Privacy Notice

Who Is Responsible

For candidates' data, the company that is hiring decides what is collected and why: it is the data fiduciary, and Synapserve Innovations Private Limited processes the data on its behalf and on its instructions. For the accounts of people who use KASAUTI IQ (company teams and learners) and for messages sent from this website, Synapserve Innovations Private Limited is the data fiduciary.

What We Collect

Accounts: name, work email, role, company, sign-in times, a one-way hash of the password (never the password itself) and, if it is turned on, two-step sign-in settings. Conversations with the in-app help assistant are saved in the user's own history. A record of changes (who did what and when, with the request's IP address) is kept so companies can review activity.

Companies: the company profile and, for billing, the legal name, billing address and GSTIN.

Candidates: the details and résumé a company enters or uploads; assessment answers; and, for interviews the candidate agrees to, the video, voice and shared screen, a written transcript, the code and notes they write, and integrity signals such as tab switches, large pastes and camera photos taken every few minutes. The interview privacy page explains this in detail for candidates.

Learners: name, email, whether they are a student or a professional, the profile they fill in (for students, the college name and student ID; for professionals, their work details), their practice tests and results, and payments for extra practice tests.

Website visitors: what is sent through the demo and contact forms. Questions asked of the website's help assistant are answered and not saved. There are no advertising or tracking cookies.

Why We Use It

To run the service each company has signed up for, to keep accounts and interviews secure and detect misuse, to send the emails the service needs (invitations, reminders, password resets), and to meet legal obligations. Personal data is not sold and is not used for advertising.

AI Processing

Some features send text to an AI model (Claude, by Anthropic): drafting interview reports from transcripts and interviewers' notes, suggesting questions, reading résumés and job descriptions, the AI interviewer, and the in-app help assistant. A person reviews every report and makes every hiring decision; nothing about a candidate is decided automatically. The AI does not assess appearance, voice, accent or emotions. Anthropic processes the data only to return the result and, under its commercial terms, does not use it to train its models. Companies can turn AI features off.

Where It Is Stored

The database and all stored files, including interview recordings and photos, are kept in India (Mumbai). The services below that are based outside India receive only what they need for their task, under data processing agreements.

Sub-Processors

• SupabaseDatabase and file storage, including interview recordings, photos and résumés. India (Mumbai).
• VercelHosting the website and application. India (Mumbai).
• LiveKitVideo interviews, recording, live transcription and the AI interviewer's voice (LiveKit Cloud and the speech models it runs). The LiveKit Cloud region nearest the participants.
• AnthropicAI drafting (Claude): reports, questions, résumé reading, the AI interviewer. United States.
• ResendSending email. United States.
• CloudflareThe security check on sign-in and website forms. Global.
• Judge0Running candidates' code in technical interviews, when it is switched on. The region of the configured server.

How Long It Is Kept

Each company chooses how long interview data is kept, within these limits, and it is then deleted automatically: recordings 30 to 730 days, photos 7 to 180 days, and transcripts and reports 90 to 1095 days. A company can also delete a candidate's interview data at any time.

Account and company data is kept while the company uses KASAUTI IQ. When a company stops, it can ask for its data to be deleted, which is done within 30 days, except records the law requires us to keep, such as invoices. Learners can ask for their account to be deleted at any time.

Security

Data is encrypted in transit and at rest, files are private and opened only through short-lived links, and each company's data is separated from every other company's. The Security page describes the measures in place and what is not in place yet.

Your Rights

Under the DPDP Act you can ask to see a summary of your personal data, have it corrected, completed or erased, withdraw consent you gave, nominate someone to act for you, and have a grievance resolved.

Candidates: contact the company that invited you first, as it decides about your data; we help it answer. Everyone else, or if a company does not respond: email hello@kasautiiq.com. Requests are answered within 30 days.

Grievance Officer

Grievance Officer, Synapserve Innovations Private Limited, Hyderabad, Telangana, India. Email: hello@kasautiiq.com. If you are not satisfied with the answer, you can complain to the Data Protection Board of India.

Cookies

A cookie keeps you signed in. Scripts on the page can't read it, and it stops working when you sign out. Optional preference cookies remember your theme and sidebar, and you can turn them off on the Cookies page. There are no advertising or tracking cookies.

Children

KASAUTI IQ is not meant for anyone under 18, and we do not knowingly collect their data.

Changes to This Notice

When this notice changes, the date at the top changes, and companies are told of significant changes before they take effect.