Privacy Policy

PRIVACY POLICY
Effective Date: 26 June 2026
1. Introduction
Welcome to Yuruka, an AI-powered recruitment and hiring platform owned and operated by Controlshift Talent Private Limited (“Controlshift”, “Company”, “we”, “our”, or “us”).
Registered Office:
944, Block C, Sushant Lok Phase 1
Gurugram, Haryana – 122001
India
Website:
https://www.yuruka.com
Email:
support@yuruka.com
This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you use Yuruka, our websites, applications, APIs, integrations, AI-powered recruitment services, telephony services, assessments, interviews, onboarding services, and any related products or services (collectively, the “Services”).
This Privacy Policy applies globally and is intended to comply with applicable privacy and data protection laws, including but not limited to:
India’s Digital Personal Data Protection Act, 2023 (DPDP Act)
General Data Protection Regulation (GDPR) (European Union)
UK GDPR
California Consumer Privacy Act (CCPA), where applicable
Other applicable international privacy laws
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. About Yuruka
Yuruka is an AI-powered recruitment platform that enables organizations, recruitment agencies, enterprises, educational institutions, and employers to manage the complete hiring lifecycle.
Our Services include, but are not limited to:
Applicant Tracking System (ATS)
AI Candidate Sourcing
Lead Bank
Resume Parsing
Resume Matching
AI Calling
Standard Calling
AI Interviews
AI Voice Interviews
AI Avatar Interviews
AI Coding Assessments
AI MCQ Assessments
Interview Copilot
Candidate Evaluation
Offer Letter Generation
Document Collection
Digital Signatures
Employee Onboarding
Recruitment Analytics
Vendor Management
Recruitment Automation
Calendar Integrations
Enterprise Hiring Solutions

3. Scope of this Privacy Policy
This Privacy Policy applies to:
Visitors of our website
Customers
Enterprise customers
Recruiters
Hiring managers
Administrators
Vendors
Recruitment agencies
Candidates
Job applicants
Interview participants
Assessment participants
Employees of our customers
Users of our APIs
Users of integrated third-party services
This Privacy Policy also applies to personal information processed through our AI-powered features.

4. Information We Collect
Depending on how you use Yuruka, we may collect the following categories of information.
A. Personal Information
This includes:
Full name
Email address
Mobile number
Telephone number
Postal address
Date of birth (if provided)
Gender (if voluntarily provided)
Profile photograph
Nationality
Government-issued identification (where required)
Employment information
Education information

B. Recruitment Information
When candidates apply for jobs or are added into Yuruka by recruiters, we may process:
Resume/CV
Cover letter
Work history
Employment history
Skills
Certifications
Educational qualifications
Salary expectations
Current salary
Notice period
Portfolio links
GitHub profile
LinkedIn profile
Professional references
Languages
Relocation preferences
Work authorization status

C. AI Interview Information
When candidates participate in AI-powered interviews, we may process:
Audio recordings
Video recordings
AI avatar interactions
Speech transcripts
Interview responses
AI-generated interview reports
AI-generated interview scores
Technical evaluations
HR evaluations
Communication analysis
Coding interview responses
Assessment reports
Interview metadata
Candidates are informed before AI interviews are recorded.

D. Standard Calling Information
Where customers use Yuruka’s built-in calling features, we may process:
Caller number
Recipient number
Call duration
Call timestamp
Call recordings
Call notes
Recruiter comments
Call analytics
Customers are responsible for complying with all applicable call-recording and consent laws in the jurisdictions where they operate.

E. Assessment Information
When candidates complete assessments, we may process:
Coding submissions
Programming language selected
MCQ answers
Scores
Time taken
AI evaluation
Plagiarism indicators
Proctoring information (where enabled)

F. Account Information
When customers create an account, we may collect:
Organization name
Company address
Business email
Billing address
GST/VAT information
User roles
Team information
Organization settings
Authentication credentials
Passwords are stored using industry-standard hashing techniques and are never stored in plain text.

