Privacy policy · गोपनीयता नीति

KaamSathi is a job platform for work in Nepal. We connect job seekers with employers. We are the “data controller” for everything described below — meaning we decide what is collected and we are the ones you hold responsible for it.

काम साथी नेपालभित्रको रोजगारीका लागि जागिर खोज्ने र रोजगारदाता जोड्ने प्लेटफर्म हो। तल लेखिएका सबै डाटाको जिम्मेवारी हाम्रो हो।

• What you type. Your name, email, password (stored only as a scrypt hash — we cannot read it), headline, district, skills, experience level and the free-text description you give the AI Agent.
• Your mobile number, if you give one. It is optional: sign-up and your profile ask for it, and the CV reader may suggest the number printed on your CV for you to check before it is saved. We use it to send the SMS code that confirms the number is yours, to let you sign in with it, to text you about your applications — when an employer moves one to screening, interview, offer or hired, and when they propose interview times — and, if you have no email address, to text you our decision on an identity document you sent us for verification, including any note the reviewer wrote if it was not accepted. The screening and interview-time texts, the identity-document decision, a password-reset link, and job alerts by SMS, WhatsApp or Viber go only to a number you have confirmed with that code. If this deployment has no SMS gateway configured, a text to your number is not delivered at all — and it is not sent by email instead.
• Your CV, if you upload one.We store the file itself and the text we read out of it. If you upload a photo or a scan rather than a document file, it has to be read as an image first — exactly who does that is listed under who reads a photo you upload.
• Your LinkedIn data, if you import it.Two separate things: (a) the “Save to PDF” export you upload yourself, which goes through the same CV pipeline as any other file, and (b) optional “Sign in with LinkedIn”, which returns your name, email address and profile photo only — never your work history, connections or messages. We never scrape LinkedIn.
• What you do here.Jobs you save, apply to, or mark “not interested”; alerts you create; interview practice scores; reports you file about a job.
• Almost nothing technical. We keep no analytics cookies and no advertising trackers. Server logs hold the usual request lines. If this deployment has analytics enabled at all, it is a cookie-free counter that records page URLs, not people.

तपाईंले टाइप गर्नुभएको विवरण, अपलोड गर्नुभएको CV, LinkedIn बाट ल्याइएको नाम/इमेल/फोटो, र यहाँ गर्नुभएका काम (सेभ, आवेदन, अलर्ट) मात्र राखिन्छ। कुनै विज्ञापन ट्र्याकर वा कुकी छैन। मोबाइल नम्बर दिनु ऐच्छिक हो — त्यसमा हामी नम्बर पुष्टि गर्ने SMS कोड र तपाईंको आवेदन तथा अन्तर्वार्ताबारे SMS पठाउँछौं, र त्यसैबाट लगइन गर्न सकिन्छ। यो सर्भरमा SMS गेटवे जोडिएको छैन भने कुनै SMS पुग्दैन — इमेलबाट पनि पठाइँदैन।

When AI features are enabled on this deployment, the textof your profile, your CV, or the message you paste into the scam checker is sent to Anthropic’s Claude API to be read and structured. It is sent to produce your result and nothing else. We do not use your data to train any model, and we do not sell it. A photo or scan is a separate path with a different list of readers — see who reads a photo you upload.

Every AI result is a draft you review. The CV reader never writes to your profile on its own — you see what it read and correct it before anything is saved.

AI सुविधा प्रयोग गर्दा तपाईंको लेख Claude API मा पठाइन्छ — नतिजा निकाल्नका लागि मात्र। कुनै मोडेल तालिम दिन प्रयोग हुँदैन र बेचिँदैन। AI ले निकालेको हरेक कुरा तपाईंले हेरेर सच्याएपछि मात्र सुरक्षित हुन्छ।

A photograph or a scan — a CV shot on a phone, a photographed job advert, a citizenship certificate or marksheet, a business-registration document sent in for verification — is not text yet, so something has to read it. This list is the exact one for this deployment, in the order they are tried: each reader is tried in turn until one produces usable text, so a reader that fails — a timeout, an outage, a refusal — has still received the image. It is generated from the configuration this server is running with, not written by hand, so it cannot fall behind the code.

1. Google (Gemini API) — the photo is sent to Google's servers outside Nepal.

   गुगल (Gemini API) — तस्बिर नेपालबाहिर रहेका गुगलका सर्भरमा पठाइन्छ।

2. Anthropic (Claude API) — the photo is sent to Anthropic's servers outside Nepal.

   एन्थ्रोपिक (Claude API) — तस्बिर नेपालबाहिर रहेका एन्थ्रोपिकका सर्भरमा पठाइन्छ।

3. Tesseract OCR, on our own server — the photo is read on our own server and sent to no other company.

   टेसेराक्ट OCR, हाम्रै सर्भरमा — तस्बिर हाम्रै सर्भरमा पढिन्छ, अरू कुनै कम्पनीलाई पठाइँदैन।

If every reader listed above fails to produce text, the photo is read one last time by Tesseract OCR on our own server. That step is always available and it sends the photo to nobody, so a failure never widens the list.

Wherever it goes, the image is sent to have its text read and for nothing else: not to train a model, not to sell, not to anyone who did not need it to answer your request. What comes back is a draft you see and correct before it is saved.

If you would rather no image reader saw it, upload a PDF or a Word file instead of a photo, or type your details in yourself. Those are read by a text extractor on our own server and never reach the readers above.

