Privacy policy
Effective Date: 01-12-2023
1. Introduction
TopGeek Private Limited owns the domain name hiroscope.ai and operates, controls and maintains the website (hiroscope.ai). TopGeek Private Limited is committed to honor your online privacy and acknowledge the need for adequate protection and management of any Personally Identifiable Information (“Personal Data'') which you share with us in relation to hiroscope.ai. This Privacy Policy (“Policy”) describes how TopGeek Private Limited collects, uses, discloses, and transfers Personal Data of users through its hiroscope.ai websites, online services, social media portals and any other service (together called as the "Website"). This Policy applies to those who visit the website, or whose information TopGeek Private Limited receives in connection with its products/services (hereinafter collectively referred to as "Users"). For the purposes of this Policy,"You" or "Your" shall mean the person who is accessing the website and “We”, “Us” or “Our” refers to TopGeek Private Limited.
If you visit our website and click the “I agree” button or, while sharing any Personal Data, you click the “I agree” button when prompted about the Privacy Policy, you are giving us your explicit consent to collect, use, and disclose your Personal Data in accordance with this Policy. Therefore, we recommend that you read this Policy carefully as it provides important information about your personal data and your rights under the relevant law. If you disagree with any terms in this Policy, please refrain from using our Website and Services. If you disagree with any terms in this Policy, please refrain from using our Website and Services.
2. What kind of Personal Data do we collect?
- When you visit/surf our Website, certain personal data about you such as your IP Address, etc. may be automatically stored with us. However, if you choose to avail certain services on our Website, you shall be required to provide certain personal data for the registration, and/or access to such products/services/web pages. Such information may include, without limitation, your name, email address, password, country, city, contact address, mobile/telephone number(s), sex, age, occupation, interests, credit card information, billing information, financial information, content, IP address, standard web log information, and company/organization that you are associated with, information that one would usually include in a resume, work experience, educational qualifications, data relating to your current and past remuneration or salary, information about your computer hardware and software and such other information as may be required for your interaction with the services/products and from which your identity is discernible. We may also collect demographic information that is not unique to you such as code, preferences, favorites, etc. Further, sometimes you may be asked to provide descriptive, cultural, preferential and social & lifestyle information.
3. Who bears the responsibility for data processing, and to whom should you direct your inquiries?
- As a part of providing the hiroscope.ai services to you and through our interactions with you, hiroscope.ai needs to collect Personal Data. We will process your Personal Data as a Controller. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at dpo@hiroscope.ai.You have the right to file a complaint with the relevant local data protection supervisory authority regarding the collection and use of your Personal Data by us.. To find the contact details of your local supervisory authority, you may refer to this link: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
4. Who will have access to your Personal Data?
- We will have access to your Personal Data in our role as data processor for the respective employer who is our customer. Based on our contractual relation to our customers we are obliged to process Personal Data only for the purpose of the customer. In the processing of your Personal Data we strictly follow the directions of our customers.
5. For what purpose and on what legal basis are the data processed?
- We process personal data in order to be able to provide our services and in order to receive and reply to your requests/applications. In compliance with the European Union's General Data Protection Regulation (GDPR), we are committed to providing a valid legal basis for processing personal data, particularly for users located in the EU. Our data processing activities align with the following legal bases:
- (a) Performance of a contract - When your Personal Data is necessary to enter into or perform our contract with you.
- (b) Consent - When you have consented to our use of your personal data (online or offline).
- (c) Legitimate interests - When we use your personal data to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights.
- (d) Legal obligation - When we must use your personal data to comply with our legal obligations.
- (e) Vital interests - When your personal data is necessary to protect the vital interests.
- (f) Public task - When processing is necessary for the performance of a task carried out in the public interest.
6. Server Log Files
- We collect and retain data related to your website visits through log files on our server. These log files comprise information automatically transmitted by your browser, such as:
- (a) Abbreviated IP address
- (b) Browser type/browser version
- (c) Your operating system
- (d) Referrer URL (or the previously visited website)
- (e) Date and time of the server request
- (f) Amount of transmitted data
- (g) Your internet service provider
- These data are exclusively collected and processed for the purpose of assessing the statistics of our website's performance. They will not be correlated with information from other sources.sources.
7. Cookies and Other Tracking Technologies
- Cookies are small files stored on your device (computer or mobile device) that are used to collect information, enhance your experience on our website and serve other related purposes.We use Cookies and similar tracking technologies to track the activity on our website and we hold certain information.We may use cookies to identify the browser you are using so that our website displays properly.Some cookies are necessary to make the website and our content available to you, while others are meant to improve the website and enable us to analyze and measure audience and traffic. For more information on our use of cookies and the data that they collect, see our Cookie Policy.
8. Data Storage and Processing Locations
- We employ a data storage approach wherein information is stored locally within our dedicated data center on the premises. Specifically, European Union (EU) data is automatically stored on our secure European Union based cloud server.
- In accordance with our data management protocols, there may be instances where data needs to be shared externally. This process is executed in compliance with organizational requirements, which necessitate the completion of a formal contract and the implementation of a data transfer agreement.
9. Retention of Data
- We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
- In some instances, we may choose to anonymize your personal data instead of deleting it, for statistical use, for instance. When we choose to anonymize, we make sure that there is no way that the Personal Data can be linked back to you or any specific user.
10. Your Data Protection Rights Under General Data Protection Regulation (GDPR)
- If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR. – See more at https://eur-lex.europa.eu/eli/reg/2016/679/oj.
- We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
- In certain circumstances, you have the following data protection rights:
- (a) Right to Access: You have the right to access, update, or request the deletion of the information we hold about you.
- (b) Right of Rectification: You have the right to have your information rectified if it is inaccurate or incomplete.
- (c) Right to Erasure (Right to be Forgotten): You have the right to request the erasure of your personal data under certain conditions. This right is also known as the "Right to be Forgotten." We will comply with such requests unless there are legal grounds for retaining the data.
- (d) Right to be Informed. You have the right to be informed about the collection and use of your Personal data.
- (e) Right to Object: You have the right to object to our processing of your Personal Data.
- (f) Right of Restriction: You can request the restriction of the processing of your personal information.
- (g) Right to Data Portability: You have the right to receive a copy of your Personal Data in a structured, machine-readable format.
- (h) Right to Withdraw Consent: If we rely on your consent for processing your personal information, you have the right to withdraw that consent at any time.
- (i) Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects
11. Your Data Protection Rights under the California Online Privacy Protection Act (CalOPPA)
- CalOPPA is the first state law in the nation to require commercial websites and online services to post a Privacy Policy. The law’s reach stretches well beyond California to require a person or company in the United States (and conceivable the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. – See more at: https://consumercal.org/about-cfc/cfc-education-foundation/california-online-privacy-protection-act-caloppa-3
- According to CalOPPA we agree to the following:
- a) users can visit our site anonymously;
- b) our Privacy Policy link includes the word “Privacy”, and can easily be found on the homepage of our Sites specified above;
- c) users will be notified of any Privacy Policy changes on our Privacy Policy Page;
- d) users are able to change their personal information by emailing us at dpo@geekyants.com.
12. Security of Data
- The security of your Personal Data is important to us. When you enter your Personal Data we treat the data as an asset that must be protected and use tools (encryption, passwords, physical security, etc.) to protect your Personal Data against unauthorized access and disclosure. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security nor can we guarantee that third parties will not unlawfully intercept or access transmissions or private communications, and that other users may abuse or misuse your personal information that you provide. Therefore, although we work hard to protect your information, we do not promise, and you should not expect, that your personal information or private communications will always remain private.
- We have implemented comprehensive measures to ensure compliance with relevant laws, safeguarding and preserving your privacy. Our commitment includes the deployment of physical, electronic, and procedural safeguards designed to protect your Personal Data. By accepting the terms outlined in this Privacy Policy, you acknowledge and agree that the standards and practices we have put in place are both reasonable and sufficient for the effective protection of your Personal Information.
13. Account Protection
- Your password is the key to your account. You shall be solely responsible for all the activities happening under your username and you shall be solely responsible for keeping your password secure. Do not disclose your password to anyone. If you share your password or your personal information with others, you shall be solely responsible for all actions taken under your username and you may lose substantial control over your personal information and may be subject to legally binding actions taken on your behalf. Therefore, if your password has been compromised for any reason, you should immediately change your password.
14. Anonymized Information.
- We may share aggregated, automatically-collected, and anonymized personal information with third parties for various purposes, including:
- (a) Compliance with Reporting Obligations: We may share information to comply with legal or regulatory requirements, including reporting obligations.
- (b) Understanding User Interests and Habits: We may share information to assist us and other parties in understanding our users' interests, habits, and usage patterns for certain programs, content, services, marketing, and/or functionality available through the use of our Services.
- The sharing of such information is done in a manner that does not identify individuals, and we take appropriate measures to ensure the confidentiality and security of the data. By using our Services, you agree to the sharing of aggregated and anonymized information for the purposes outlined above.
15. Automated decision-making process
- We refrain from using automated decision-making processes that could have legal consequences or significant negative impacts on individuals when initiating decisions related to establishing or conducting a business relationship. In cases where our Saas is utilized by an employer as part of a job application process, please review the Additional Information on Video Recruiting (mentioned below) and the privacy policy of the respective employer.
16. Additional information with respect to Video-Recruiting
- Hiroscope.ai provides a SaaS on behalf of employers who will be acting as data controller. When using the SaaS you may upload and share your own documents (the “User Generated Content”). Your video and audio recordings may include Personal Data, Skills and other information from your resume.
- While providing our SaaS we collect and store the following information about your Video Interview:
- (a) Email ID
- (b) Phone Number
- (c) Details within a Resume
- (d) LinkedIn Profile
- (e) IP Address
- With your consent in accordance with Article 9(2)(a) of the GDPR to the respective employer, the Video Recording will be utilized for the following purposes.
- (a) Speech Analysis: The Saas will convert your spoken words into text, quantify the voice-to-text, and transcribe the content. Subsequently, the transcribed words will undergo analysis using existing Natural Language Processing (NLP) libraries, such as sentiment analysis. This process aims to provide feedback on various aspects, including the clarity of speech, word count, and other relevant metrics.
- (b) Video Analysis: The SaaS may assess your video interview recordings through computer vision. The algorithm could analyze your facial expressions to identify positive or negative emotions. By using the hiroscope.ai SaaS, you explicitly consent to the quantification and evaluation of your recorded facial expressions.
- (c) Voice Analysis: The SaaS may listen to your voice and measure things like how excited or calm you sound. It assigns scores to these voice patterns. Then, it checks these scores for various effects, like different emotions. This helps hiroscope.ai SaaS to give you feedback on the effects of your voice.
- By using our SaaS, you expressly consent to the processing and storage of this information. You can withdraw your consent to process these data at any time.
17. Third Party Technology
- For access to our SaaS platform, we may offer a login in the future via Google or LinkedIn.
18. Service Providers
- We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform the below mentioned tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- For Advertising and Direct Marketing
- (a) Google AdSense
- (b) Linkedin
- (c) Facebook
- (d) Instagram
- (e) Reddit
- (f) Twitter
- (g) Discord
- For Content Optimization
- (a) Google Site Search
- (b) Google Analytics
- (c) Ahrefs
- (d) Crunchbase
- (e) Smartreach
- (f) Brevo
- (g) Descript
- (h) Canva
- (i) Synthesia
19. Links to Other Sites
- Our Service may contain links to other sites that are not operated by us. This policy and procedures we describe here do not apply to Third Party Sites, and links to such Third Party Sites on our Services and do not imply that we endorse or have reviewed the Third Party Sites. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, Privacy policies or practices of any third party sites or services.
20. Payments
- We will use third-party payment processing services for our Service (e.g. payment processors).
- We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal data is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
21. Children's Privacy
- Our Services are not intended for use by children under the age of 18 (“Child” or “Children”). We do not knowingly collect any Personal Data from Children under 18.We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal details. If you become aware that a Child has provided us with Personal Data, please contact us at dpo@hiroscope.ai. If we become aware that we have collected Personal Data from Children without verification of parental consent, we will take steps to remove that information from our servers.
22. Changes to This Privacy Policy
- We may update the Privacy Policy from time to time without prior notice, at Our sole discretion. In the event of any updates to our Privacy Policy, We will post the revised Policy on this Page. Additionally, a notification pop-up will appear when You attempt to access the website. You will be required to accept this notification by clicking “I agree” signifying Your agreement to the changes made in this Privacy Policy in order to continue using Our website and services.
- Changes to this Privacy Policy are effective when they are posted on this Page.
23. Governing Law
- This Policy will be governed by the laws of India without regard to its conflict of laws provisions.
24. Disputes and Arbitration
- Any dispute, controversy, or claim arising out of or in connection with this Privacy Policy, shall be resolved by arbitration in accordance with the Indian Arbitration and Conciliation Act, 1996. The arbitration shall be conducted by a sole arbitrator appointed mutually by the parties. The seat of arbitration shall be, Bangalore (Karnataka, India) and the language to be used in the arbitration proceedings shall be English.
- Any dispute resolution proceeding arising out of or related to this Policy whether in arbitration or otherwise, shall be conducted only on an individual basis and not in a class, consolidated or representative action, and you expressly agree that class action and representative action procedures shall not be asserted in nor apply to any arbitration pursuant to this Policy.
25. Disclaimer
- TopGeek Private Limited does not store or keep credit card data in a location that is accessible via the Internet. TopGeek Private Limited. uses the maximum care as is possible to ensure that all or any data / information in respect of electronic transfer of money does not fall in the wrong hands.
- TopGeek Private Limited shall not be liable for any loss or damage sustained by reason of any disclosure (inadvertent or otherwise) of any information concerning the user's account and / or information relating to or regarding online transactions using credit cards / debit cards and / or their verification process and particulars nor for any error, omission or inaccuracy with respect to any information so disclosed and used whether or not in pursuance of a legal process or otherwise.
- If you are under the age of 18, or the age of majority in the jurisdiction you reside, you may only use our website with the consent of your parent or legal guardian. In such a case TopGeek Private Limited shall not be liable for any cause of action that may arise due to non-compliance of this.
26. Contact Us
- If you have any questions, suggestions or grievances regarding our Privacy Policy or in in relation to the processing of your Personal Information, please contact us at dpo@hiroscope.ai