Yuruka

Privacy Policy

Effective date 26 June 2026

1. Introduction

Welcome to Yuruka, an AI-powered recruitment and hiring platform owned and operated by Controlshift Talent Private Limited (“Controlshift”, “Company”, “we”, “our”, or “us”).

Registered Office:

944, Block C, Sushant Lok Phase 1 Gurugram, Haryana – 122001 India

Website: https://yuruka.com

Email: support@yuruka.com

This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you use Yuruka, our websites, applications, APIs, integrations, AI-powered recruitment services, telephony services, assessments, interviews, onboarding services, and any related products or services (collectively, the “Services”).

This Privacy Policy applies globally and is intended to comply with applicable privacy and data protection laws, including but not limited to:

  • India’s Digital Personal Data Protection Act, 2023 (DPDP Act)
  • General Data Protection Regulation (GDPR) (European Union)
  • UK GDPR
  • California Consumer Privacy Act (CCPA), where applicable
  • Other applicable international privacy laws

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. About Yuruka

Yuruka is an AI-powered recruitment platform that enables organizations, recruitment agencies, enterprises, educational institutions, and employers to manage the complete hiring lifecycle.

Our Services include, but are not limited to:

  • Applicant Tracking System (ATS)
  • AI Candidate Sourcing
  • Lead Bank
  • Resume Parsing
  • Resume Matching
  • AI Calling
  • Standard Calling
  • AI Interviews
  • AI Voice Interviews
  • AI Avatar Interviews
  • AI Coding Assessments
  • AI MCQ Assessments
  • Interview Copilot
  • Candidate Evaluation
  • Offer Letter Generation
  • Document Collection
  • Digital Signatures
  • Employee Onboarding
  • Recruitment Analytics
  • Vendor Management
  • Recruitment Automation
  • Calendar Integrations
  • Enterprise Hiring Solutions

3. Scope of this Privacy Policy

This Privacy Policy applies to:

  • Visitors of our website
  • Customers
  • Enterprise customers
  • Recruiters
  • Hiring managers
  • Administrators
  • Vendors
  • Recruitment agencies
  • Candidates
  • Job applicants
  • Interview participants
  • Assessment participants
  • Employees of our customers
  • Users of our APIs
  • Users of integrated third-party services

This Privacy Policy also applies to personal information processed through our AI-powered features.

4. Information We Collect

Depending on how you use Yuruka, we may collect the following categories of information.

A. Personal Information

This includes:

  • Full name
  • Email address
  • Mobile number
  • Telephone number
  • Postal address
  • Date of birth (if provided)
  • Gender (if voluntarily provided)
  • Profile photograph
  • Nationality
  • Government-issued identification (where required)
  • Employment information
  • Education information

B. Recruitment Information

When candidates apply for jobs or are added into Yuruka by recruiters, we may process:

  • Resume/CV
  • Cover letter
  • Work history
  • Employment history
  • Skills
  • Certifications
  • Educational qualifications
  • Salary expectations
  • Current salary
  • Notice period
  • Portfolio links
  • GitHub profile
  • LinkedIn profile
  • Professional references
  • Languages
  • Relocation preferences
  • Work authorization status

C. AI Interview Information

When candidates participate in AI-powered interviews, we may process:

  • Audio recordings
  • Video recordings
  • AI avatar interactions
  • Speech transcripts
  • Interview responses
  • AI-generated interview reports
  • AI-generated interview scores
  • Technical evaluations
  • HR evaluations
  • Communication analysis
  • Coding interview responses
  • Assessment reports
  • Interview metadata

Candidates are informed before AI interviews are recorded.

D. Standard Calling Information

Where customers use Yuruka’s built-in calling features, we may process:

  • Caller number
  • Recipient number
  • Call duration
  • Call timestamp
  • Call recordings
  • Call notes
  • Recruiter comments
  • Call analytics

Customers are responsible for complying with all applicable call-recording and consent laws in the jurisdictions where they operate.

