Privacy notice
Last updated 19 September 2026.
This notice covers Assay, the hiring assessment product operated by Kravos Tech Private Limited, a company registered in India.
Our role
Section titled “Our role”Assay handles personal data in two different capacities, and the distinction determines who you should contact.
For candidate data, we are a processor. The company that invited you to an assessment decides why your data is collected and what happens to the result. We process it on their instruction. That company is the controller, and they hold the relationship with you.
For our customers’ own account data, we are the controller. Staff users at a hiring company who sign in to Assay are our users, and we decide how their account data is handled.
What we handle, and for whom
Section titled “What we handle, and for whom”Candidate data, processed for our customers
Section titled “Candidate data, processed for our customers”- Email address and an authentication identifier issued at sign-in
- A resume, if one was uploaded by the candidate or the company
- Work produced during the assessment: code written, files created, commands run and their output
- Session activity: when a session started and ended, and whether the candidate navigated away from the assessment
- Interview content: the text transcript of a spoken interview, or typed answers in a written one
- The resulting evaluation, including scores and the written reasoning behind them
Voice audio is not retained. During a spoken interview, a candidate’s speech is streamed for transcription and is never written to disk or kept by us. The transcript persists; the audio does not. Our speech provider is opted out of model training on that audio.
No biometric data is collected at any point. Identity verification records only that a sign-in was confirmed before a session began. No photograph, no identity document, no facial or voice biometric.
Customer account data, where we are the controller
Section titled “Customer account data, where we are the controller”Name, work email address, the organisation a user belongs to, and their role within it.
Sub-processors
Section titled “Sub-processors”Listed in full, with what each one does, on Sub-processors.
How long we keep it
Section titled “How long we keep it”Your rights
Section titled “Your rights”Under India’s Digital Personal Data Protection Act, and comparable regimes elsewhere, you may request access to your personal data, correction of it, or its deletion, and you may withdraw consent.
If you are a candidate, see Your rights.
If you are a customer’s staff user, contact us directly.
Deletion is currently actioned by a person on our team. There is no self-service control and no automated process behind it. We are telling you what you are relying on.
Automated decision-making
Section titled “Automated decision-making”Assay produces an assessment using a language model applied to a rubric that the hiring company defines.
Assay does not make hiring decisions. It produces a score, the reasoning behind it, and the underlying evidence. The company that invited the candidate reviews that material and decides for itself. A candidate who believes an assessment is wrong, including where a transcript misheard them, can raise it with that company, which can see the full evidence and disregard the result.
Security
Section titled “Security”How candidate and customer data is protected, including where our controls currently fall short, is described in Security.
Complaints and contact
Section titled “Complaints and contact”For any request or complaint about personal data, including a grievance under the Digital Personal Data Protection Act, contact info@kravos.tech.
Kravos Tech Private Limited, India.
If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.
Changes
Section titled “Changes”We will update this notice when what we do changes, and the date at the top will change with it. Where a change is material, we will tell customers directly rather than relying on you to notice.
This notice covers the Assay product. The Kravos Tech company website has its own separate privacy policy, which covers that website and not assessment data.