Underpaidby HiringX

Privacy Policy

Underpaid (by HiringX) is built around a simple principle: collect the minimum needed to make each feature work, and never tie public data to a real identity. This page is a full breakdown of what we collect, why, and what we never collect.

Salary submissions are anonymous

When you submit salary data, we collect only: company name, role, level, years of experience, city, fixed CTC, variable CTC, ESOP value, and work mode. We do not attach your name, email, phone number, or any personal identifier to a submission. Submissions are used to calculate percentiles and build aggregate salary ranges. Individual submissions are never shown publicly — only aggregated statistics, and a company page appears only once it has at least 3 verified submissions.

Anonymous device ID

We generate a random identifier (a UUID) stored in your browser's local storage. It's used to: rate-limit submissions (3/day per device), de-duplicate the same person submitting the same company/role twice, prevent rating the same company repeatedly, and tie analytics events to a visitor. It cannot identify you personally and is never shared. Clearing your browser storage resets it.

Company ratings

When you rate a company across the six work-culture categories, we store your ratings against the company slug and your anonymous device ID — no name, no email. Aggregate scores are shown publicly only when a company has 3+ ratings per category, so individual ratings cannot be inferred.

Jobs board

Most listings on the jobs board are aggregated from companies' publicly available career APIs (Greenhouse, Lever, Ashby, Workday, SmartRecruiters, Oracle Cloud). When you click "Apply" we record an anonymous click event and open the company's official application page in a new tab — we never collect your application data.

If you post a job via /post-job, we store the recruiter email (required) and optional WhatsApp number. These are visible only to the admin for moderation; the public listing never shows them.

Mentorship bookings & payments

Booking a mentorship session is the one flow where we collect real personal information, because there's a real session to coordinate. We store your name, email, WhatsApp number, and the booking details (mentor, time slot, price, message). This information is visible only to the operator and is shared with the mentor after the booking is confirmed (paid). We never publish it.

Payments are made via UPI directly to our payment account using a UPI deep-link or QR code. We don't collect or store your card or bank details. We store a reference number you provide so we can match your payment to your booking.

Mentor profiles

If you apply to become a mentor, we collect your name, photo, role, current company, years of experience, LinkedIn URL, WhatsApp number, bio, per-session price, areas of expertise, and your available slots. Your name, photo, role, company, bio, LinkedIn URL, price, expertise, and availability are public on your profile page (this is the point — mentees need enough to choose). Your WhatsApp number is private— it's shared only with mentees after they've paid for a session with you. Mentor photos are stored in a public Supabase Storage bucket so they can be loaded on profile pages.

Session reviews

After a mentorship session is marked complete, you may submit a star rating and a short review. We store your first name (shown publicly with the review), the rating, the review text, the booking it's attached to, and your anonymous device ID (used to prevent duplicate reviews). Reviews are published only after admin approval, and only on a mentor profile that has 2+ approved reviews.

Email & contact data (optional, outside booking)

Outside of mentorship bookings, email is never required to use the product. You may optionally share an email in two places: to be matched with relevant roles (lead capture), or when submitting a job-removal request. Emails are stored privately, used only for that stated purpose, never shown publicly, and never sold. You can ask us to delete your email at any time.

Cookies & local storage

We use your browser's local storage for essential functions — your anonymous device ID, whether you've dismissed the welcome modal, your cookie-consent choice, a list of your own bookings (so we can prompt for reviews), and similar UI state. We record anonymous page views so we can understand overall usage. We load Google AdSense on some pages; AdSense may set its own cookies subject to Google's policies.

Data retention & deletion

Anonymous salary submissions and ratings are retained indefinitely to maintain accurate historical data. Mentorship bookings and reviews are retained for the operator's records. You can request deletion of your booking, review, or optional email at any time by reaching out via the feedback page.

Outlier detection

We automatically flag submissions that appear to be statistical outliers using the IQR method. Flagged submissions are excluded from aggregate calculations to maintain data accuracy. The submitter is shown that their value was flagged.

Third-party services

We use Supabase for database and file storage, Vercel for application hosting, and Google AdSense for ads on some pages. Each service has its own privacy policy governing infrastructure-level data. We do not sell your data to anyone.

Changes to this policy

We may update this policy as the product evolves. Material changes will be reflected on this page with an updated date below.

Last updated: June 2026