Privacy Policy

Welcome to Xquizit ("we," "us," or "our"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered hiring assessment platform, including our website, desktop application, and any related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

Account Information

When you create an account or are invited to take an assessment, we may collect your name, email address, phone number, organization name, job title, and login credentials.

Assessment & Test Data

When you participate in an assessment, we collect your responses, code submissions, answer selections, time spent on each question, and overall test completion data.

Proctoring Data

To maintain assessment integrity, our proctoring features may continuously collect webcam video and audio recordings, screen activity captures and screen sharing, browser tab and focus events, keystroke patterns (timing only, not content outside the assessment), and system environment metadata (such as operating system and browser version) for the entire duration of a proctored session.

Calibration Data

Before or during an assessment, we may ask you to perform camera, microphone, and screen-sharing calibration checks. These short checks may capture brief audio, video, and screen samples, as well as device configuration data, so we can confirm that your setup works correctly and that our proctoring systems can operate as intended.

AI Interview Data

If you participate in an AI-powered interview, we collect audio and/or video recordings of your responses, transcriptions generated from your spoken answers, and AI-generated evaluations and scores.

Usage & Technical Data

We automatically collect IP addresses, device identifiers, browser type and version, pages visited and features used, referring URLs, and access timestamps.

Payment Information

For paid subscriptions, payment processing is handled by third-party providers (such as Razorpay). We do not store your full credit card number or payment account details on our servers.

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Administer assessments, interviews, calibration flows, and proctoring services
• Generate candidate reports and analytics for hiring organizations
• Detect and prevent cheating, fraud, and unauthorized access during assessments
• Record and store complete proctoring sessions (including video, audio, and screen activity) so authorized reviewers can understand what happened during a test
• Process payments and manage subscriptions
• Communicate with you about your account, assessments, and Platform updates
• Run your assessment and proctoring data through pre-trained AI/ML models to detect potential integrity issues and technical problems (without using your raw audio, video, or screen recordings to train our own models)
• Comply with legal obligations and enforce our terms of service

Our Platform uses AI-based proctoring to ensure the integrity of assessments. We want to be transparent about how this works:

Webcam & Audio Monitoring

During proctored assessments, your webcam and microphone may be active for the entire duration of the test. Video and audio data are recorded and processed by our systems to detect potential violations such as the presence of unauthorized persons, use of prohibited materials, or suspicious behavior patterns. You will always be informed before any proctored session begins and must provide explicit consent before your camera, microphone, or screen are accessed.

Screen Recording

Screen activity and screen sharing may be captured continuously during a proctored assessment to monitor for unauthorized applications, browser tabs, or resources. This data is used solely to protect the integrity and fairness of the assessment and is not visible to other candidates.

Calibration Checks

We may ask you to complete short calibration steps (for example, checking your camera framing, microphone volume, or screen-sharing configuration). These checks help us confirm that everything works as expected before the test starts and that proctoring can reliably observe the session.

AI Analysis

Our AI systems analyze proctoring data to flag potential irregularities. Flagged events are made available to the hiring organization for human review. No automated decision is made solely based on AI analysis without the opportunity for human oversight. Within our own systems, we use your proctoring and calibration data only to run inference through pre-trained models and to generate alerts and metrics; we do not use your raw recordings to train new machine learning models.

Hiring organizations can connect their Meta account to Xquizit, select a Page and Instant Form they are authorized to access, and import leads into recruitment rounds. Imports run when requested and on the schedule configured by the customer.

Information received from Meta

We receive the connecting user's Meta account identifier, authorized Page details and access credentials needed for the connection. We store Page access tokens in encrypted form. For selected forms, we receive form names, questions and lead responses. These may include names, email addresses, phone numbers, custom answers and disclaimer responses, together with Page, form, lead and ad identifiers and submission timestamps where provided by Meta.

How imported information is used

We use this information to connect the selected source, import and update candidate records, prevent duplicate imports, and display contact details and original form answers to the hiring organization. The organization can select which answers appear as columns in its candidate table. Hiding an answer column does not delete the saved answer.

