Privacy notice

Who we are and our role

quikinterview.ai is operated by [Legal entity name] (operating quikinterview.ai), [Registered office address, India].

For recruiter accounts (name, email, organisation, billing details) we decide how data is used and act as the data fiduciary (controller).

For candidate interview data, the hiring organisation that invited you is the data fiduciary. We process that data on its behalf and only on its instructions, as a data processor.

What we collect

• Account data: name, work email, password hash or Google sign-in identifier, organisation and role.
• Candidate data supplied by the hiring organisation: name, email, phone, resume and application stage.
• Interview data: video, audio, shared screen (when required), transcript, code you write, answers to registration questions, device and browser checks.
• Integrity signals: fullscreen and tab changes, face presence, paste events, identity check results and, when enabled, a second camera on your phone.
• Billing data: billing address, tax details and invoices. Card details are handled by our payment processor and never reach our servers.
• Technical data: IP address (stored as a salted hash for consent records), user agent, and logs without personal content.

Why we use it

• To run interviews: ask questions, transcribe answers, record the session and produce an evaluation for the hiring organisation.
• To protect interview integrity and detect fraud such as proxy candidates.
• To provide, secure, support and bill for the service.
• To meet legal obligations (tax, accounting, lawful requests).
• We do not sell personal data and do not use candidate interviews to train AI models.

AI and automated assessment

Answers are assessed by AI against a rubric set by the hiring organisation. The evaluation and integrity signals support, but never replace, a human decision: a person at the hiring organisation reviews the results before any hiring decision is made.

Candidates can ask the hiring organisation for a human review of their assessment.

Who we share it with

Interview results are shared with the hiring organisation that invited you and with anyone they choose to share a report with (share links can be passcode-protected, expire and are logged).

We use sub-processors to host and run the service; the full list, with purposes and locations, is on the sub-processors page.

How long we keep it

Each hiring organisation chooses a retention period between 30 and 730 days (180 days by default). Recordings, frames and transcripts are deleted automatically when it ends, unless the organisation has placed a legal hold. Identity images are deleted within one hour of the check.

Account data is kept while the account is active and for up to 90 days after closure; invoices are kept as long as tax law requires.

How we protect it

• Encryption in transit (TLS 1.2+) and at rest (AES-256, AWS KMS).
• Private storage with short-lived signed links; no public buckets.
• Role-based access inside each organisation, tenant isolation tests on every endpoint, and audit logs for privileged actions.
• Regular dependency, secret and vulnerability scanning.

International transfers

Primary hosting is in India (AWS ap-south-1). Some sub-processors (for example AI and speech providers) process data outside India under contractual safeguards, subject to any restrictions notified under the DPDP Act.

Your rights

You can ask for access to, correction or erasure of your personal data, withdraw consent, nominate someone to exercise your rights, and raise a grievance. Candidates should contact the hiring organisation first; we help it respond. The DPDP notice explains how.

Contact: [email protected]. Grievance Officer: [Grievance Officer name], [email protected].

Changes

We will update this notice when our practices or sub-processors change. Material changes to candidate processing create a new consent version that candidates accept before their interview.