Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how Skillora ("we," "our," or "us") collects, uses, shares, and protects your personal information when you use our AI interview platform and related services (the "Service"). This policy applies to all users, including individual candidates, educational institutions, recruiters, and enterprise customers.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Company Information:
ODIAN LABS PRIVATE LIMITED
Office 204, Suite 1249, 1st Floor, Sapphire Chambers, Baner Road, Baner, Pune, Maharashtra 411045, India
Email: support@skillora.ai

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our Service.

2.1 Personal Information

• Account Information: First name, last name, email address, password (hashed), and role (candidate, recruiter, admin)
• Profile Data: Resume/CV, job preferences, work experience, skills, educational background, country, and country code
• Contact Information: Email address for communications and support inquiries
• Candidate Information: When an organization using Skillora considers you for a job or invites you to an interview: your name, email address, phone number, LinkedIn profile and CV, provided by you or by that organization

2.2 Video & Audio Recordings (Primary Data Collection)

• Video Recordings: Complete video recordings of your interview sessions, including your visual appearance, facial expressions, body language, and any content visible in your camera view. Video files are typically stored in formats such as WebM, MP4, or MKV, and may include embedded audio tracks.
• Audio Recordings: Audio recordings of your voice and speech during interviews, including your responses to questions, conversations with AI interviewers, and any background audio captured by your microphone.
• Real-Time Media Streams: During active interview sessions, we process real-time video and audio streams through our platform for live interaction and analysis.
• Media Metadata: Technical information about your recordings, including file size, duration, format, timestamps, recording quality, and device capabilities.
• Camera & Microphone Access: We access your device's camera and microphone with your explicit permission to record interviews. You can revoke this access at any time through your device settings, though this will prevent you from using interview features.

2.3 Interview & Assessment Data

• Interview Responses: Text-based and verbal responses to interview questions, including transcribed audio content
• Performance Data: Assessment scores, feedback, and performance analytics derived from video/audio analysis
• Interview History: Records of interviews conducted, questions asked, outcomes, and associated media files
• AI-Generated Analysis: Automated analysis, feedback, and insights generated from processing your video and audio recordings
• Hiring Assessment Results: For interviews run for an organization, scores against the organization's competencies with written reasoning, an overall recommendation based on thresholds the organization sets, and CV screening results
• Interview Integrity Data: Browser events during an interview (such as switching tabs, leaving full screen or copy-paste attempts), an estimate of whether answers were AI-generated, and flags from automated review of the recording (such as more than one face, looking away from the screen, a phone in view, a second voice, or a different person appearing)

2.4 Usage & Technical Data

• Device Information: Device type, operating system, browser type and version
• IP Address: Your IP address and approximate geographic location
• Usage Analytics: Pages visited, features used, session duration, and interaction patterns
• Cookies & Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

2.5 Payment Information

Payment information is processed securely by our third-party payment processors (LemonSqueezy). We do not store your full credit card details on our servers. We may receive transaction confirmations and subscription status information.

2.6 Information from Third-Party Services

If you choose to authenticate using social login providers (Google, LinkedIn, Microsoft, Facebook), we may receive your name, email address, and profile picture from these services.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Video & Audio Processing & Analysis

• AI-Powered Analysis: We use artificial intelligence and machine learning algorithms to analyze your video and audio recordings to:
  • Generate personalized feedback on your interview performance
  • Assess communication skills, body language, and presentation
  • Transcribe and analyze speech content
  • Identify areas for improvement and provide recommendations
  • Generate performance scores and analytics
• Real-Time Processing: During live interviews, we process video and audio streams in real-time to enable interactive AI interviewer responses and immediate feedback.
• Storage & Playback: We store your video and audio recordings to allow you to review your interviews, track progress over time, and share recordings with recruiters or mentors (with your permission).
• Interviews for an Organization: When an organization invites you to an interview, we conduct it with an AI interviewer, record and transcribe it, score your answers against the organization's criteria and make the results available to the organization's authorized staff. We do this on the organization's instructions.
• Service Delivery: Video and audio recordings are essential for providing our core interview practice and feedback services. Without these recordings, we cannot deliver the Service.

3.2 AI Recommendations and Hiring Decisions

Skillora does not make hiring decisions. AI scores, recommendations and integrity flags are shown to the organization's staff, together with the recording and transcript, to help them decide. Skillora does not reject, shortlist or contact candidates on the basis of an AI output. If you want a person to review a decision about you, or need an adjustment to the interview format, please contact the organization that invited you.

3.3 General Service Uses

• Account Management: To create and manage your account, process subscriptions, and provide customer support
• Payment Processing: To process payments, manage subscriptions, and handle billing inquiries
• Communication: To send you service-related notifications, updates, marketing communications (with your consent), and respond to your inquiries
• Analytics & Improvement: To analyze usage patterns, improve our services, develop new features, and enhance user experience
• Security & Fraud Prevention: To detect, prevent, and address security issues, fraud, and abuse
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforce our Terms of Service
• B2B Services: For organizations, to provide team management and administrative features, and to give authorized staff access to the candidates they assess, including interview recordings, transcripts, scores and reports.

4. Data Sharing & Third-Party Services

We share your information only in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who help us operate our Service. These providers are contractually obligated to protect your information and use it only for the purposes we specify:

• Railway: Hosting of our application and database in the United States (California).
• Amazon Web Services: Private storage for CVs, interview recordings and media files in the United States (California), and text extraction from scanned CVs. Files are encrypted at rest and protected by access controls.
• Vercel: Hosting of our websites and web application.
• LiveKit: Real-time video and audio during live interviews, and the infrastructure that runs our AI interviewer. Recordings are written directly to our AWS storage. For interviews you take for an employer, LiveKit does not keep your video, audio or transcript after the session ends. For practice sessions, LiveKit may keep the session audio, transcript and logs for a limited period so we can diagnose problems. Speech-to-text (AssemblyAI) and some interviewer voices (Cartesia) are provided through LiveKit.
• Google (Gemini API) and OpenAI: AI models that conduct interviews, analyze CVs and transcripts, generate feedback and scores, and produce interviewer voices. Google also reviews interview recordings for the integrity checks described in Section 2.3. We use them through paid business APIs that do not use your data to train their models.
• Groq and ElevenLabs: Speech-to-text and voice generation for one-way interviews and practice assessments.
• Winston AI: Estimates whether interview answers were generated by AI (Canada).
• Judge0 (via RapidAPI): Runs code written during coding interviews.
• Postmark: Sends service emails such as interview invitations, reminders and results.
• LemonSqueezy: Payment processing and subscription management
• Sentry: Error tracking and performance monitoring to improve service reliability. Any session replays mask all text and block media.
• Google Analytics, PostHog and HubSpot: Website and product analytics, customer relationship management and support. These are not loaded on candidate interview pages. PostHog session recordings of our recruiter dashboard mask all on-screen text and inputs.
• ipapi.co: Estimates your country from your IP address so we can show local pricing.
• Social Authentication Providers: Google, LinkedIn, Microsoft and Facebook for account authentication

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others.

4.4 Organizations Using Skillora

When an organization (for example an employer) invites you to an interview or screens your CV through Skillora, its authorized staff can see your application details, CV, interview recording, transcript, AI scores, recommendations and integrity report. We process this information on the organization's behalf under a Data Processing Agreement, and the organization is responsible for how it uses it.

For educational institutions and training programmes, administrators can see the information set out in their agreement with us.

4.5 Protection of Personal Information for Educational Institutions

If you are a student, faculty member, or staff member associated with an educational institution, university, or other organization using our Service:

• Institutional Access Only: Your personal information (name, email address, phone number) is shared exclusively with authorized personnel within your own educational institution or organization who have been designated by your institution and who have a legitimate educational, administrative, or support need to access such information
• No External Sharing: We do not share, sell, rent, or disclose your personal information to any other educational institutions, third-party organizations, external recruiters (unless you have explicitly authorized such sharing for your own benefit), marketing companies, data brokers, or any other parties outside of your own institution
• Authorized Personnel Only: Access to your personal information within your institution is strictly limited to:
  • Authorized administrators designated by your institution
  • Faculty members or instructors who have a legitimate educational interest in accessing student information
  • Support staff members who require access for administrative or technical support purposes
• Access Controls: We implement strict access controls, authentication requirements, and audit logging to ensure that your personal information is accessed only by authorized personnel and only for legitimate institutional purposes
• Data Processing Agreements: For enterprise and educational institution customers, our Data Processing Agreements (DPAs) explicitly define the scope of data access and sharing, ensuring that your personal information is protected in accordance with applicable privacy laws and regulations

This protection applies to all users, whether you are using our Service as an individual user or as part of an educational institution. Your personal information remains confidential and is never used for purposes other than providing the Service to you and your institution, as described in this Privacy Policy and your institution's Data Processing Agreement (if applicable).

If you have questions about who within your institution has access to your personal information, please contact your institution's administrator or our support team at support@skillora.ai.

5. Data Storage & Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS) for all connections, and encryption at rest for stored files such as CVs and recordings
• Private storage, with recordings and CVs available only through short-lived signed links
• Separation of each organization's data, and role-based access for its users
• Secure password hashing, short-lived sessions, and multi-factor authentication for our administration console
• Audit logging of changes to accounts and other key records
• Hosting with SOC 2 Type II certified infrastructure providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5.2 Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Video & Audio Recordings: Your video and audio recordings are retained according to your subscription plan:
  • Free/Expired Accounts: Recordings may be deleted after a reasonable period (typically 30-90 days) or upon account closure, unless you request earlier deletion
  • Active Subscriptions: Recordings are retained for the duration of your active subscription and for six months after your subscription ends
  • Organization Accounts: Candidate data, including recordings, is kept for the period agreed in our Data Processing Agreement with the organization and then deleted. Organizations can also delete a candidate's data at any time
  • You may request deletion of specific recordings or all recordings at any time (see Section 6: Your Privacy Rights)
• Account Information: Account information is retained while your account is active and for a reasonable period after account closure
• Interview Analysis Data: Performance analytics, feedback, and assessment scores derived from video/audio analysis are retained alongside or separately from recordings, subject to the same retention policies
• Legal and Financial Records: May be retained for longer periods as required by applicable law

