Privacy Policy

1. Data We Collect

1.1 Account Data

• Email address
• Password (stored as a bcrypt hash — never in plain text)
• Account role (Recruiter or Applicant)
• Account creation date

1.2 Resume and Profile Data (Applicants)

• Resume text content uploaded by the user
• Match scores generated by our AI against job descriptions
• Screening question responses submitted through the Platform

1.3 Job and Recruitment Data (Recruiters)

• Job titles and descriptions posted on the Platform
• Applicant evaluation scores and ratings assigned by recruiters
• Screening decisions and interview selections

1.4 Video Interview Data

• Video interview transcripts generated from recorded sessions
• Eye tracking behavioral data (gaze direction, look-away frequency) captured via MediaPipe FaceMesh — processed entirely in your browser, not uploaded as raw video
• AI risk signals (response timing, behavioral patterns)
• AI-generated behavioral, technical, cultural fit, and communication scores

1.5 Technical Data

• IP address
• Browser type and version
• Device type
• Pages visited and time spent on the Platform

2. How We Use Your Data

• To authenticate your account and provide access to the Platform
• To match applicant resumes with relevant job postings
• To generate AI-powered screening questions tailored to the role and candidate
• To evaluate interview responses and produce scoring reports for recruiters
• To analyze behavioral signals during video interviews as one input into evaluation
• To improve Platform performance and diagnose technical issues
• To communicate with you about your account or the Platform

3. Third-Party Services That Receive Your Data

We use the following third-party services. Each has their own privacy policy:

• Supabase (supabase.com) — database and authentication. Stores all user data on servers in the United States.
• Amazon Web Services / AWS Bedrock (aws.amazon.com) — AI processing via Amazon Nova. Resume text, job descriptions, and interview transcripts are sent to AWS for AI analysis.
• MediaPipe by Google (developers.google.com/mediapipe) — eye tracking. Runs entirely in your browser. Raw video is never sent to any server.

We do not sell your data to any third party. We do not use your data for advertising purposes.

4. Data Retention

• Account data: retained until you delete your account
• Resume data: retained until you update or delete it
• Video interview transcripts and scores: retained for 12 months from the date of the interview, then deleted
• Eye tracking data: retained for 12 months, then deleted
• Job postings: retained until the recruiter deletes them

5. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that inaccurate data be corrected
• Deletion: request that your data be deleted ("right to be forgotten")
• Portability: request your data in a machine-readable format
• Objection: object to our processing of your data in certain circumstances

To exercise any of these rights, email lakshya@alvora.ai. We will respond within 30 days.

6. Data Security

• All data is encrypted in transit using HTTPS/TLS
• Passwords are hashed using bcrypt before storage — never stored in plain text
• Database access is restricted to authorized personnel only
• Eye tracking video processing occurs locally in your browser — raw video is never transmitted

Despite these measures, no system is 100% secure. In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.

7. Children's Privacy

The Platform is intended for users 18 years of age and older. We do not knowingly collect data from individuals under 18. If you believe a minor has created an account, contact us immediately at lakshya@alvora.ai and we will delete the account and associated data.

8. AI Decision-Making

The Platform uses automated AI processing to generate evaluation scores and hiring recommendations. These scores are tools to assist recruiter decision-making — they are not final or binding decisions. Recruiters retain full human oversight and responsibility for all hiring decisions. If you believe an AI evaluation was unfair or inaccurate, you may contact the recruiter directly or raise a concern with us at lakshya@alvora.ai.

9. International Users

The Platform is operated from the United States. If you access the Platform from outside the US — including from mainland China, the European Union, or elsewhere — your data will be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We apply the same data protection standards regardless of where you are located.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Platform. The updated policy will take effect upon posting.

11. Contact

Privacy questions or data requests: lakshya@alvora.ai

Alvora LLC, Delaware, United States