Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how Skillora ("we," "our," or "us") collects, uses, shares, and protects your personal information when you use our AI interview platform and related services (the "Service"). This policy applies to all users, including individual candidates, educational institutions, recruiters, and enterprise customers.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Company Information:
ODIAN LABS PRIVATE LIMITED
Prachi Residency SNo-1/1A, 23 Baner Opp Dhanvantari, Baner Gaon, Haveli, Pune- 411045, Maharashtra, India
Email: support@skillora.ai

2. Information We Collect

We collect information that you provide directly to us, as well as information automatically collected when you use our Service.

2.1 Personal Information

• Account Information: First name, last name, email address, password (hashed), and role (candidate, recruiter, admin)
• Profile Data: Resume/CV, job preferences, work experience, skills, educational background, country, and country code
• Contact Information: Email address for communications and support inquiries

2.2 Video & Audio Recordings (Primary Data Collection)

• Video Recordings: Complete video recordings of your interview sessions, including your visual appearance, facial expressions, body language, and any content visible in your camera view. Video files are typically stored in formats such as WebM, MP4, or MKV, and may include embedded audio tracks.
• Audio Recordings: Audio recordings of your voice and speech during interviews, including your responses to questions, conversations with AI interviewers, and any background audio captured by your microphone.
• Real-Time Media Streams: During active interview sessions, we process real-time video and audio streams through our platform for live interaction and analysis.
• Media Metadata: Technical information about your recordings, including file size, duration, format, timestamps, recording quality, and device capabilities.
• Camera & Microphone Access: We access your device's camera and microphone with your explicit permission to record interviews. You can revoke this access at any time through your device settings, though this will prevent you from using interview features.

2.3 Interview & Assessment Data

• Interview Responses: Text-based and verbal responses to interview questions, including transcribed audio content
• Performance Data: Assessment scores, feedback, and performance analytics derived from video/audio analysis
• Interview History: Records of interviews conducted, questions asked, outcomes, and associated media files
• AI-Generated Analysis: Automated analysis, feedback, and insights generated from processing your video and audio recordings

2.4 Usage & Technical Data

• Device Information: Device type, operating system, browser type and version
• IP Address: Your IP address and approximate geographic location
• Usage Analytics: Pages visited, features used, session duration, and interaction patterns
• Cookies & Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

2.5 Payment Information

Payment information is processed securely by our third-party payment processors (LemonSqueezy). We do not store your full credit card details on our servers. We may receive transaction confirmations and subscription status information.

2.6 Information from Third-Party Services

If you choose to authenticate using social login providers (Google, Facebook, Microsoft), we may receive your name, email address, and profile picture from these services.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Video & Audio Processing & Analysis

• AI-Powered Analysis: We use artificial intelligence and machine learning algorithms to analyze your video and audio recordings to:
  • Generate personalized feedback on your interview performance
  • Assess communication skills, body language, and presentation
  • Transcribe and analyze speech content
  • Identify areas for improvement and provide recommendations
  • Generate performance scores and analytics
• Real-Time Processing: During live interviews, we process video and audio streams in real-time to enable interactive AI interviewer responses and immediate feedback.
• Storage & Playback: We store your video and audio recordings to allow you to review your interviews, track progress over time, and share recordings with recruiters or mentors (with your permission).
• Service Delivery: Video and audio recordings are essential for providing our core interview practice and feedback services. Without these recordings, we cannot deliver the Service.

3.2 General Service Uses

• Account Management: To create and manage your account, process subscriptions, and provide customer support
• Payment Processing: To process payments, manage subscriptions, and handle billing inquiries
• Communication: To send you service-related notifications, updates, marketing communications (with your consent), and respond to your inquiries
• Analytics & Improvement: To analyze usage patterns, improve our services, develop new features, and enhance user experience
• Security & Fraud Prevention: To detect, prevent, and address security issues, fraud, and abuse
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforce our Terms of Service
• B2B Services: For enterprise customers, to provide organization-level analytics, team management, and administrative features. Enterprise administrators may have access to aggregated performance data but not individual video/audio recordings unless explicitly authorized.