G. Payment Information
Payments are currently processed through Razorpay.
We do not store complete debit card, credit card, UPI PIN, CVV, or banking credentials.
Payment processors may collect:
Transaction ID
Billing information
Payment status
Invoice details
Tax information
Such information is governed by the payment processor’s own privacy policy.

H. Device & Technical Information
We automatically collect certain technical information, including:
IP address
Browser type
Operating system
Device identifiers
Language preferences
Time zone
Log files
Cookies
Crash reports
Diagnostic information
Usage analytics
API usage logs

I. Calendar & Productivity Integrations
When authorized by users, Yuruka may access limited information from integrated services such as:
Google Calendar
Microsoft Outlook
Google Meet
Microsoft Teams
Depending on permissions granted, we may access:
Meeting schedules
Calendar events
Participant information
Meeting links
Interview timings
We only request and access the minimum information necessary to provide the functionality you have chosen to enable. Access to Google services is limited to the permissions granted by the user and may be revoked at any time through the user's Google Account settings or within Yuruka.

J. AI Sourcing & Lead Bank
When recruiters use Lead Bank or AI sourcing features, Yuruka may process publicly available professional information and customer-uploaded recruitment data for sourcing, matching, and candidate discovery in accordance with applicable laws and contractual obligations.

K. Customer Support Information
When you contact us, we may collect:
Support tickets
Emails
Chat history
Attachments
Screenshots
Diagnostic logs
Feedback
Feature requests

5. Information We Do Not Intentionally Collect
Yuruka is not intended for children under the age of 16.
We do not knowingly collect personal information from children.
If we become aware that such information has been collected without appropriate authorization where required by law, we will take reasonable steps to delete it promptly.

6. How We Collect Information
We collect information through various sources, including:
Information provided directly by users
Information uploaded by recruiters or employers
Candidate applications
Resume uploads
AI interviews
AI assessments
Standard calls
Calendar integrations
Third-party integrations
APIs
Cookies and similar technologies
Customer support interactions
Enterprise onboarding
Publicly available professional information where permitted by law

7. How We Use Your Information
Yuruka processes personal information only for legitimate business purposes and in accordance with applicable data protection laws.
We may use your information for the following purposes:
A. Providing Our Services
To provide, operate, maintain, and improve the Services, including:
Creating and managing user accounts
Managing recruitment workflows
Applicant Tracking System (ATS)
Candidate sourcing
Resume parsing
Resume matching
Candidate profile management
Interview scheduling
AI interviews
AI assessments
Offer letter generation
Employee onboarding
Vendor management
Recruitment reporting
Analytics dashboards
Credit management
Enterprise administration

B. AI-Powered Recruitment Services
We use artificial intelligence to assist customers with recruitment-related activities, including:
Resume parsing
Resume matching
Candidate ranking
Candidate recommendations
AI sourcing
AI interviews
AI voice interactions
AI avatar interviews
AI coding evaluations
AI MCQ evaluations
Candidate scoring
Hiring recommendations
AI-generated interview summaries
AI-generated recruiter insights
AI-generated results are intended to assist recruiters and hiring teams and should not be relied upon as the sole basis for employment decisions.
Customers remain solely responsible for all hiring decisions.

C. Communication
We use your information to:
Respond to support requests
Send platform notifications
Send interview invitations
Send assessment invitations
Notify candidates of interview schedules
Notify recruiters of candidate activity
Send invoices
Send payment confirmations
Send security notifications
Inform users about important product updates
We do not send promotional communications where prohibited by applicable law without the required consent.

D. Security
Your information may be used to:
Detect fraud
Prevent abuse
Prevent spam
Monitor suspicious activity
Protect customer accounts
Investigate security incidents
Detect unauthorized access
Prevent misuse of AI features
Protect our infrastructure

E. Platform Improvement
We may use aggregated and de-identified information to:
Improve AI models
Improve matching algorithms
Improve interview quality
Improve assessment quality
Improve platform performance
Build analytics
Identify bugs
Improve customer experience
Where personal information is used for AI model improvement, we implement appropriate safeguards and, where required by law, obtain necessary permissions or use de-identified or anonymized data.
For clarity, Google Workspace API data is never used to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.

