Privacy Policy

(1) Personal Data We Collect

Depending on the Services you access, we may collect the following categories of data:

• (a) Account and Identity Data: name, email address, phone number (optional), and country of residence, collected at the time of registration.
• (b) Profile and Career Data: educational qualifications, employment history, skills, certifications, uploaded resumes, and AI-generated resume content.
• (c) Interview and Interaction Data (Sensitive Personal Data): audio recordings of your voice responses, video recordings (where you enable your camera), AI-generated transcripts of your responses, textual interview answers, AI feedback and performance evaluations, and session metadata (timestamps, duration, feature usage).
• (d) Technical Data: IP address, device and browser type, operating system, referring URLs, cookies and similar tracking data, and diagnostic logs.
• (e) Inferred Data: performance metrics, skill assessments, and usage patterns derived by our AI systems from your interactions.

Audio and video recordings are processed exclusively to enable mock interview sessions and generate advisory feedback. They are not used for biometric identification, facial recognition, or any purpose outside service delivery.

(2) Purpose and Use of Your Data

We process your Personal Data only for the purposes described below. We will not process your data for any purpose not specified herein without obtaining your prior consent.

• (a) To create and manage your account and deliver the Services;
• (b) To conduct AI mock interview sessions, including transcription of audio responses via Speech-to-Text (STT) technology and generation of performance feedback via Large Language Models (LLMs);
• (c) To build and generate resumes using AI tools based on the profile information you provide;
• (d) To provide coaching recommendations, skill gap assessments, and career readiness feedback;
• (e) To allow you to review past interview sessions, transcripts, and feedback;
• (f) To improve platform security, prevent fraud, and conduct system diagnostics;
• (g) To improve the performance of our AI systems, but only with your separate and explicit consent and on an anonymised basis;
• (h) To comply with applicable legal obligations.

(3) Lawful Basis of Processing and Consent

Consent is the primary lawful basis on which we process your Personal Data. We obtain your consent through a clear, specific, and affirmative action before any data is collected. Consent for audio recording and video recording is sought separately and explicitly each time you initiate a mock interview session, and is not bundled with general acceptance of the Terms of Service or this Privacy Policy.

You may withdraw your consent at any time through your account settings. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal but may result in your inability to access specific features that depend on that data. We will not deny access to core services solely on account of withdrawal of consent for optional data categories.

Certain limited processing activities, such as security monitoring and fraud prevention, may be carried out on the basis of our legitimate interests, where such interests are not overridden by your rights. Where required by law, we will also process data to comply with legal obligations.

(4) Processing by Artificial Intelligence Systems

The Platform relies on AI technologies to deliver its core services, including Large Language Models (LLMs) for generating interview questions, feedback, and resume content; Speech-to-Text (STT) systems for transcribing your audio responses; Text-to-Speech (TTS) systems for AI-generated voice prompts (where applicable); and performance scoring algorithms for evaluating your responses.

All outputs generated by our AI systems, including interview feedback, performance scores, resume suggestions, and coaching recommendations, are advisory and informational in nature only. They do not constitute professional career counselling, psychological assessment, legal advice, or any other form of professional service. The Platform is intended for practice and educational purposes only and does not make automated hiring decisions or transmit assessments to any employer or third party.

Users are expressly informed that AI outputs may be inaccurate, incomplete, or reflect biases present in the underlying training data, including biases related to language, geography, or cultural context. Users should exercise independent judgment and seek professional guidance before making career decisions based on AI-generated feedback. If you believe feedback is materially inaccurate, you may raise a grievance under Clause 10.

(5) Disclosure to Third Parties

We do not sell, rent, or trade your Personal Data. We may share data with third-party service providers acting as Data Processors on our behalf, solely for the purposes described in this Policy. These include:

• AI and machine learning service providers (LLM, STT, TTS infrastructure);
• Cloud hosting and database infrastructure providers;
• Authentication, security, and fraud detection services;
• Analytics and platform performance monitoring services;
• Email and communication service providers.

All third-party processors are bound by written Data Processing Agreements (DPAs) requiring them to process your data only on our instructions and to maintain safeguards no less protective than those applicable to us. We will not share your data with any employer, recruitment firm, or background verification agency, nor with advertisers. We may disclose data to government authorities where required by a lawful order or legal obligation, limited strictly to what is mandated.

(6) Cross-Border Data Transfers — Third Party Processors

Some of our third-party AI and infrastructure providers may be located outside India, including in the United States. Your Personal Data may therefore be transferred to, stored in, and processed in jurisdictions outside India. We will only transfer Personal Data to such jurisdictions as permitted under Section 16 of the DPDP Act and applicable rules, and we will ensure that appropriate safeguards, including contractual protections equivalent to those required under Indian law are in place prior to any such transfer. We maintain records of all cross-border transfer arrangements.

(7) Cross-Border Services — Nature of the Company

The Company is incorporated in the United States and operates the Platform from outside India. The Company complies with applicable Indian law in respect of Personal Data of Indian residents, including the DPDP Act, the IT Act, 2000, and the SPDI Rules, 2011. Users in India are contracting with a foreign entity, and Personal Data provided through the Platform will be processed and stored on servers located outside India, subject to the safeguards described in this Clause. The Grievance Officer designated under this Policy is appointed specifically for the purposes of Indian law compliance and is accessible to users in India.