फोटो वा स्क्यान गरिएको कागजात पढ्न माथिको क्रममा प्रयास गरिन्छ — एउटा पाठक असफल भए उही तस्बिर अर्को पाठकलाई पठाइन्छ, त्यसैले असफल पाठकले पनि तस्बिर पाइसकेको हुन्छ। यो सूची यही सर्भरको चालु कन्फिगरेसनबाट बन्छ। सबै असफल भए हाम्रै सर्भरको Tesseract OCR ले पढ्छ। तस्बिर पढ्नका लागि मात्र पठाइन्छ — न कुनै मोडेल तालिम दिन, न बेच्न। चाहनुहुन्न भने फोटोको साटो PDF वा Word फाइल राख्नुहोस्; ती हाम्रै सर्भरमा पढिन्छन्।

• Employers see your profile — name, headline, skills, experience, district — when you apply to their job or when they invite you to apply. They do not get your password, and they do not get a list of every other job you applied to.
• Your mobile number is shown to an employer only after you apply to one of their jobs, on that job’s list of applicants — whether or not you have confirmed it. Being invited to apply, or appearing in an employer’s list of recommended candidates, does not show it. The SMS gateway configured on this deployment receives the number and the text of each message in order to deliver it.
• Service providerswe depend on: our hosting and database provider, the Anthropic API (AI features), whichever email/SMS/WhatsApp gateway is configured to deliver your alerts, and — for a photo or scan only — the readers named under who reads a photo you upload. That section is the complete list for this deployment; there is no other company in the chain.
• Nobody else. We do not sell your data, rent it, or hand it to recruiters who did not receive an application from you.

तपाईंले आवेदन दिएको वा निमन्त्रणा पाएको रोजगारदाताले मात्र तपाईंको प्रोफाइल देख्छ। तपाईंको मोबाइल नम्बर भने तपाईंले आवेदन दिएपछि मात्र त्यो रोजगारदाताले देख्छ — निमन्त्रणा पठाउँदा देखिँदैन। डाटा कसैलाई बेचिँदैन।

• Your account and profile: until you delete them.
• Your mobile number: kept with your profile until you delete your account. Deleting the account also deletes our records of the confirmation codes and password-reset links sent to it.
• Your CV file and the text read from it: until you replace it or delete your account.
• Applications and invitations: kept while your account exists, so both you and the employer have a record of what was sent.
• Reports about a suspicious job and reviews of an employer: kept even if you delete your account, but with your identity removed. A scam report has to outlive the account that filed it, or deleting an account becomes a way to erase evidence.
• The same holds for the business the report or review is about. If an employer deletes their company account, or deletes the advert that was reported, the report and the review stay — with the company name and the job title as they were when it was filed, so the record still says who it is about. Everything else about that account is deleted with it.

खाता नमेटेसम्म तपाईंको विवरण रहन्छ। जालसाजी उजुरी र रोजगारदाता समीक्षाहरू भने नाम हटाएर राखिन्छ — नत्र खाता मेटेर प्रमाण लुकाउन सकिन्थ्यो। रोजगारदाताले आफ्नो खाता वा विज्ञापन मेटे पनि उजुरी र समीक्षा कम्पनीको नाम सहित रहन्छ। मोबाइल नम्बर पनि खाता नमेटेसम्म रहन्छ; खाता मेटाउँदा त्यसमा पठाइएका कोड र लिंकका रेकर्डसहित मेटिन्छ।

Go to your account and press Delete my account. It is immediate and permanent: the profile, the uploaded CV file, applications, saved jobs, alerts and interview scores are all removed. There is no recovery.

If you are an employer, the same button is on your employer dashboard, at the bottom, and only the account owner sees it. It removes the company account, every job you posted, the applications and messages on them, your teammates’ logins, your vacancy photos, and the PAN or registration documents you uploaded for verification — the files themselves, not just the record of them. It does not remove reports filed against your adverts or reviews written about your business — see how long we keep things. Two accounts cannot use it: one we have flagged for a scam review, because the finding has to outlive the account, and a KaamSathi administrator login. Email us and a person will handle it.

You can also email support@karmijob.com and ask us to do it, or to send you a copy of what we hold.

खाता पेजमा गएर “Delete my account” थिच्नुहोस् — तुरुन्तै र सधैंका लागि मेटिन्छ। रोजगारदाताका लागि सोही बटन एम्प्लोयर ड्यासबोर्डमा छ, जसले PAN र दर्ता कागजातसमेत मेटाउँछ। वा हामीलाई इमेल गर्नुहोस्।

Passwords are hashed with scrypt and never stored in readable form. Sessions use signed, httpOnly cookies that JavaScript cannot read. Uploaded CVs are stored outside the public web root and are never served as static files. We are a small team and cannot promise perfection — if you find a hole, please tell us at support@karmijob.com before telling anyone else.

पासवर्ड कहिल्यै पढ्न मिल्ने रूपमा राखिँदैन। अपलोड गरिएका CV सार्वजनिक रूपमा पस्किँदैन।

KaamSathi is for people old enough to work legally in Nepal. Do not create an account for a child. If we learn an account belongs to a child, we delete it.

नेपाल कानुनअनुसार काम गर्न मिल्ने उमेरका लागि मात्र।

Questions, complaints, deletion requests, or a job that looks like a scam: support@karmijob.com. You can also report a specific listing from its job page.

कुनै पनि प्रश्न, गुनासो वा शंकास्पद जागिरका लागि माथिको इमेलमा सम्पर्क गर्नुहोस्।