[ Kyiri Tech · Legal ]

Privacy Policy

Last updated · 2026-04-28

Draft — pending legal review

This page is a placeholder so signup, payment, and email-footer links resolve to a stable URL. The final text is being reviewed by counsel for DPDP Act / GDPR alignment and will replace this body before public launch.

1. Information we collect

Account data: name, email, phone, country, role (candidate, partner, support, admin).
Booking data: interview details (role title, scheduled time, duration), Teams meeting metadata, and recordings when applicable.
Resume / job description text: uploaded by candidates and partners as part of a booking. We use it solely to brief the assigned interviewer.
Payment data: screenshot, UPI reference, and admin notes. Payments are reconciled manually; we do not store bank account or card details.
Operational logs: IP address (for rate-limiting and abuse prevention), authentication events, and admin actions for audit purposes.

2. How we use it

To run the booking, assignment, and meeting flow.
To send transactional email (booking invites, payment receipts, password resets).
To detect and respond to abuse or security incidents.
To meet legal and tax obligations.

We do not sell your data, and we do not use it for advertising.

3. Sharing

We share data only with the service providers strictly needed to run the platform — currently Supabase (auth + database), Microsoft Graph / Teams (meeting hosting), Cloudflare Turnstile (bot detection), Sentry (error monitoring). Each operates under its own contractual data-protection terms.

4. Retention

Account data is retained while the account is active. Booking and payment records are retained as required by Indian tax / book-keeping law (currently up to 8 years post-transaction). Logs and rate-limit data are pruned within 90 days.

5. Your rights

Subject to applicable law, you can request a copy of the data we hold about you, correction of inaccuracies, and deletion of your account. To exercise these rights, email support@kyiri.com. We will respond within 30 days. (Self-service export and delete flows are on the roadmap.)

6. Security

Data is encrypted in transit (TLS) and at rest. Access to admin tools is restricted by role, audited, and rate-limited. We use Supabase Row Level Security for database-level scope enforcement.

7. Children

The service is not directed at children under 18 and we do not knowingly collect data from minors.

8. Changes

We may update this policy from time to time. Material changes will be communicated by email. Continued use after an update constitutes acceptance.

9. Contact

Privacy questions: support@kyiri.com.

Terms of ServiceSign in

[ Privacy ]