Note: When you request deletion of video or audio recordings, we will delete the media files from our storage systems. However, the following anonymized data may be retained for service improvement purposes, as permitted by law:

• Technical Metadata: Non-identifying technical information such as average video quality metrics, connection stability statistics, device type distributions, and session duration patterns (with all personal identifiers removed)
• Aggregated Analytics: Statistical summaries such as average response times, common question patterns, and anonymized performance score distributions that cannot be linked back to individual users
• What We Do NOT Retain: We do not create or keep biometric templates, facial recognition patterns or voiceprints. After deletion, we keep no data that could identify you; anything retained is fully anonymized and aggregated at a statistical level only.

5.3 International Data Transfers

Your information is stored in the United States (California). It may be accessed by our team in India and processed by the service providers in Section 4.1 in the United States and Canada. These countries may have data protection laws that differ from those in your country. Where UK or EU data protection law applies, we protect these transfers with appropriate safeguards, such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or adequacy decisions (including the EU-US Data Privacy Framework and its UK Extension where a provider is certified).

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights:

6.1 GDPR Rights (European Union)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information under certain circumstances
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing of your information for certain purposes, including direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

6.2 CCPA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and share
• Right to Delete: Request deletion of personal information we have collected about you
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

6.3 Video & Audio-Specific Rights

Given the sensitive nature of video and audio recordings, you have additional specific rights:

• Right to Delete Recordings: You can request deletion of specific video/audio recordings or all recordings at any time. We will delete the media files from our systems, though some processing may take up to 30 days to complete.
• Right to Access Recordings: You can request a copy of your video and audio recordings in their original format or a standard format (e.g., MP4).
• Right to Restrict Processing: You can request that we stop processing your recordings for certain purposes (e.g., AI analysis) while retaining the recordings for your access.
• Right to Object to AI Processing: You can object to AI/ML processing of your video/audio data, though this may limit the feedback and analysis features available to you.
• Camera/Microphone Control: You control access to your device's camera and microphone through your browser or device settings. You can revoke access at any time, though this will prevent you from using interview features.

6.4 Exercising Your Rights

To exercise any of these rights, especially regarding video/audio recordings, please contact us at support@skillora.ai. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request to ensure we do not disclose or delete data belonging to another user.

For Video/Audio Deletion Requests: Please specify which recordings you want deleted (by interview ID, date range, or "all recordings"). We will confirm deletion once completed. Note that deletion is permanent and cannot be undone.

6.5 If an Organization Interviewed You

If you were interviewed or screened by an employer or other organization, that organization controls your information. You can make access, correction, deletion or other requests to the organization directly, or to us at support@skillora.ai; we will pass your request to the organization and help it respond. You can also ask the organization for a person to review any decision about you.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of our Service.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function, including authentication and security
• Analytics Cookies: Help us understand how visitors interact with our Service (Google Analytics, PostHog)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness (HubSpot)

We do not load analytics or marketing tools on candidate interview pages.

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling certain cookies may limit your ability to use some features of our Service.

If you are in the UK, the EEA or Switzerland, we ask for your consent before setting analytics or marketing cookies. You can change your choice at any time from the Cookie settings link in our footer or on our Cookies Policy.

8. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information, including video and audio recordings, from children. If you are a parent or guardian and believe your child has provided us with personal information or recordings, please contact us immediately at support@skillora.ai. If we become aware that we have collected personal information or video/audio recordings from a child without parental consent, we will take immediate steps to delete such information and recordings from our systems.

Special Note for Educational Institutions: If you are an educational institution using our Service for students, you are responsible for obtaining appropriate parental consent where required by law before students use our video/audio recording features.

9. International Users

If you are accessing our Service from outside the United States, your information will be transferred to, stored and processed in the United States and the other countries described in Section 5.3, with the safeguards described there.

For users in the European Economic Area (EEA) and the United Kingdom, we comply with the GDPR and the UK GDPR. Where we process your information for our own purposes, our legal basis includes:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (service improvement, security)

Where an organization uses Skillora to assess you, the organization determines the legal basis for that processing.

10. B2B Data Processing & Enterprise Customers

For enterprise customers, educational institutions, and organizations using our Service:

• We enter into Data Processing Agreements (DPAs) that define our role as a data processor and the organization's role as controller
• Authorized staff of the organization can access the candidate data they need, including recordings, transcripts, scores and reports, according to the roles the organization assigns
• AI outputs are recommendations; the organization's staff make hiring decisions
• We implement appropriate technical and organizational measures to protect data processed on behalf of enterprise customers
• Organizations control candidate data and can delete it at any time or request an export

For more information about our enterprise data processing practices, please contact support@skillora.ai or your account representative.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top
• Sending an email notification for significant changes (if you have provided your email)

Your continued use of our Service after such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related requests (access, deletion, portability, etc.), please include "Privacy Request" in your email subject line and specify which right you wish to exercise.