Privacy Policy

futurecxo.in is an executive opportunity platform operated by [REGISTERED ENTITY NAME], registered at [REGISTERED OFFICE ADDRESS](“we”, “us”). We are the Data Fiduciary for the personal data described here, and the Controller for the purposes of the UK and EU General Data Protection Regulation.

This policy covers the futurecxo.inwebsite, the member platform, the emails we send you, and the third-party booking page we use to schedule executive discovery calls. It is written to meet India’s Digital Personal Data Protection Act, 2023. If you are in the EEA or the UK, Annexe A adds the information the GDPR requires.

Questions, requests and complaints all go to one address: info@seccomply.net.

• We collect what you give us when you create an account and build your profile, plus a record of what you do on the platform.
• We do not run any advertising, analytics or third-party tracking. There are no tracking cookies on this site.
• We do not sell your personal data, and we do not share it with recruiters or employers unless you choose to apply.
• When you apply to an opportunity submitted by another member, that member receives your name, contact details and your résumé. This is the most important disclosure in this policy — see Who can see your résumé.
• You can ask us to give you a copy of your data, correct it, or delete your account at any time by emailing info@seccomply.net.

When you create an account we collect your full name, business email address, contact number, current leadership role and current company. Your business email is also your sign-in identity. Your password is handled by our authentication provider and is stored only as a cryptographic hash — we never see it and cannot recover it.

As you complete your profile we store your industry, country, city, years of experience, LinkedIn profile URL, your interface theme preference, and whether your onboarding and profile are complete. All of it is optional beyond the account fields above, and you can edit or clear these at any time from your profile page.

To personalise your opportunity feed we store the preferences you set during onboarding: preferred roles, industries and locations, preferred work modes, and whether you are open to board, advisory or fractional positions.

We also store the companies on your watchlist together with any free-text notes you write against them, and the industries, functions and locations you choose to follow. Watchlist notes are private to you — please treat them as ordinary stored data and avoid recording anything you would not want held on our systems.

If you upload a résumé we store the file itself in private file storage, in a folder reserved for your account, along with its file name, file type, size and upload date. You can replace or delete it at any time from your profile.

Exactly three parties can reach your résumé file:

• You. You can view, download, replace or delete it whenever you like.
• The member who submitted a vacancy you apply to. When you apply through the platform, that member can open your résumé through a link that expires after five minutes, and receives the name, email address, current role and company shown on your profile at the time you applied.
• Our administrators, where necessary to operate, support and moderate the platform.

We record which opportunities you bookmark, apply to, or mark as not interested; the applications you submit; and the vacancies you submit for review. We use this to build your feed, to show you your own history, and to produce aggregate counts about platform usage that do not identify you.

Members can submit a vacancy they have heard about. When they do, they may enter a recruiter or hiring contact’s name, email address and phone number, and paste the original message they received. That information is personal data about someone who may never have visited futurecxo.in, so we want to be explicit about it.

We use it only to verify the opportunity and, if it is published, to route applications to the right place. It is visible to our administrators during review. Members who submit a vacancy warrant that they are entitled to share these details.

If you are a recruiter or hiring contact and your details are held by us, you can ask what we hold and require us to correct or erase it by writing to info@seccomply.net. You do not need an account to make that request and we will not ask you to create one.

Part of our opportunity feed is compiled from job listings that employers and their agents publish publicly. We collect the role title, company, location, description, link, source, posting date, any salary indication, experience range and listed skills, and we retain the original listing record so we can show you where a role came from and detect when it is withdrawn. Our collection is limited to senior leadership roles based in India, and listings are retired automatically once they stop appearing at source.

Listing text is written by the employer, not by us, and can occasionally name an individual hiring contact. If a public listing containing your details has been reproduced on futurecxo.in and you want it removed, write to info@seccomply.net.

We keep a security log so that we can investigate account compromise and misuse. It records sign-ins, failed sign-in attempts, registrations, password changes and resets, résumé uploads, replacements and deletions, and administrative actions — each with the action, the outcome, the time, and the browser user-agent string.

futurecxo.in does not record your IP address in its own logs. Our hosting, database and email providers process IP addresses in their infrastructure logs as part of delivering their services, under their own retention rules.

For every message we attempt to send you we record which template was used, the recipient address, the subject, whether delivery succeeded, our provider’s reference, and any error. Without this we cannot answer “I never received my confirmation email”. Our administrators can read this log.

We set strictly necessary cookies only. They hold your authentication session so you stay signed in, and they are refreshed as you move around the platform. Your light or dark theme choice is kept in your browser’s local storage and mirrored to your profile so it follows you between devices.

There are no analytics, advertising, profiling or social-media tracking cookies on futurecxo.in. The one exception is our discovery-call booking page, which embeds a scheduling tool operated by Microsoft; that tool sets its own cookies under Microsoft’s privacy policy, and we tell you so on the page itself.

• To give you an account — creating, authenticating and securing it, and letting you sign in. Necessary to provide the service you asked for.
• To personalise your feed — matching opportunities to the preferences you set. Based on your consent, withdrawable by clearing your preferences.
• To handle applications — passing your details and résumé to the member who submitted the vacancy, at your instruction and only when you apply.
• To review submitted vacancies — verifying opportunities before they are published to other members.
• To keep the platform secure — detecting and investigating unauthorised access and misuse. A legitimate use under the DPDP Act and our legitimate interest under the GDPR.
• To communicate with you — sending the service emails described below and answering your support requests.
• To meet our legal obligations — where the law requires us to retain or disclose information.

Other members

Only when you apply to an opportunity, and only with the member who submitted it, as described in Who can see your résumé.

Our administrators

Staff with administrative access can view member profiles, preferences, watchlists, submitted vacancies, activity, the security log and the email log, in order to operate, support and moderate the platform.

Service providers

We rely on a small number of processors, each of which receives only what it needs:

• Supabase — authentication, database and file storage. Holds your account, profile, preferences, activity and your résumé file.
• ZeptoMail (Zoho) — delivery of transactional email. Receives your name, email address and the message content, which includes sign-in and confirmation links.
• Vercel — application hosting. Processes the requests your browser makes to the platform.
• Microsoft — the scheduling tool embedded on our discovery-call page. Receives whatever you enter to book a call.

Legal and corporate

We may disclose information where we are required to by law, court order or a lawful request from a public authority, or to establish or defend legal claims. If our business is reorganised, acquired or merged, member data may transfer as part of that transaction; we will tell you before it becomes subject to a different policy.

We do not sell personal data, and we do not share it for advertising.

Your data is held on infrastructure operated by the providers named above, which may process it outside India — including in the United States and the European Union. Where we transfer personal data internationally we rely on our providers’ contractual protections, including the European Commission’s standard contractual clauses where they apply, and we transfer only to countries not restricted under section 16 of the DPDP Act.

• Database access is constrained by row-level security, so the rows belonging to your account are only reachable by your account.
• Administrative access is role-based and limited to the staff who need it.
• Résumés are held in private storage. They are never public, and every download is a short-lived link issued by our server only after it has checked that the requester is entitled to it.
• Traffic between your browser and the platform is encrypted in transit.
• Privileged credentials are held server-side only and are never sent to your browser.

No system is perfectly secure, and we do not claim otherwise. These are the measures we take, not a guarantee against every possible failure.

• Account, profile and preferences — for as long as your account exists.
• Your résumé — until you delete it, or until your account is closed.
• Applications and submitted vacancies — for as long as your account exists, so that both sides keep a record of what was submitted.
• Security and email records — retained after an account is closed, with the link to the account removed, because their purpose is to let us investigate incidents that may only come to light later. An individual entry may still contain the email address used at the time.

What you can do yourself, right now

• Update your name, contact number, role, company and profile details.
• Change your sign-in email address, confirmed at the new address.
• Change your password.
• Upload, download, replace or delete your résumé.
• Change or clear your opportunity preferences and followed topics.
• Remove companies from your watchlist.
• Withdraw an application you have submitted.
• Sign out of every device where your account is active.

What we will do when you ask

Email info@seccomply.net from the address on your account and we will:

• Give you a copy of the personal data we hold about you.
• Tell you how it is being processed and who it has been shared with.
• Correct or complete anything inaccurate that you cannot edit yourself.
• Close and delete your account, as described in What happens when your account is closed.
• Act on a grievance about how we have handled your data.
• Record a nomination — under section 14 of the DPDP Act you may nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

We aim to respond within 30 days. We may need to verify your identity before acting, particularly on a deletion request.

