Privacy policy

This privacy policy explains how IDesk Technologies Pvt Ltd (“InterviewDesk”, “we”, “us”) collects and uses personal data through Creya AI, our AI-powered interview platform, and the Creya website.

It applies to two groups of people:

• Clients — employers, recruiters and hiring teams who use Creya to interview candidates.
• Candidates — people who take an interview conducted by Creya on behalf of a client.

This policy supplements the InterviewDesk Global Privacy Policy. Where this policy is more specific about Creya, this policy applies.

Our commitment: we do not sell personal data, we do not show advertising, and Creya never makes hiring decisions. People do.

Our role depends on whose data it is.

If you are a candidate, the employer is responsible for your data. We process it on their instructions under a data processing agreement.

Before your interview starts, Creya will clearly tell you that:

1. You are being interviewed by an AI system, not a person.
2. The session will be recorded (video, audio and screen, as applicable).
3. Your responses will be transcribed and evaluated by AI, and the results shared with the employer.
4. A human at the employer makes the final hiring decision.

You will be asked for explicit consent to camera, microphone and screen access and to recording. You can decline. If you decline, or need an accommodation (for example, a disability, connectivity limits or language needs), you can ask the employer for an alternative assessment.

You can withdraw consent at any time by ending the interview or contacting us. Withdrawal does not affect processing already done, but it may mean the employer cannot evaluate you through Creya.

Data we do not want. We do not ask for gender, marital status, date of birth, religion, caste, health, or other sensitive data. If a resume contains it, Creya does not use it for evaluation.

Biometric data and AI proctoring

• No biometrics. Creya does not create face or voice templates. We do not use facial recognition or voice identification. Video and audio are recorded only so the interview can be transcribed, evaluated and reviewed by the employer.
• AI proctoring. Creya’s AI checks the session for integrity issues, such as more than one person appearing or speaking, or switching tabs. It detects that another person is present but does not identify anyone. Flags go to the employer for human review and do not automatically disqualify you.

Cookies on the Creya website are described in the cookie policy.

We list a legal basis for both GDPR/UK GDPR and India’s DPDP Act, because DPDP relies mainly on consent and does not recognise “legitimate interest”.

We do not use candidate data for advertising, and we do not market to candidates unless they separately opt in.

Creya assists; people decide. Creya produces scores, summaries and recommendations. It does not reject or hire anyone. Final decisions are made by the employer’s human reviewers, who can see the recording and transcript as well as the AI output.

What Creya evaluates: the job-related content of your answers, such as technical accuracy, problem-solving, communication clarity and relevance to the role.

What Creya never uses to score you:

• Facial expressions, emotions, eye contact or body language
• Voice tone, accent or speaking speed
• Appearance, background or surroundings
• Age, gender, race, religion, caste, disability, or any other protected characteristic

Limitations. AI evaluations can be incomplete or wrong. They should be one input among several in a hiring decision.

Creya uses third-party AI providers alongside our own technology. The categories below are the sub-processors we use to run Creya. Named providers and the countries they process in will be added to this list before a provider handles personal data. We do not name a country here until it is confirmed.

Model training

• Our AI providers are contractually prohibited from using your data to train their models.
• We do not use identifiable recordings or transcripts to train Creya.
• We may use de-identified, aggregated data to improve accuracy and fairness, or a client’s own data to tailor Creya for that client only, under their contract.

International transfers. Data is stored in India, but AI providers may process it in other countries. For UK/EU data we use EU Standard Contractual Clauses and the UK Addendum or IDTA, plus a transfer risk assessment. For Indian data we transfer only to countries not restricted by the Government of India under the DPDP Act.

Who we share data with

• The employer you are interviewing with — your recording, transcript, evaluation and integrity signals.
• Sub-processors listed in section 7, only to run Creya and under contract.
• Professional advisers, auditors and authorities, acting as independent controllers, where law requires.
• A buyer or successor if our business is sold or merged. They must honour this policy, and we will notify you.

We never sell personal data or share it for advertising.

Security. Recordings and transcripts are encrypted in transit and at rest. Access is limited to authorised staff, logged and audited. If a breach affects your data, we will notify you and the relevant regulators within the legally required time.

Retention

Candidates: because the employer controls your interview data, send requests to them first. We will help them respond. You can also contact us and we will forward your request.

We respond within one month (GDPR) or the time set by the DPDP Rules, 2025. We may verify your identity first. Requests are free unless they are clearly excessive.

Children. Creya is not meant for anyone under 18. We do not knowingly interview minors. If you are a client hiring for internships or apprenticeships, you must not send Creya interviews to candidates under 18.

This policy is effective from 1 November 2026. If we make significant changes, we will email clients at least 30 days in advance and show the updated notice to candidates before their next interview. Minor changes will be posted here with a new date.

Questions about this policy: contact@interviewdesk.in.