audio is processed by the browser provider.
• Job listing providers: when you search jobs in the Placement Hub, the job role, location and filters you choose are sent to job listing services (such as Greenhouse job boards and JSearch through RapidAPI). Your name and contact details are not sent to them.
• Google Analytics and Google Tag Manager: only if you allow Analytics cookies. They do not receive what you type into our forms.
• WhatsApp: if you choose to message us on WhatsApp, that conversation is also subject to WhatsApp's terms.
• Authorities: where we are required to by law, a court order or a lawful request from a government authority.

Some of our service providers, including our database, AI model and analytics providers, may store or process data on servers outside India. We only transfer data to countries that the Government of India has not restricted under the DPDP Act.

• Inquiries and bookings: deleted within 1 year of our last contact with you, unless you enroll with us.
• Enrolled students: kept for as long as needed to deliver the program, issue and verify certificates, and meet our legal and tax obligations.
• Placement Hub: account and resume details are deleted when your access ends, or earlier if you ask us.
• Analytics: kept by Google according to our Google Analytics retention settings.

• Our website uses HTTPS, so data is encrypted while traveling between your browser and our servers.
• Access to submitted data is limited to authorized staff through signed, time-limited sign-in sessions.
• Our database provider encrypts stored data.

No method of storing or sending data online is completely secure. If a personal data breach happens, we will inform the Data Protection Board of India and the people affected, as the DPDP Act requires.

We use a small number of cookies and browser storage items. Analytics cookies load only with your consent, and remembering your contact details on our forms happens only if you allow Functional cookies. The full list is in our Cookie Policy, where you can also change your choices at any time.

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Have inaccurate or incomplete data corrected, completed or updated.
• Have your data erased when it is no longer needed, unless we must keep it by law.
• Withdraw your consent at any time. This is as easy as giving it: just contact us. It does not affect processing already done, and we may no longer be able to provide the service that needed it.
• Nominate another person to exercise these rights for you in case of death or incapacity.
• Have your grievances addressed by us, and then, if you are not satisfied, complain to the Data Protection Board of India.

To use any of these rights, contact our Grievance Officer (Data Protection) below. We may ask you to confirm your identity before acting on a request.

Questions, requests and complaints about your personal data are handled by our Grievance Officer (Data Protection):

We will acknowledge your request within 7 working days and respond within the time allowed under the DPDP Act and its rules.

We may update this policy when our services or the law change. The date at the top shows when it was last updated. If we make significant changes, we will highlight them on this page.