Privacy & Data Protection Policy

1. Scope of this policy

This Policy applies to all users of the Services, including website visitors, account holders, and enterprise customers. It also applies to all personal data processed through our AI-powered toolset, assessment features, dashboards, and integrations.

This Policy does not apply to third-party websites, applications, or integrations that you may access through the Services.

2. Information we collect

We collect the following categories of information:

2.1 Information You Provide Directly

• Account Information: name, email, password, company name, role.
• Payment Information: collected and processed exclusively by Stripe. We do not store full credit card numbers.
• User Content: interview questions, assessment data, candidate information, uploads, and data entered by you into the Services.
• Communication Data: support requests, feedback, email exchanges.

2.2 Information Collected Automatically

• Usage Data: pages viewed, features accessed, time spent, clickstream information.
• Device & Technical Data: IP address, browser type, operating system, device identifiers.
• Cookies & Tracking Technologies: session cookies, authentication cookies, analytics cookies. See Section 10 for details.

2.3 Information Received from Third Parties

• Applicant Tracking Systems (ATS), HR platforms, CRM tools, and any other integrations used by your organization.
• Stripe, for payment verification and fraud prevention.
• Public databases or social platforms if used for verification.

3. How we use your information

We use personal data for the following purposes:

3.1 To Provide and Improve the Services

• Account creation and authentication
• Delivering AI-generated assessments, scoring, and dashboards
• Personalizing user experience
• Enhancing algorithms and product features

3.2 To Process Payments

• Billing, invoicing, tax calculation, subscription management
• Payment processing via Stripe

3.3 For Communications

• Responding to support requests
• Sending service updates, onboarding messages, and important notices
• Marketing communications (with opt-out options)

3.4 For Security and Compliance

• Detecting fraud or unauthorized activity
• Enforcing Terms of Service
• Meeting legal, regulatory, and audit obligations

4. Legal bases for processing (GDPR users)

We rely on one or more of the following legal bases:

• Contract Performance (providing the Services)
• Legitimate Interests (security, fraud prevention, product improvements)
• Legal Obligations (tax, accounting, regulatory disclosures)
• Consent (marketing communications, cookies)

5. How we share your information

We may share personal data with the following categories of recipients:

5.1 Service Providers

• Cloud hosting and infrastructure providers
• AI infrastructure and model providers
• Session, communication, and code repository providers
• Monitoring, error tracking, and analytics providers
• Payment processing providers

All service providers are bound by confidentiality and data protection obligations.

5.2 Enterprise Customers (if applicable)

If you use the Services under a company account, your organization may have access to your usage and content.

5.3 Legal & Compliance

We may disclose information:

• If required by law, subpoena, or government request
• To protect rights, safety, or prevent fraud

5.4 Business Transfers

If we merge, acquire, or sell part or all of our business, data may be transferred to the new entity.

We never sell personal data.

6. Data storage & transfers

6.2 International Transfers

If data is transferred out of your region:

• We rely on standard contractual clauses (SCCs), or
• Adequacy decisions where available

6.3 Retention

We retain personal data only as long as necessary for:

• Providing the Services
• Fulfilling legal obligations
• Resolving disputes

When data is no longer needed, we securely delete or anonymize it.

7. Security measures

We implement industry-standard technical and organizational security controls, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest
• Access controls and authentication safeguards
• Data minimization and role-based access

However, no method of transmission or storage is 100% secure.

8. Your rights

Depending on your jurisdiction, you may have rights such as:

• Access to your data
• Correction or deletion
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent
• Opt-out of marketing communications

CCPA/CPRA users may have additional rights:

• Right to know
• Right to correct
• Right to delete
• Right to opt out of data sharing/sale (we do not sell data)

Requests can be made at info@unicheck.ai.

9. Children’s privacy

The Services are not intended for individuals under 18 years of age, and we do not knowingly collect their personal data.

10. Cookies & tracking technologies

We use cookies to:

• Maintain sessions and authentication
• Analyze usage and performance
• Personalize the interface

You can control cookie preferences through your browser settings or opt-out tools.

A detailed Cookie Policy may be provided separately.

11. Third-party links and integrations

The Services may contain links or integrations with third-party systems. Their privacy practices are governed by their own policies. We are not responsible for their handling of personal data.

12. Cookie policy

12.1 Use of Cookies. We use cookies and similar tracking technologies to operate, analyze, and improve the Website and Services.

12.2 Types of Cookies Used.

• Essential Cookies: Required for core site functionality (authentication, security, session management).
• Analytics Cookies: Help us understand how visitors use the Website. We use tools such as Google Analytics or privacy-focused alternatives.
• Functional Cookies: Remember your preferences and enhance your experience.
• Advertising/Tracking Cookies: Used only if applicable and only with consent; help measure campaign performance.

12.3 Third-Party Cookies. Third parties such as Stripe, analytics providers, and embedded service vendors may place cookies when you interact with their components on our Website.

12.4 Cookie Consent. Where required by law, we display a cookie banner that allows you to accept, decline, or customize cookie categories.

12.5 Managing Cookies. You can delete or block cookies through your browser settings. Blocking essential cookies may impact Website functionality.

13. Changes to this policy

We may update this Policy to reflect changes in law, regulations, or Services. Updated versions will be posted on this page with a revised "Last Updated" date.

Contact

For questions about this Policy or your rights, contact: