Privacy Policy

1. Introduction

Voxxhire Technologies Ltd. ("Voxxhire," "we," "us," or "our") operates an AI-powered interview platform that helps employers screen and evaluate job candidates through structured voice interviews. This Privacy Policy describes how we collect, use, store, share, and protect personal data when you use our platform, website, and related services.

This Privacy Policy applies to employer users, candidates who participate in AI-powered interviews, website visitors, and super administrators.

2. Data Controller

3. Categories of Personal Data

Account Data (Employer Users)

Full name, job title, email address, phone number, password hash, MFA tokens, company name, role, login timestamps.

Candidate Data

Name, email, phone, resume, job application details, voice recordings, interview transcripts, AI-generated scores, competency assessments, evidence quotes, browser metadata.

Data We Do NOT Collect

We do not collect racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, health data, age, gender, nationality, disability status, family status, criminal records, emotional state, facial features, accent analysis, or social media profiles.

4. Legal Bases for Processing

Under GDPR (EU/EEA)

• Consent (Art. 6(1)(a)): Explicit, informed consent from candidates before each interview
• Contract (Art. 6(1)(b)): Processing necessary to provide the Service
• Legitimate Interest (Art. 6(1)(f)): Security, fraud prevention, service improvement

Under UAE PDPL

• Consent, contractual necessity, legal obligation, and legitimate interest as applicable

Under US State Laws (CCPA/CPRA, VCDPA, etc.)

• We do not sell personal information
• We do not share for cross-context behavioral advertising
• We honor opt-out requests and GPC signals

5. AI-Specific Disclosures

How AI Is Used: AI conducts structured interviews using employer-configured templates, transcribes voice responses, and generates evidence-based scorecards. All AI recommendations are advisory only.

AI does NOT: Make final hiring decisions, evaluate appearance/accent/age/gender/race, use facial recognition or emotion detection, or use data to train models without consent.

Candidate Notice: Before each interview, candidates are informed that the interview is conducted by AI, their voice will be transcribed, and final decisions are made by humans.

6. Data Retention

7. Data Security

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Row-level tenant isolation
• Role-based access control (RBAC)
• MFA support
• Signed webhook verification
• 72-hour breach notification (GDPR Article 33)

8. International Data Transfers

Data may be transferred outside the UAE, EEA, or UK using Standard Contractual Clauses (SCCs), UK IDTA, or adequacy decisions. EU data is primarily hosted in Ireland (AWS eu-west-1).

9. Your Rights

Under GDPR

Access, rectification, erasure, restriction, portability, objection, automated decision-making, and consent withdrawal.

Under UAE PDPL

Right to be informed, access, correction, deletion, objection, and consent withdrawal.

Under US State Laws

Right to know, delete, opt-out, correct, non-discrimination, and data portability.

Exercise your rights: Email privacy@voxxhire.com or use Settings → Privacy → Data Subject Request. Response within 30 days (GDPR/UAE) or 45 days (CCPA).

10. Cookies

We use only essential cookies: session authentication (7 days), CSRF protection (session), and UI preferences (30 days). We do not use advertising or tracking cookies.

11. Children's Privacy

The Service is not directed at individuals under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We will notify employer admins via email and display a notice in the Service for material changes. For changes affecting candidates, the AI notice will be updated.

13. Contact Us