Privacy Policy

KRR Solutions ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website, use our portals, apply for a position through us, or engage us for staffing or consulting services.

This policy is provided as a general framework. Have it reviewed by qualified legal counsel and adapted to the jurisdictions where you operate before publishing a final version.

1. Scope

This Policy applies to information we collect through this website, our Employer and Candidate Portals, our contact forms, and our staffing, consulting, training, and learning & development engagements. It does not apply to third-party websites or services we may link to.

2. Information we collect

Information you provide

• Contact form submissions. Name, work email, phone (optional), company, topic, and the contents of your message.
• Candidate intake. Resume contents, employment and education history, skills, professional references, work authorization status, and your salary expectations.
• Portal accounts. Email address and a password hash. We do not store your plain-text password.
• Engagement data. For placed candidates: tax forms, direct-deposit details for payroll, emergency contact information, and benefits elections. For employer clients: billing contact, purchase orders, and signed engagement documents.
• Communications. Emails, voice messages, and other correspondence with our team.

Information collected automatically

• Technical data. IP address, browser type and version, device type, referring URL, and timestamps. This is used for security, fraud prevention, and aggregate usage analysis.
• Essential cookies. We use a small number of first-party cookies necessary for portal sign-in sessions and to remember basic preferences. We do not use third-party advertising or behavioral-tracking cookies on this site.

Information from third parties

• Professional references you ask us to contact.
• Identity-verification and right-to-work checks performed by service providers we engage on your behalf.
• Public professional profiles (such as LinkedIn) when you direct us to review them.

3. How we use information

• Matching candidates to open roles and presenting candidates to employer clients
• Operating the Employer and Candidate Portals, including account authentication and session security
• Administering payroll, benefits, taxes, and worker-classification compliance for placed candidates
• Responding to inquiries, scheduling calls, and otherwise communicating with you
• Sending operational messages about your account, assignment, or invoice
• Preventing fraud and abuse, including bot mitigation on form submissions
• Complying with legal obligations and responding to lawful requests from government authorities
• Improving our services through aggregate analysis (we do not sell your personal information)

4. How we share information

We share personal information only as described below:

• With employer clients. When you authorize us to submit you for a role, we share the resume and supporting information needed for that submission. We do not share candidate information with employers who have not engaged us.
• With service providers. Vetted vendors that help us operate the business — for example, Cloudflare (hosting, CDN, security), our payroll provider, our benefits broker, and our identity-verification provider. Each is bound by a written contract that limits their use of the information to providing services to us.
• For legal reasons. When required by law, subpoena, or court order, or when we believe disclosure is necessary to protect rights, safety, or property.
• In a business transaction. If we are involved in a merger, acquisition, or asset sale, personal information may be transferred to the successor entity, subject to the protections in this Policy.

We do not sell personal information or share it for cross-context behavioral advertising.

5. How long we keep information

• Contact form submissions: 30 days, then purged.
• Candidate intake records (active): retained while you are an active candidate or placed employee and for the period required by applicable employment law afterward.
• Candidate intake records (inactive): purged 24 months after last contact, unless you ask us to keep them on file longer.
• Portal session data: deleted automatically eight hours after sign-in.
• Payroll and tax records: retained per IRS and applicable state requirements.
• Engagement contracts and invoices: retained for the period required by law and our records-retention schedule.

6. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to opt out of certain uses; and to appeal a decision we make about your data. We honor these rights for all U.S. residents to the extent reasonably consistent with applicable law (including but not limited to California's CCPA/CPRA, Virginia's VCDPA, Colorado's CPA, and similar state laws).

To exercise these rights, email info@krrsolution.com. We will acknowledge your request within 10 business days and respond substantively within 30 days (or as required by applicable law). We may need to verify your identity before acting on a request.

7. Security

We protect personal information using AES-256 encryption at rest, TLS 1.3 in transit, role-based internal access, and Cloudflare's edge security (WAF, DDoS mitigation, bot management). See our Security & Privacy page for the full posture. No system is perfectly secure; we cannot guarantee absolute security.

Report suspected vulnerabilities to security@krrsolution.com.

8. Children

Our services are directed to professional adults and businesses, not to children. We do not knowingly collect personal information from individuals under 18. If you believe we have done so, please contact us and we will delete it.

9. International users

We operate primarily in the United States. If you access our services from outside the U.S., be aware that your information will be transferred to, stored, and processed in the U.S. By using our services you consent to that transfer.

10. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the website and, where appropriate, by email to active candidates and clients.

11. Contact us

Privacy questions or requests:
Email: info@krrsolution.com
Security reports: security@krrsolution.com