E. Assessment Information

When candidates complete assessments, we may process:

  • Coding submissions
  • Programming language selected
  • MCQ answers
  • Scores
  • Time taken
  • AI evaluation
  • Plagiarism indicators
  • Proctoring information (where enabled)

F. Account Information

When customers create an account, we may collect:

  • Organization name
  • Company address
  • Business email
  • Billing address
  • GST/VAT information
  • User roles
  • Team information
  • Organization settings
  • Authentication credentials

Passwords are stored using industry-standard hashing techniques and are never stored in plain text.

G. Payment Information

Payments are currently processed through Razorpay.

We do not store complete debit card, credit card, UPI PIN, CVV, or banking credentials.

Payment processors may collect:

  • Transaction ID
  • Billing information
  • Payment status
  • Invoice details
  • Tax information

Such information is governed by the payment processor’s own privacy policy.

H. Device & Technical Information

We automatically collect certain technical information, including:

  • IP address
  • Browser type
  • Operating system
  • Device identifiers
  • Language preferences
  • Time zone
  • Log files
  • Cookies
  • Crash reports
  • Diagnostic information
  • Usage analytics
  • API usage logs

I. Calendar & Productivity Integrations

When authorized by users, Yuruka may access limited information from integrated services such as:

  • Google Calendar
  • Microsoft Outlook
  • Google Meet
  • Microsoft Teams

Depending on permissions granted, we may access:

  • Meeting schedules
  • Calendar events
  • Participant information
  • Meeting links
  • Interview timings

We only request and access the minimum information necessary to provide the functionality you have chosen to enable. Access to Google services is limited to the permissions granted by the user and may be revoked at any time through the user's Google Account settings or within Yuruka.

J. AI Sourcing & Lead Bank

When recruiters use Lead Bank or AI sourcing features, Yuruka may process publicly available professional information and customer-uploaded recruitment data for sourcing, matching, and candidate discovery in accordance with applicable laws and contractual obligations.

K. Customer Support Information

When you contact us, we may collect:

  • Support tickets
  • Emails
  • Chat history
  • Attachments
  • Screenshots
  • Diagnostic logs
  • Feedback
  • Feature requests

5. Information We Do Not Intentionally Collect

Yuruka is not intended for children under the age of 16\.

We do not knowingly collect personal information from children.

If we become aware that such information has been collected without appropriate authorization where required by law, we will take reasonable steps to delete it promptly.

6. How We Collect Information

We collect information through various sources, including:

  • Information provided directly by users
  • Information uploaded by recruiters or employers
  • Candidate applications
  • Resume uploads
  • AI interviews
  • AI assessments
  • Standard calls
  • Calendar integrations
  • Third-party integrations
  • APIs
  • Cookies and similar technologies
  • Customer support interactions
  • Enterprise onboarding
  • Publicly available professional information where permitted by law

7. How We Use Your Information

Yuruka processes personal information only for legitimate business purposes and in accordance with applicable data protection laws.

We may use your information for the following purposes:

A. Providing Our Services

To provide, operate, maintain, and improve the Services, including:

  • Creating and managing user accounts
  • Managing recruitment workflows
  • Applicant Tracking System (ATS)
  • Candidate sourcing
  • Resume parsing
  • Resume matching
  • Candidate profile management
  • Interview scheduling
  • AI interviews
  • AI assessments
  • Offer letter generation
  • Employee onboarding
  • Vendor management
  • Recruitment reporting
  • Analytics dashboards
  • Credit management
  • Enterprise administration

B. AI-Powered Recruitment Services

We use artificial intelligence to assist customers with recruitment-related activities, including:

  • Resume parsing
  • Resume matching
  • Candidate ranking
  • Candidate recommendations
  • AI sourcing
  • AI interviews
  • AI voice interactions
  • AI avatar interviews
  • AI coding evaluations
  • AI MCQ evaluations
  • Candidate scoring
  • Hiring recommendations
  • AI-generated interview summaries
  • AI-generated recruiter insights

AI-generated results are intended to assist recruiters and hiring teams and should not be relied upon as the sole basis for employment decisions.

Customers remain solely responsible for all hiring decisions.

C. Communication

We use your information to:

  • Respond to support requests
  • Send platform notifications
  • Send interview invitations
  • Send assessment invitations
  • Notify candidates of interview schedules
  • Notify recruiters of candidate activity
  • Send invoices
  • Send payment confirmations
  • Send security notifications
  • Inform users about important product updates

We do not send promotional communications where prohibited by applicable law without the required consent.