4. Data Sharing & Third-Party Services

We share your information only in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who help us operate our Service. These providers are contractually obligated to protect your information and use it only for the purposes we specify:

• LiveKit: We use LiveKit for real-time video and audio processing during live interview sessions. LiveKit processes your video and audio streams during active interviews to enable real-time communication with AI interviewers. Video and audio data may be temporarily processed on LiveKit's servers during active sessions. LiveKit is contractually obligated to protect your information and does not retain your video or audio data after the session ends.
• AWS S3: Secure cloud storage for video and audio recordings and media files. Your complete interview recordings (video and audio) are stored on AWS S3 servers. We use industry-standard encryption and access controls to protect your media files.
• LemonSqueezy: Payment processing and subscription management
• Sentry: Error tracking and performance monitoring to improve service reliability
• Google Analytics: Website analytics and usage statistics
• Microsoft Clarity: User behavior analytics and website optimization
• HubSpot: Customer relationship management, marketing automation, and support ticketing
• Social Authentication Providers: Google, Facebook, and Microsoft for account authentication

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others.

4.4 Enterprise Customers

For B2B customers (educational institutions, recruiters, enterprises), we may share aggregated, anonymized analytics and usage data with your organization's administrators for reporting and administrative purposes, as specified in your Data Processing Agreement (DPA).

Important: Enterprise administrators typically do not have access to individual video or audio recordings unless:

• Explicitly authorized in your Data Processing Agreement
• The user (candidate) has granted permission to share recordings
• Required for legal or compliance purposes

Enterprise customers receive aggregated performance metrics, completion rates, and anonymized analytics, but not the actual video/audio content unless specifically agreed upon.

4.5 Protection of Personal Information for Educational Institutions

If you are a student, faculty member, or staff member associated with an educational institution, university, or other organization using our Service:

• Institutional Access Only: Your personal information (name, email address, phone number) is shared exclusively with authorized personnel within your own educational institution or organization who have been designated by your institution and who have a legitimate educational, administrative, or support need to access such information
• No External Sharing: We do not share, sell, rent, or disclose your personal information to any other educational institutions, third-party organizations, external recruiters (unless you have explicitly authorized such sharing for your own benefit), marketing companies, data brokers, or any other parties outside of your own institution
• Authorized Personnel Only: Access to your personal information within your institution is strictly limited to:
  • Authorized administrators designated by your institution
  • Faculty members or instructors who have a legitimate educational interest in accessing student information
  • Support staff members who require access for administrative or technical support purposes
• Access Controls: We implement strict access controls, authentication requirements, and audit logging to ensure that your personal information is accessed only by authorized personnel and only for legitimate institutional purposes
• Data Processing Agreements: For enterprise and educational institution customers, our Data Processing Agreements (DPAs) explicitly define the scope of data access and sharing, ensuring that your personal information is protected in accordance with applicable privacy laws and regulations

This protection applies to all users, whether you are using our Service as an individual user or as part of an educational institution. Your personal information remains confidential and is never used for purposes other than providing the Service to you and your institution, as described in this Privacy Policy and your institution's Data Processing Agreement (if applicable).

If you have questions about who within your institution has access to your personal information, please contact your institution's administrator or our support team at support@skillora.ai.

5. Data Storage & Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Secure password hashing and authentication
• Regular security audits and vulnerability assessments
• Access controls and employee training on data protection
• Secure cloud infrastructure with reputable providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5.2 Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Video & Audio Recordings: Your video and audio recordings are retained according to your subscription plan:
  • Free/Expired Accounts: Recordings may be deleted after a reasonable period (typically 30-90 days) or upon account closure, unless you request earlier deletion
  • Active Subscriptions: Recordings are retained for the duration of your active subscription and for six months after your subscription ends
  • Enterprise Accounts: Retention periods are defined in your Data Processing Agreement (DPA)
  • You may request deletion of specific recordings or all recordings at any time (see Section 6: Your Privacy Rights)
• Account Information: Account information is retained while your account is active and for a reasonable period after account closure
• Interview Analysis Data: Performance analytics, feedback, and assessment scores derived from video/audio analysis are retained alongside or separately from recordings, subject to the same retention policies
• Legal and Financial Records: May be retained for longer periods as required by applicable law

