Data residency
Your profile, your photo, your audio and video, the audit trail of every employer reveal — all of it is hosted on enterprise cloud infrastructure in India. We do not replicate it to Singapore, Frankfurt, or anywhere else for convenience.
The Digital Personal Data Protection Act, 2023 lets a data fiduciary store personal data outside India unless the Government restricts a country. We chose to keep yours in India by default. It is the right answer for an ex-servicemen platform, and it removes one whole class of cross-border legal risk before it starts.
No Aadhaar
We never ask for your Aadhaar number. We never ask for PAN. We never ask for any other government ID. The fewer identifiers we hold, the less damage a breach could ever do.
For verification we use your ESM I-Card — the document the Indian armed forces already issued you, which already proves what we need to prove: that you served, in which branch, and at what rank. An admin checks it by hand before your profile goes live.
Verified employer reveal
An employer cannot see your phone number or WhatsApp link until they tap “Contact” on your profile. That tap writes a row to our audit log: which employer, which candidate, which channel, exact timestamp. You can ask us for that log at any time.
Each employer is capped at 50 reveals per day. The cap is a guardrail against scraping and against agencies trying to hoover up the directory. It also means the platform stays useful for hiring rather than collapsing into a list-broker free-for-all.
No platform fees on direct contact
When an employer calls you or sends you a WhatsApp message, that conversation is between you and them. We do not sit in the middle. We do not take a cut. We do not charge per message. Most agency models do — that is why their incentive is to keep you on their platform forever.
Our incentive is the opposite. After the pilot we plan to charge employers a one-off success fee of 10% of first-year salary, paid only when a hire actually happens. Until then the platform is free to both sides. Either way, your phone call is your phone call.
A modern stack, on purpose
FaujiLink runs on a modern serverless stack with end-to-end encryption keys. Every page is server-rendered and statically cached where it can be. Every API call is authenticated. Every database write is encrypted at rest with a key we control.
We chose this deliberately, instead of WordPress with a hiring plugin. WordPress is a great content tool, but a hiring directory needs strict access control, an audit trail, and a small attack surface. A serverless stack gives us that. It also means there is no shared web host where a neighbouring site’s vulnerability becomes ours.
DPDPA-aligned, and ready for 13 May 2027
The substantive provisions of the Digital Personal Data Protection Act, 2023 take effect on 13 May 2027. We are already operating as if they did. We collect only the data we actually need. We tell you what we collect and why. We let you ask for deletion. We log every reveal so we can show you, on request, exactly who has seen your contact details.
Before May 2027 we will also ship a consent-manager API hook, publish a named grievance officer with a working email address, and document our data-retention windows in a way that any auditor can read in five minutes. We are tracking that work in the open.