D. Security

Your information may be used to:

  • Detect fraud
  • Prevent abuse
  • Prevent spam
  • Monitor suspicious activity
  • Protect customer accounts
  • Investigate security incidents
  • Detect unauthorized access
  • Prevent misuse of AI features
  • Protect our infrastructure

E. Platform Improvement

We may use aggregated and de-identified information to:

  • Improve AI models
  • Improve matching algorithms
  • Improve interview quality
  • Improve assessment quality
  • Improve platform performance
  • Build analytics
  • Identify bugs
  • Improve customer experience

Where personal information is used for AI model improvement, we implement appropriate safeguards and, where required by law, obtain necessary permissions or use de-identified or anonymized data.

For clarity, Google Workspace API data is never used to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models.

Performance of a Contract

We process information where necessary to:

  • Create your account
  • Provide recruitment services
  • Deliver purchased credits
  • Process payments
  • Provide enterprise services
  • Deliver customer support

Without such processing, we may be unable to provide the Services.

Legitimate Interests

Where permitted by law, we process information to pursue legitimate business interests, including:

  • Improving platform security
  • Preventing fraud
  • Detecting abuse
  • Improving AI performance
  • Maintaining platform reliability
  • Customer support
  • Internal reporting
  • Product development

We ensure these interests do not override the rights and freedoms of individuals.

9. AI Processing & Automated Decision-Making

Yuruka incorporates artificial intelligence into various recruitment workflows.

These include:

  • Resume analysis
  • Resume matching
  • Candidate recommendations
  • Candidate ranking
  • AI interviews
  • AI assessments
  • Coding evaluations
  • Voice analysis
  • Interview summaries
  • Hiring insights

While AI assists recruiters, Yuruka does not independently hire, reject, or make employment decisions on behalf of customers.

All final recruitment decisions remain the sole responsibility of the customer using the platform.

Candidates may request clarification regarding AI-assisted evaluations where required by applicable law.

9A. Google API Services

Yuruka may allow users to connect their Google Account to enable features such as Google Calendar integration, interview scheduling, and meeting management.

When you authorize Yuruka to access your Google Account, we only access the Google user data necessary to provide the functionality you have requested.

Google user data is used solely to provide and maintain the functionality explicitly requested by the user, such as interview scheduling, calendar synchronization, and meeting management.

Controlshift Talent Private Limited does not:

• Sell Google user data. • Use Google user data for advertising purposes. • Use Google Workspace API data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models. • Share Google user data with third parties except as necessary to provide the Services, comply with applicable law, or with your explicit consent.

Users may revoke Yuruka's access to their Google Account at any time through their Google Account permissions or by disconnecting the integration within Yuruka.

Yuruka's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where applicable.

10. Call Recording & Interview Recording

Yuruka provides telephony and AI interview capabilities.

AI Interviews

AI-powered interviews are recorded.

Candidates are informed before the interview begins that the interview may be recorded, transcribed, analyzed, and stored for recruitment purposes.

By participating in the interview after receiving such notice, candidates acknowledge and consent to such processing where consent is the applicable legal basis.

Standard Calling

Customers may use Yuruka’s built-in calling functionality.

Call recordings may be enabled by customers for quality assurance, recruitment documentation, compliance, and internal review.

Yuruka does not independently determine whether call recording is lawful in a particular jurisdiction.

Customers are solely responsible for:

  • Providing any legally required recording notices.
  • Obtaining any legally required consent.
  • Complying with applicable telecommunication laws.
  • Complying with employment laws.
  • Complying with privacy laws.
  • Complying with call-recording regulations.

Controlshift Talent Private Limited shall not be responsible for a customer’s failure to comply with applicable recording or privacy laws.

11. Cookies & Similar Technologies

Yuruka uses cookies and similar technologies to improve the Services.

Cookies may be used for:

  • Authentication
  • Session management
  • Security
  • Fraud prevention
  • Website functionality
  • Analytics
  • Performance monitoring
  • User preferences

Users may control cookies through browser settings.