Note: When you request deletion of video or audio recordings, we will delete the media files from our storage systems. However, the following anonymized data may be retained for service improvement purposes, as permitted by law:

• Technical Metadata: Non-identifying technical information such as average video quality metrics, connection stability statistics, device type distributions, and session duration patterns (with all personal identifiers removed)
• Aggregated Analytics: Statistical summaries such as average response times, common question patterns, and anonymized performance score distributions that cannot be linked back to individual users
• What We Do NOT Retain: We do not retain any biometric data, facial recognition patterns, voiceprints, or any other data that could identify you personally after deletion. All retained data is fully anonymized and aggregated at a statistical level only.

5.3 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EU data transfers, to protect your information in accordance with this policy.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights:

6.1 GDPR Rights (European Union)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information under certain circumstances
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing of your information for certain purposes, including direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

6.2 CCPA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, and share
• Right to Delete: Request deletion of personal information we have collected about you
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

6.3 Video & Audio-Specific Rights

Given the sensitive nature of video and audio recordings, you have additional specific rights:

• Right to Delete Recordings: You can request deletion of specific video/audio recordings or all recordings at any time. We will delete the media files from our systems, though some processing may take up to 30 days to complete.
• Right to Access Recordings: You can request a copy of your video and audio recordings in their original format or a standard format (e.g., MP4).
• Right to Restrict Processing: You can request that we stop processing your recordings for certain purposes (e.g., AI analysis) while retaining the recordings for your access.
• Right to Object to AI Processing: You can object to AI/ML processing of your video/audio data, though this may limit the feedback and analysis features available to you.
• Camera/Microphone Control: You control access to your device's camera and microphone through your browser or device settings. You can revoke access at any time, though this will prevent you from using interview features.

6.4 Exercising Your Rights

To exercise any of these rights, especially regarding video/audio recordings, please contact us at support@skillora.ai. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request to ensure we do not disclose or delete data belonging to another user.

For Video/Audio Deletion Requests: Please specify which recordings you want deleted (by interview ID, date range, or "all recordings"). We will confirm deletion once completed. Note that deletion is permanent and cannot be undone.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of our Service.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function, including authentication and security
• Analytics Cookies: Help us understand how visitors interact with our Service (Google Analytics, Microsoft Clarity, Plausible)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness (HubSpot)

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling certain cookies may limit your ability to use some features of our Service.

8. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information, including video and audio recordings, from children. If you are a parent or guardian and believe your child has provided us with personal information or recordings, please contact us immediately at support@skillora.ai. If we become aware that we have collected personal information or video/audio recordings from a child without parental consent, we will take immediate steps to delete such information and recordings from our systems.

Special Note for Educational Institutions: If you are an educational institution using our Service for students, you are responsible for obtaining appropriate parental consent where required by law before students use our video/audio recording features.

9. International Users

If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our servers are located. By using our Service, you consent to the transfer of your information to these countries.

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing your information includes:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests (service improvement, security)

10. B2B Data Processing & Enterprise Customers

For enterprise customers, educational institutions, and organizations using our Service:

• We enter into Data Processing Agreements (DPAs) that define our roles and responsibilities as a data processor
• Organization administrators have access to aggregated, anonymized analytics for their users
• We implement appropriate technical and organizational measures to protect data processed on behalf of enterprise customers
• Enterprise customers retain control over user data and can request data export or deletion for their organization

For more information about our enterprise data processing practices, please contact support@skillora.ai or your account representative.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top
• Sending an email notification for significant changes (if you have provided your email)

Your continued use of our Service after such changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related requests (access, deletion, portability, etc.), please include "Privacy Request" in your email subject line and specify which right you wish to exercise.