There are two outcomes, and they are different. Deactivation blocks sign-in but keeps your record, and can be reversed. Deletion is permanent.

When your account is deleted we remove:

• your account and sign-in credentials;
• your profile, preferences and followed topics;
• your résumé record and the stored file;
• your watchlist and its notes;
• your bookmarks, applications and other activity;
• the vacancies you submitted and the applications made to them.

Our security and email records are kept, with the link to your account removed, for the reason given under How long we keep it. Anything you shared with another member before deletion — a résumé sent with an application — is already in their hands and cannot be recalled by us.

We send service emails only:

• account emails — confirming your address, magic sign-in links, password resets, email-change confirmations and re-authentication;
• confirmation that a vacancy you submitted has been received;
• the outcome when a vacancy you submitted is approved or declined, including any note from the reviewing administrator;
• confirmation that an application you made has been received.

We send no marketing, promotional or newsletter email of any kind. Because every message above is necessary to operate your account, these cannot be switched off while the account exists. If we ever introduce optional email, it will come with a way to opt out and this policy will change first.

We score and rank opportunities, never people. Quality scores, sub-scores and signals such as whether a search appears to be confidential are calculated from the content of the listing itself. They are informational aids to help you decide where to spend your time — they are not verification, endorsement, or career advice.

Submitted vacancies are sorted by straightforward pattern matching on the role title to decide whether they fall within our senior-leadership scope. That routes the submission to a human administrator; it does not decide the outcome.

We do not profile members, and we make no automated decision that produces a legal or similarly significant effect on you.

futurecxo.in is a platform for working professionals in senior leadership roles. It is not directed at children, and you must be at least 18 to create an account. We do not knowingly process the personal data of anyone under 18. If you believe a child has created an account, tell us at info@seccomply.net and we will remove it.

If a personal data breach occurs we will investigate, contain it, and notify the Data Protection Board of India and every affected person as required by the DPDP Act. Where the GDPR applies we will notify the relevant supervisory authority within 72 hours of becoming aware, and notify you directly where the breach is likely to result in a high risk to your rights.

If you are unhappy with how we have handled your personal data, contact our Grievance Officer — [GRIEVANCE OFFICER NAME], [DESIGNATION] — at info@seccomply.net, or write to us at [REGISTERED OFFICE ADDRESS]. We will acknowledge your grievance and respond within 30 days.

If you remain dissatisfied you may complain to the Data Protection Board of India.

This annexe adds the information required by the EU and UK GDPR. It supplements the policy above and does not replace it.

Controller

[REGISTERED ENTITY NAME], [REGISTERED OFFICE ADDRESS]. Contact: info@seccomply.net.

Legal bases

• Contract (Art. 6(1)(b)) — creating and running your account, handling the applications you submit.
• Consent (Art. 6(1)(a)) — the preferences used to personalise your feed, and uploading a résumé. Withdraw at any time by clearing them or deleting the file; withdrawal does not affect processing already carried out.
• Legitimate interests (Art. 6(1)(f)) — keeping the platform secure, preventing misuse, and verifying submitted vacancies. We have weighed these against your rights and you may object at any time.
• Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required of us.

Information obtained indirectly (Art. 14)

If you are a recruiter or hiring contact, we may hold your name, email address and phone number because a member submitted a vacancy naming you, or because they appeared in a publicly published job listing. The categories are those described under Recruiter details submitted by members and Job listings from public sources; the basis is our legitimate interest in verifying and publishing genuine opportunities. You have every right set out below, including the right to object, and you can exercise them without holding an account.

Your rights

You have the right of access, rectification, erasure, restriction of processing, objection to processing carried out on the basis of legitimate interests, and data portability. To exercise any of them, email info@seccomply.net. We will respond within one month.

Complaints

You may lodge a complaint with your local supervisory authority, or with the Information Commissioner’s Office in the United Kingdom. We would appreciate the chance to address your concern first.

We update this policy when our practices change. The date at the top of this page always reflects the current version. Where a change materially affects how we handle your personal data we will tell you before it takes effect, by email or through the platform.

Questions about anything above? Write to info@seccomply.net.