Imported candidate information is handled under the access, sharing and retention provisions of this policy. If the hiring organization uses other Xquizit recruitment or assessment features for an imported candidate, the relevant provisions for those features also apply.

Disconnecting Meta

You can disconnect Meta in Profile > Integrations. Disconnecting clears the stored connection credentials and stops new imports through that connection. Candidates and answers already imported remain in Xquizit. Removing a candidate from a sourcing round also does not by itself erase every stored copy of their information. To request deletion, follow the instructions below.

When we erase an imported Meta lead, we retain a minimal record of its source identifier associated with the customer account to prevent the same lead from being imported again. This record does not contain the lead's contact details or form answers. Deleting source records does not remove copies held separately by Meta or the hiring organization.

We may share your information with:

Hiring Organizations

If you take an assessment or interview, the organization that invited you will have access to your results, proctoring reports, and submitted responses. They are the data controllers for this information in their hiring context.

Service Providers

We engage trusted third-party vendors to support hosting and infrastructure, payment processing, email delivery, analytics, secure video and file storage, and AI/ML model services. These providers are contractually obligated to protect your data and use it only for the purposes we specify on our behalf. We do not sell or rent your personal information.

Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change in ownership or control of your personal information.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account data is retained for the duration of your account and for a reasonable period thereafter.
• Assessment results and proctoring recordings are retained for as long as the inviting organization keeps the candidate and assessment active on the Platform and needs access to the full proctoring history. We do not automatically delete these recordings while the relevant account remains active, unless the inviting organization, the candidate (where such controls are provided), or the account owner requests deletion, or we are required to delete them by applicable law.
• Payment records are retained as required by tax and financial regulations.

You or your hiring organization may request deletion of your data at any time, subject to our legal obligations. In some cases, we may retain limited backup copies for a short period after deletion for security, audit, and compliance purposes.

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and role-based permissions
• Logical separation and strict authorization rules so that candidates can only access their own data and organizations can only access information related to their own account
• Regular security assessments and penetration testing
• Secure cloud infrastructure with reputable providers
• Employee training on data protection best practices

While we strive to protect your data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate or incomplete data.
• Deletion — Request deletion of your personal data, subject to legal retention requirements.
• Portability — Request your data in a structured, machine-readable format.
• Objection — Object to certain processing of your data, including profiling.
• Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@xquizit.in. We will respond to your request within 30 days.

To request deletion of your personal data, including information received through Meta sourcing, email support@xquizit.in with the subject "Data deletion request".

• Tell us whether you are a candidate or a customer requesting deletion for an account, and describe the information you want deleted.
• Include the email address associated with your account or lead submission. For Meta leads, include the hiring organization and Page or form name if known, so we can locate the relevant records even if Meta has been disconnected.
• Do not send passwords, access tokens or identity documents in your initial request. We may ask for additional information to verify your identity and authority before acting on the request.

Candidates can also contact the hiring organization that collected their information. Where that organization controls the records, we may need to coordinate with it to handle the request. The response timeframe in Your Rights and the retention exceptions described in Data Retention apply to deletion requests. You can use the same support address to ask about your request's status.

We use cookies and similar technologies to maintain your session and authentication, remember your preferences, understand how you use the Platform, and improve our services.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

To facilitate seamless recruitment workflows, we offer the Xquizit Companion browser extension. When you install and use this extension, specific data collection and usage rules apply to ensure your privacy and comply with browser platform policies.

Information We Collect

The extension only extracts candidate information (such as Name, Email, Phone Number, and Resumes) from authorized third-party job boards (like LinkedIn and Naukri) when you explicitly initiate an export. It also utilizes your Xquizit authentication credentials to maintain a secure session between the browser and our servers.

How We Use This Data

The data collected by the extension is used solely to provide its core functionality: securely syncing your authorized candidate data from external job boards directly into your Xquizit dashboard.

Chrome Web Store Limited Use Disclosure

The Xquizit Companion extension complies strictly with the Chrome Web Store User Data Policy, including the Limited Use requirements. The data collected by the extension is never sold, rented, or transferred to third parties for unrelated marketing or advertising purposes. It is processed exclusively on your behalf to provide the recruitment automation features you request.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.

Our Platform is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our Platform and updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.