F. Legal Compliance
We may process information to:
Comply with applicable laws
Respond to lawful requests from authorities
Protect legal rights
Prevent fraud
Resolve disputes
Enforce agreements
Meet tax and accounting obligations

8. Legal Basis for Processing
Depending on your location, we process personal information based on one or more of the following legal grounds.
Consent
Where required by law, we process personal information based on your consent.
Examples include:
AI interview recordings
Marketing communications
Optional integrations
Certain cookies
Candidate participation in AI-powered interviews
You may withdraw consent at any time where processing is based solely on consent.
Withdrawal of consent does not affect processing already carried out before the withdrawal.

Performance of a Contract
We process information where necessary to:
Create your account
Provide recruitment services
Deliver purchased credits
Process payments
Provide enterprise services
Deliver customer support
Without such processing, we may be unable to provide the Services.

Legitimate Interests
Where permitted by law, we process information to pursue legitimate business interests, including:
Improving platform security
Preventing fraud
Detecting abuse
Improving AI performance
Maintaining platform reliability
Customer support
Internal reporting
Product development
We ensure these interests do not override the rights and freedoms of individuals.

Legal Obligations
We may process information where required to:
Comply with tax laws
Comply with employment laws
Respond to lawful governmental requests
Meet accounting obligations
Enforce court orders
Prevent unlawful activities

9. AI Processing & Automated Decision-Making
Yuruka incorporates artificial intelligence into various recruitment workflows.
These include:
Resume analysis
Resume matching
Candidate recommendations
Candidate ranking
AI interviews
AI assessments
Coding evaluations
Voice analysis
Interview summaries
Hiring insights
While AI assists recruiters, Yuruka does not independently hire, reject, or make employment decisions on behalf of customers.
All final recruitment decisions remain the sole responsibility of the customer using the platform.
Candidates may request clarification regarding AI-assisted evaluations where required by applicable law.

9A. Google API Services
Yuruka may allow users to connect their Google Account to enable features such as Google Calendar integration, interview scheduling, and meeting management.
When you authorize Yuruka to access your Google Account, we only access the Google user data necessary to provide the functionality you have requested.
Google user data is used solely to provide and maintain the functionality explicitly requested by the user, such as interview scheduling, calendar synchronization, and meeting management.
Controlshift Talent Private Limited does not:
• Sell Google user data.
• Use Google user data for advertising purposes.
• Use Google Workspace API data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.
• Share Google user data with third parties except as necessary to provide the Services, comply with applicable law, or with your explicit consent.
Users may revoke Yuruka's access to their Google Account at any time through their Google Account permissions or by disconnecting the integration within Yuruka.
Yuruka's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where applicable.

10. Call Recording & Interview Recording
Yuruka provides telephony and AI interview capabilities.
AI Interviews
AI-powered interviews are recorded.
Candidates are informed before the interview begins that the interview may be recorded, transcribed, analyzed, and stored for recruitment purposes.
By participating in the interview after receiving such notice, candidates acknowledge and consent to such processing where consent is the applicable legal basis.

Standard Calling
Customers may use Yuruka’s built-in calling functionality.
Call recordings may be enabled by customers for quality assurance, recruitment documentation, compliance, and internal review.
Yuruka does not independently determine whether call recording is lawful in a particular jurisdiction.
Customers are solely responsible for:
Providing any legally required recording notices.
Obtaining any legally required consent.
Complying with applicable telecommunication laws.
Complying with employment laws.
Complying with privacy laws.
Complying with call-recording regulations.
Controlshift Talent Private Limited shall not be responsible for a customer’s failure to comply with applicable recording or privacy laws.

11. Cookies & Similar Technologies
Yuruka uses cookies and similar technologies to improve the Services.
Cookies may be used for:
Authentication
Session management
Security
Fraud prevention
Website functionality
Analytics
Performance monitoring
User preferences
Users may control cookies through browser settings.
Disabling cookies may affect certain functionality of the Services.
Additional information regarding cookies is available in our Cookie Policy.

