Privacy Policy

Last updated: 5 November 2026

1. Who We Are

Skillozia (skillozia.com) is an applicant tracking and recruitment management platform operated by Questiverse Learning LLP, a limited liability partnership registered in India. Questiverse Learning LLP also operates eutopiaschool.com and skillesta.com.

In this Privacy Policy, "we", "us", and "our" refer to Questiverse Learning LLP and the Skillozia platform. "You" and "your" refer to any individual or entity that accesses or uses the platform.

We are committed to protecting your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Scope

This policy applies to all data collected through the Skillozia platform, including our website, web application, APIs, career portals, candidate portals, and any associated services. It covers data from:

• Agency users — recruiters, managers, and owners who use the platform to manage recruitment operations.
• Candidates — individuals whose information is stored, tracked, or processed through the platform.
• Clients — companies and hiring managers who interact with the platform via client portals or shared pipelines.
• Visitors — anyone who visits our public website or career portal pages.

3. Information We Collect

3.1 Information You Provide

• Account data: Name, email address, phone number, company name, and role when you create an account.
• Candidate data: Resumes, cover letters, contact details, skills, work history, education, salary expectations, and any notes or assessments added by recruiters.
• Communication data: Emails sent through the platform, contact logs, interview notes, and internal comments.
• Client data: Company names, hiring manager details, job descriptions, and pipeline configurations.
• Payment data: Billing information processed through our third-party payment providers (we do not store full card numbers).

3.2 Information Collected Automatically

• Usage data: Pages visited, features used, actions taken, timestamps, and session duration.
• Device data: Browser type, operating system, screen resolution, and IP address.
• Cookies: We use essential cookies for authentication and session management, and optional analytics cookies to improve the platform.

3.3 Information from Third Parties

• Resume data read from uploaded files by our AI resume parser.
• Profile information imported from LinkedIn or other integrated platforms (only when authorized by the user).
• Calendar availability from Google Calendar or Microsoft Outlook integrations.

4. How We Use Your Information

We process your data for the following purposes:

• Providing the service: Managing candidates, jobs, pipelines, interviews, and communications.
• Features that use AI: Resume parsing, candidate-job matching, and assessment scoring.
• Communication: Sending emails, notifications, and updates related to recruitment activities.
• Analytics and reporting: Generating recruitment metrics, placement reports, and performance dashboards.
• Security: Detecting unauthorized access, preventing fraud, and maintaining audit trails.
• Improvement: Analyzing usage patterns to improve features, fix bugs, and enhance the user experience.
• Legal compliance: Meeting regulatory obligations and responding to lawful requests.

5. Data Sharing and Disclosure

We do not sell your personal data. We share data only in these circumstances:

• Within the tenant: Candidate and recruitment data is shared among authorized team members within the same agency/organization.
• With clients: When candidates are submitted to hiring clients through client portals or shared pipelines, relevant candidate information is shared with those clients.
• Service providers: We use third-party services to run the platform. The main ones are: Hosting: Amazon Web Services (AWS), ap-south-1 region (Mumbai)
• Email delivery: Brevo, or Amazon SES where configured
• Payment processing: Razorpay
• AI services: Google (Gemini API), with OpenAI as a fallback where enabled
• Security and monitoring: Cloudflare Turnstile (bot protection on sign-up and sign-in) and Sentry (error reports, when enabled)
• Website analytics: Google Analytics, loaded only after you accept analytics cookies
• Services a customer connects: Google and Microsoft calendars and video meetings, LinkedIn, Meta (WhatsApp Business), MSG91 (SMS) and Slack
• The full list, with what each is used for and where it processes data: Subprocessors
• Legal requirements: We may disclose data to comply with applicable laws, legal processes, or enforceable government requests.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Candidate data is retained as long as the recruiting agency maintains an active account. Specific retention periods:

• Account data: Retained until account deletion, plus 30 days for backup recovery.
• Candidate data: Retained as long as the tenant account is active. Tenants can delete individual candidate records at any time.
• Audit logs: Retained for up to 2 years for compliance purposes.
• Communication logs: Retained for the duration of the tenant account.
• Analytics data: Aggregated and anonymized data may be retained indefinitely.

7. Data Security

We implement industry-standard measures to protect your data. See our Security Policy for full details. Key measures include:

• Encryption in transit (TLS).
• Role-based access control with 11 built-in roles, each with its own permissions.
• Multi-tenant data isolation — each organization's data is strictly separated.
• Secure authentication with JWT tokens, refresh token rotation, and optional two-factor authentication.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

For candidates: If your data has been uploaded by a recruitment agency, please contact that agency directly to exercise your rights. The agency is the data controller for your recruitment data, and Skillozia acts as a data processor.

To exercise any of these rights, contact us at privacy@skillozia.com.

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

9. Cookies

We use the following types of cookies:

We do not use advertising or tracking cookies.

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Preference cookies: Store your theme preference (dark/light mode) and language settings.
• Analytics cookies: Help us understand how users interact with the platform. These are optional and can be disabled.

10. Children's Privacy

Skillozia is a business-to-business platform designed for recruitment professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. International Data Transfers

Our servers are hosted on Amazon Web Services (AWS). Your data may be processed in data centers located outside your country of residence. We ensure appropriate safeguards are in place for all international data transfers in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notification. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Questiverse Learning LLP

Email: privacy@skillozia.com

Website: skillozia.com

14. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer can be contacted for any complaints or concerns regarding data processing.

Grievance Officer

Name: Megha

Email: megha@questiverse.in

We will acknowledge your complaint within 48 hours and resolve it within 30 days from the date of receipt.