Disabling cookies may affect certain functionality of the Services.

Additional information regarding cookies is available in our Cookie Policy.

12. Third-Party Service Providers

To provide, operate, maintain, secure, and improve the Services, Yuruka engages trusted third-party service providers (“Service Providers”) that may process Personal Data on our behalf.

These Service Providers are engaged only for purposes consistent with this Privacy Policy, our contractual obligations, and applicable data protection laws.

Depending on the Services you use, we may engage providers in categories including, but not limited to:

  • Payment Processing
  • Telephony and Communications
  • Background Verification
  • Identity Verification and Digital Signature
  • Calendar and Productivity Integrations
  • Video Meeting Integrations
  • Cloud Infrastructure and Hosting
  • Data Storage and Backup
  • Content Delivery Networks (CDN)
  • Authentication and Identity Management
  • Artificial Intelligence Services
  • Email Delivery
  • Customer Support
  • Analytics and Performance Monitoring
  • Security Monitoring and Fraud Prevention
  • Logging and Observability
  • Infrastructure Monitoring
  • Other operational, compliance, or business support services necessary to provide the Services.

We require our Service Providers to implement appropriate technical, organizational, and contractual safeguards designed to protect Personal Data and process it only in accordance with our instructions and applicable law.

To maintain operational flexibility and infrastructure security, Yuruka does not publish a comprehensive list of all Service Providers within this Privacy Policy.

Enterprise Customers, existing Customers, regulators, or prospective Customers conducting security, procurement, or compliance reviews may request additional information regarding our current Service Providers by contacting support@yuruka.com, subject to reasonable verification, confidentiality obligations, or applicable contractual requirements.

For Customers who have entered into a Data Processing Addendum (DPA), additional information regarding subprocessors may be provided in accordance with the applicable agreement.

Cloud Infrastructure

We may use secure cloud hosting providers, content delivery networks, storage providers, monitoring providers, and infrastructure vendors necessary to operate the Services.

Our list of subprocessors may change over time as we improve the Services.

We take reasonable steps to ensure that third-party service providers maintain appropriate technical and organizational safeguards to protect personal information.

13. International Data Transfers

Yuruka is a global platform.

Personal information may be transferred to, processed in, or stored in countries other than the country in which it was originally collected.

Where required by applicable law, we implement appropriate safeguards for international data transfers, including contractual safeguards and other lawful transfer mechanisms.

By using the Services, you acknowledge that your information may be processed in multiple jurisdictions in accordance with this Privacy Policy.

14. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

Retention periods may vary depending on the nature of the information and the Services used.

Examples include:

Account Information

Retained while the account remains active and for a reasonable period thereafter where required for legal, accounting, fraud prevention, or operational purposes.

Candidate Profiles

Candidate resumes, profiles, interview reports, assessments, and recruitment records may be retained for the duration determined by the customer or as required by applicable law.

Customers are responsible for determining appropriate retention periods for candidate data processed on their behalf.

Interview Recordings

AI interview recordings, transcripts, and related reports are retained only as long as necessary for recruitment, compliance, dispute resolution, or customer requirements.

Call Recordings

Call recordings may be retained according to customer settings, applicable law, contractual obligations, or legitimate business requirements.

Payment Information

Financial transaction records may be retained for the period required under applicable tax, accounting, and financial regulations.

Credits

Purchased credits remain valid for twelve (12) months from the date of purchase unless otherwise agreed in writing.

Unused credits automatically expire upon completion of the validity period.

Expired credits are non-refundable, non-transferable, and cannot be reinstated unless required by applicable law.

Data Deletion

Once personal information is no longer required for the purposes for which it was collected, we will securely delete, anonymize, or de-identify such information unless a longer retention period is required or permitted by law.

15. Data Security

Protecting personal information is one of our highest priorities.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.

Our security measures may include:

  • Encryption of data in transit using TLS/SSL
  • Encryption of sensitive data at rest where appropriate
  • Role-based access controls
  • Multi-factor authentication for administrative accounts
  • Secure authentication mechanisms
  • Security logging and monitoring
  • Vulnerability management
  • Periodic security assessments
  • Infrastructure monitoring
  • Backup and disaster recovery procedures
  • Employee confidentiality obligations
  • Restricted internal access to personal information

While we strive to protect personal information using industry-standard security practices, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute security.

16. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information.

These rights may include:

  • Right to access your personal information.
  • Right to request correction of inaccurate information.
  • Right to request deletion of personal information.
  • Right to withdraw consent where processing is based on consent.
  • Right to restrict certain processing.
  • Right to object to certain processing activities.
  • Right to data portability where applicable.
  • Right to lodge a complaint with an appropriate supervisory authority.
  • Right to know how personal information is processed.
  • Rights available under the Digital Personal Data Protection Act, GDPR, UK GDPR, CCPA, or other applicable laws.

We may require verification of identity before fulfilling requests relating to personal information.

Certain requests may be declined where we are legally permitted or required to retain information.

17. Customer Responsibilities

Customers using Yuruka acknowledge and agree that they are responsible for ensuring that their use of the Services complies with all applicable laws.

Customers are responsible for:

  • Obtaining lawful authority to upload candidate information.
  • Providing required privacy notices.
  • Obtaining legally required consents.
  • Complying with employment laws.
  • Complying with anti-discrimination laws.
  • Complying with telecommunications regulations.
  • Complying with call recording laws.
  • Determining appropriate retention periods.
  • Responding to candidate privacy requests where they act as the data controller.

Where Yuruka processes personal information on behalf of customers, Yuruka generally acts as a data processor or service provider, while the customer remains the data controller or business responsible for determining the purposes and means of processing.

18. Cross-Border Data Transfers

Because Yuruka operates globally, personal information may be processed in countries other than the country in which it was originally collected.

Where required by applicable law, we implement appropriate safeguards for international data transfers, including contractual safeguards and other legally recognized transfer mechanisms.

By using the Services, users acknowledge that their information may be transferred internationally in accordance with this Privacy Policy.

19. Children’s Privacy

Yuruka is intended for business and professional recruitment purposes.

Our Services are not directed toward children.

We do not knowingly collect personal information from individuals under the age of sixteen (16), or such other minimum age required under applicable law.

If we become aware that personal information relating to a child has been collected without appropriate authorization where required, we will take reasonable steps to delete such information promptly.

20. Third-Party Websites

Our Services may contain links to third-party websites, applications, or services.

We do not control such third-party services and are not responsible for their privacy practices, security, or content.

Users are encouraged to review the privacy policies of third-party services before providing personal information.

21. Business Transfers

In the event of a merger, acquisition, corporate restructuring, investment, financing, sale of assets, insolvency, or other business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

Any successor entity shall continue to honor this Privacy Policy or provide an updated privacy notice where required.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes in our Services
  • Changes in technology
  • Changes in applicable laws
  • Regulatory requirements
  • Business practices
  • Security improvements

When material changes are made, we will update the “Last Updated” date and, where required by law, provide additional notice through the Services, email, or other appropriate communication channels.

Continued use of the Services after such updates constitutes acceptance of the revised Privacy Policy to the extent permitted by applicable law.

23. Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us:

Controlshift Talent Private Limited

Registered Office:

944, Block C Sushant Lok Phase 1 Gurugram, Haryana – 122001 India

Website: https://yuruka.com

Email: support@yuruka.com

24. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to conflict of law principles.

Nothing in this Privacy Policy limits any mandatory rights available to individuals under applicable data protection laws, including the GDPR, UK GDPR, the Digital Personal Data Protection Act, 2023, or other applicable legislation.

25. Contact for Data Protection Requests

Requests relating to:

  • Access
  • Correction
  • Deletion
  • Data portability
  • Withdrawal of consent
  • Privacy complaints
  • International transfer requests
  • Data processing questions

may be submitted to:

Email: support@yuruka.com

We will respond within the time period required by applicable law.

26. Entire Privacy Policy

This Privacy Policy forms part of the legal terms governing the use of Yuruka and should be read together with:

  • Terms of Service
  • Refund & Cancellation Policy
  • Cookie Policy
  • Acceptable Use Policy
  • AI Usage Policy
  • Data Processing Addendum (where applicable)

© Controlshift Talent Private Limited. All Rights Reserved.