12. Third-Party Service Providers
To provide, operate, maintain, secure, and improve the Services, Yuruka engages trusted third-party service providers (“Service Providers”) that may process Personal Data on our behalf.
These Service Providers are engaged only for purposes consistent with this Privacy Policy, our contractual obligations, and applicable data protection laws.
Depending on the Services you use, we may engage providers in categories including, but not limited to:
Payment Processing
Telephony and Communications
Background Verification
Identity Verification and Digital Signature
Calendar and Productivity Integrations
Video Meeting Integrations
Cloud Infrastructure and Hosting
Data Storage and Backup
Content Delivery Networks (CDN)
Authentication and Identity Management
Artificial Intelligence Services
Email Delivery
Customer Support
Analytics and Performance Monitoring
Security Monitoring and Fraud Prevention
Logging and Observability
Infrastructure Monitoring
Other operational, compliance, or business support services necessary to provide the Services.
We require our Service Providers to implement appropriate technical, organizational, and contractual safeguards designed to protect Personal Data and process it only in accordance with our instructions and applicable law.
To maintain operational flexibility and infrastructure security, Yuruka does not publish a comprehensive list of all Service Providers within this Privacy Policy.
Enterprise Customers, existing Customers, regulators, or prospective Customers conducting security, procurement, or compliance reviews may request additional information regarding our current Service Providers by contacting support@yuruka.com, subject to reasonable verification, confidentiality obligations, or applicable contractual requirements.
For Customers who have entered into a Data Processing Addendum (DPA), additional information regarding subprocessors may be provided in accordance with the applicable agreement.

Cloud Infrastructure
We may use secure cloud hosting providers, content delivery networks, storage providers, monitoring providers, and infrastructure vendors necessary to operate the Services.
Our list of subprocessors may change over time as we improve the Services.
We take reasonable steps to ensure that third-party service providers maintain appropriate technical and organizational safeguards to protect personal information.

13. International Data Transfers
Yuruka is a global platform.
Personal information may be transferred to, processed in, or stored in countries other than the country in which it was originally collected.
Where required by applicable law, we implement appropriate safeguards for international data transfers, including contractual safeguards and other lawful transfer mechanisms.
By using the Services, you acknowledge that your information may be processed in multiple jurisdictions in accordance with this Privacy Policy.

14. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.
Retention periods may vary depending on the nature of the information and the Services used.
Examples include:
Account Information
Retained while the account remains active and for a reasonable period thereafter where required for legal, accounting, fraud prevention, or operational purposes.

Candidate Profiles
Candidate resumes, profiles, interview reports, assessments, and recruitment records may be retained for the duration determined by the customer or as required by applicable law.
Customers are responsible for determining appropriate retention periods for candidate data processed on their behalf.

Interview Recordings
AI interview recordings, transcripts, and related reports are retained only as long as necessary for recruitment, compliance, dispute resolution, or customer requirements.

Call Recordings
Call recordings may be retained according to customer settings, applicable law, contractual obligations, or legitimate business requirements.

Payment Information
Financial transaction records may be retained for the period required under applicable tax, accounting, and financial regulations.

Credits
Purchased credits remain valid for twelve (12) months from the date of purchase unless otherwise agreed in writing.
Unused credits automatically expire upon completion of the validity period.
Expired credits are non-refundable, non-transferable, and cannot be reinstated unless required by applicable law.

Data Deletion
Once personal information is no longer required for the purposes for which it was collected, we will securely delete, anonymize, or de-identify such information unless a longer retention period is required or permitted by law.

15. Data Security
Protecting personal information is one of our highest priorities.
We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.
Our security measures may include:
Encryption of data in transit using TLS/SSL
Encryption of sensitive data at rest where appropriate
Role-based access controls
Multi-factor authentication for administrative accounts
Secure authentication mechanisms
Security logging and monitoring
Vulnerability management
Periodic security assessments
Infrastructure monitoring
Backup and disaster recovery procedures
Employee confidentiality obligations
Restricted internal access to personal information
While we strive to protect personal information using industry-standard security practices, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure.
Accordingly, we cannot guarantee absolute security.

16. Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information.
These rights may include:
Right to access your personal information.
Right to request correction of inaccurate information.
Right to request deletion of personal information.
Right to withdraw consent where processing is based on consent.
Right to restrict certain processing.
Right to object to certain processing activities.
Right to data portability where applicable.
Right to lodge a complaint with an appropriate supervisory authority.
Right to know how personal information is processed.
Rights available under the Digital Personal Data Protection Act, GDPR, UK GDPR, CCPA, or other applicable laws.
We may require verification of identity before fulfilling requests relating to personal information.
Certain requests may be declined where we are legally permitted or required to retain information.

17. Customer Responsibilities
Customers using Yuruka acknowledge and agree that they are responsible for ensuring that their use of the Services complies with all applicable laws.
Customers are responsible for:
Obtaining lawful authority to upload candidate information.
Providing required privacy notices.
Obtaining legally required consents.
Complying with employment laws.
Complying with anti-discrimination laws.
Complying with telecommunications regulations.
Complying with call recording laws.
Determining appropriate retention periods.
Responding to candidate privacy requests where they act as the data controller.
Where Yuruka processes personal information on behalf of customers, Yuruka generally acts as a data processor or service provider, while the customer remains the data controller or business responsible for determining the purposes and means of processing.

18. Cross-Border Data Transfers
Because Yuruka operates globally, personal information may be processed in countries other than the country in which it was originally collected.
Where required by applicable law, we implement appropriate safeguards for international data transfers, including contractual safeguards and other legally recognized transfer mechanisms.
By using the Services, users acknowledge that their information may be transferred internationally in accordance with this Privacy Policy.

19. Children’s Privacy
Yuruka is intended for business and professional recruitment purposes.
Our Services are not directed toward children.
We do not knowingly collect personal information from individuals under the age of sixteen (16), or such other minimum age required under applicable law.
If we become aware that personal information relating to a child has been collected without appropriate authorization where required, we will take reasonable steps to delete such information promptly.

20. Third-Party Websites
Our Services may contain links to third-party websites, applications, or services.
We do not control such third-party services and are not responsible for their privacy practices, security, or content.
Users are encouraged to review the privacy policies of third-party services before providing personal information.

21. Business Transfers
In the event of a merger, acquisition, corporate restructuring, investment, financing, sale of assets, insolvency, or other business transaction, personal information may be transferred as part of that transaction, subject to applicable law.
Any successor entity shall continue to honor this Privacy Policy or provide an updated privacy notice where required.

22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes in our Services
Changes in technology
Changes in applicable laws
Regulatory requirements
Business practices
Security improvements
When material changes are made, we will update the “Last Updated” date and, where required by law, provide additional notice through the Services, email, or other appropriate communication channels.
Continued use of the Services after such updates constitutes acceptance of the revised Privacy Policy to the extent permitted by applicable law.

23. Contact Us
If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us:
Controlshift Talent Private Limited
Registered Office:
944, Block C
Sushant Lok Phase 1
Gurugram, Haryana – 122001
India
Website:
https://www.yuruka.com
Email:
support@yuruka.com

24. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles.
Nothing in this Privacy Policy limits any mandatory rights available to individuals under applicable data protection laws, including the GDPR, UK GDPR, the Digital Personal Data Protection Act, 2023, or other applicable legislation.

25. Contact for Data Protection Requests
Requests relating to:
Access
Correction
Deletion
Data portability
Withdrawal of consent
Privacy complaints
International transfer requests
Data processing questions
may be submitted to:
Email: support@yuruka.com
We will respond within the time period required by applicable law.

26. Entire Privacy Policy
This Privacy Policy forms part of the legal terms governing the use of Yuruka and should be read together with:
Terms of Service
Refund & Cancellation Policy


© Controlshift Talent Private Limited. All Rights Reserved.