(8) Data Retention and Deletion

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. Raw audio and video recordings from interview sessions are retained for a maximum of ninety (90) days from the date of the session, after which they are automatically deleted. Interview transcripts, AI feedback, and profile data are retained for the duration of your account or twenty-four (24) months from last use, whichever is earlier. Technical and log data is retained for twelve (12) months on a rolling basis. Records of consent are retained for five (5) years as required by applicable law.

You may delete individual interview sessions, uploaded resumes, or your entire account directly from your account settings. Upon a request for account deletion, we will initiate deletion of all associated Personal Data within thirty (30) days, except data we are required to retain by law or for the resolution of pending disputes. If your account has been inactive for twenty-four (24) consecutive months, we will send you a prior written notice and may proceed to delete your data if you do not respond within thirty (30) days. For the consequences of account termination on data retention, please refer to the Terms of Service.

(9) Data Security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These include encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256), role-based access controls, multi-factor authentication for administrative systems, regular security audits and penetration testing, and secure deletion protocols.

In the event of a personal data breach that is likely to result in risk to your rights, we will notify the Data Protection Board of India within the prescribed timeframe and inform affected Users of the nature of the breach and the steps taken to address it. While we employ commercially reasonable safeguards, no transmission over the internet is fully secure. You are advised to use strong passwords and to notify us immediately if you become aware of any unauthorised access to your account.

(10) Children's Personal Data

In accordance with Section 9 of the DPDP Act, we will not process the Personal Data of any person below the age of eighteen (18) years without obtaining verifiable consent from a parent or lawful guardian. At the time of registration, the Platform will ask for your birth year. Where the information provided indicates that the User is a Minor, the Platform will require the parent or guardian to confirm consent through a verification link sent to their registered email address. The account will remain inactive until this step is completed.

We do not knowingly collect data from children below thirteen (13) years of age, and if we discover that such data has been inadvertently collected, we will delete it promptly. We do not track, profile, or direct targeted content at children.

(11) Your Rights as a Data Principal

Under the DPDP Act, you are entitled to the following rights in respect of your Personal Data:

• (a) Right to Access: obtain confirmation of whether your data is being processed, a summary of your data, and the identities of third parties to whom it has been disclosed.
• (b) Right to Correction: seek correction of inaccurate, incomplete, or outdated data. Profile information may be updated directly via account settings.
• (c) Right to Erasure: request deletion of your data upon withdrawal of consent or where the data is no longer necessary. Clause 8 provides the timelines.
• (d) Right to Grievance Redressal: have your complaints addressed by our Grievance Officer and, if not resolved to your satisfaction, escalate to the Data Protection Board of India.
• (e) Right to Nominate: nominate another individual to exercise your data rights in the event of death or incapacity, as may be prescribed under the DPDP Act.

To exercise any of the above rights, please write to our Grievance Officer at the contact details provided in Clause 12, with the subject line 'Data Rights Request'. We will respond within thirty (30) days or such other period as prescribed under applicable law.

(12) Contact and Grievance Officer

In accordance with Rule 3(1)(b) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Company has designated a Grievance Officer for the resolution of complaints and grievances from users in India relating to this Policy, the Services, or the processing of Personal Data, in accordance with applicable Indian law. The Grievance Officer is based in India and is accessible to Users during Indian business hours.

The Grievance Officer appointed above is a natural person resident in India, designated for the purposes of Rule 3(1)(b) of the IT Intermediaries Rules, 2021. Complaints may be submitted in writing by email to the address above.

If a User is not satisfied with the resolution provided by the Grievance Officer within the prescribed timeframe, the User may escalate the matter to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023, or to the appropriate Consumer Commission under the Consumer Protection Act, 2019, as applicable. The Company's submission to the Grievance Officer mechanism under this Policy does not limit or waive any statutory rights available to Users under Indian law.

(13) Cookies and Tracking Technologies

We use cookies and similar technologies to maintain session continuity, enable personalisation, and analyse platform usage. Strictly necessary cookies are essential to the functioning of the Platform and are deployed without separate consent. Functional and analytics cookies are deployed only with your consent, which you may provide or withdraw through the Cookie Settings tool accessible in the Platform settings. Approved third-party service providers may also set cookies when you use the Platform. You may disable cookies through your browser settings, though this may limit certain features.

(14) Automated Processing and Profiling

The Platform uses automated processing to transcribe your responses, evaluate interview performance, and generate feedback. However, no automated decisions with legal or similarly significant effects are made about you. AI outputs are advisory only and are not shared with any employer or third party without your explicit action. We do not build commercial profiles of users or use Personal Data for targeted advertising. If you wish to seek human review of a specific AI-generated assessment, you may raise a request through our Grievance Officer.

For full details of the advisory nature of AI-Generated Content and the Company's disclaimer in this regard, please refer to Clause 3 of the Terms of Service.

(15) Changes to This Policy

We may update this Policy from time to time to reflect changes in the law, our services, or our data practices. Material changes will be communicated to registered Users by email at least fourteen (14) days before they take effect. Where any amendment requires fresh consent, we will obtain it before implementing the change. The most current version of this Policy will always be available on the Platform. Continued use of the Platform after the effective date of an updated Policy constitutes your acknowledgement of the changes.

(16) Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India, including the DPDP Act and the Information Technology Act, 2000. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Mumbai, India, without prejudice to your right to approach the Data Protection Board of India under the DPDP Act.