Privacy Policy

1. The two roles of data on Screenza

Screenza processes two very different categories of personal data, and your role differs for each:

• Account data — information about you and your organisation as our customer. For this data we are the Data Fiduciary and you are the Data Principal.
• Candidate data — résumés and applicant information that you (the recruiter/employer) upload to screen. For this data you are the Data Fiduciary and Screenza acts only as a Data Processor, handling it on your instructions. You are responsible for having a lawful basis (such as the candidate's consent) to collect and upload it. See our Terms of Use.

2. Information we collect

• Account & profile: your name, work email, password (stored only as a salted hash — we never see it in plain text), profile photo and role.
• Organisation: company name, website, logo, country/state/city and plan/credit information.
• Candidate/résumé data you upload: names, contact details, work history, skills, CTC, and other information contained in the documents you submit for screening.
• Usage & device: log data such as IP address (used for security and approximate country), pages used, actions taken, and timestamps.
• Payments: we record credit top-up requests and the transaction reference you submit. We do not store full card or bank credentials; online payments (if enabled) are handled by a third-party gateway.
• Communications: support tickets and messages you send us.
• Cookies: a login token stored in your browser to keep you signed in. We do not use third-party advertising cookies.

3. How we use personal data

We use personal data to:

• provide, operate and secure the Service (authentication, screening, reports, billing);
• run AI-assisted résumé screening and ranking that you request;
• process credit top-ups and maintain your account balance and history;
• provide support, send service-related notices, and prevent fraud/abuse;
• understand aggregate, de-identified usage to improve the Service; and
• comply with legal obligations.

4. Legal basis & consent (DPDP Act)

For account data we rely on your consent and on the necessity of processing to provide the Service you have signed up for. You may withdraw consent at any time (see "Your rights"); withdrawal does not affect processing already carried out, and some processing may be necessary to keep your account or meet legal duties.

For candidate data, the lawful basis is provided by you as the Data Fiduciary. Screenza processes it solely to deliver the screening features you use.

5. AI processing & sub-processors

To provide screening and other features we use trusted third-party infrastructure and, where you enable AI, third-party AI providers. Content you submit for a given feature may be transmitted to these providers strictly to perform that task, and is not used by us to build advertising profiles.

Categories of sub-processors: cloud hosting and database providers; and AI/LLM providers (such as OpenAI, Anthropic and Google) when an AI key is configured for your deployment. If no AI key is configured, screening runs in a local mode without sending data to an external AI provider. A current list of sub-processors is available on request at ai@aryaninfosoft.com.

6. Sharing & disclosure

We do not sell personal data. We share it only: with sub-processors as described above; with your own organisation's administrators and members; when required by law or valid legal process; to protect the rights, safety and security of Screenza, our users or the public; and in connection with a merger, acquisition or asset sale, subject to this Policy.

7. Data retention

We keep account data for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, tax and dispute-resolution needs, after which it is deleted or de-identified. Candidate data is retained under your control — you can delete it, and it is removed on account closure subject to our backup cycles and legal obligations. Note that uploaded résumé files may be stored on ephemeral infrastructure and are not guaranteed to persist; the structured data is retained in our database.

8. International data transfers

Our infrastructure and AI sub-processors may process data on servers located outside India. Where personal data is transferred across borders, we do so in accordance with the DPDP Act and applicable law and take reasonable steps to ensure a comparable level of protection.

9. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit (HTTPS), hashed passwords, access controls and strict tenant isolation (each organisation's data is segregated). No system is perfectly secure; we cannot guarantee absolute security. If a personal data breach affecting you occurs, we will act in accordance with our obligations under the DPDP Act, including notification where required.

10. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to: access a summary of your personal data and how it is processed; correct or update inaccurate data; erase data that is no longer needed; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance. To exercise any right, contact us at ai@aryaninfosoft.com. We will respond within the timelines required by law. You also have the right to escalate an unresolved grievance to the Data Protection Board of India.

11. Your responsibilities for candidate data

If you upload candidate/applicant data, you confirm that you have the necessary rights and lawful basis (such as consent or a legitimate recruitment purpose) to collect it and to have it processed by Screenza on your behalf, and that you will honour candidates' requests and applicable data-protection laws. You are responsible for the notices and consents given to your candidates.

12. Children's data

The Service is a business tool intended for use by recruiters and employers and is not directed at children. We do not knowingly collect personal data of children (individuals under 18) as account holders. Do not upload data of minors except where lawful for a genuine recruitment purpose and with the consent required by law.

13. Cookies

We use a strictly-necessary login token to keep you signed in. We do not use advertising or cross-site tracking cookies. You can clear this token by logging out or clearing your browser storage.

14. Grievance Officer & contact

For any privacy question, request or grievance, contact our Grievance Officer at ai@aryaninfosoft.com. We aim to acknowledge grievances promptly and resolve them within the period prescribed by law.

You may also write to us by post at: Aryan Infosoft, 47, Siddivinayak CHS, Gokul Nagar, Sainath Lane, Aakurli Road, Kandivali East, Mumbai, Maharashtra 400101, India.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the version and effective date below and, where appropriate, ask you to re-accept. Your continued use of the Service after an update constitutes acknowledgement of the revised Policy.