Privacy Policy

Welcome to NewSkill, an AI-powered hiring, skills assessment, and recruitment automation platform. NewSkill is a product and brand owned and operated by INGENIOUSPOLYMATH (OPC) PRIVATE LIMITED ("Company", "we", "our", or "us"), a company incorporated under the laws of India.

This Privacy Policy explains how we collect, use, store, process, share, and protect personal information when you access or use our websites, web and mobile applications, APIs, candidate assessment platform, recruiter dashboard, AI-powered hiring tools, integrations, customer support services, and any other products or services offered under the NewSkill brand (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

NewSkill is an AI-powered Software-as-a-Service (SaaS) platform designed to help organizations streamline hiring and talent evaluation through online assessments, skills testing, candidate evaluations, AI-assisted hiring insights, interview support, recruitment workflow automation, hiring analytics, team collaboration, and candidate management.

"Customer" refers to organizations, businesses, institutions, or individuals who subscribe to or purchase our Services. "Candidate" refers to individuals invited to complete assessments, interviews, or hiring activities through NewSkill. "User" refers to anyone accessing or using our Services.

This Privacy Policy applies to all users of NewSkill, including website visitors, trial users, paid subscribers, HR professionals, recruiters, hiring managers, administrators, employees of customer organizations, candidates invited to complete assessments, API users, and integration partners where applicable.

This Privacy Policy does not apply to third-party websites linked from our Services, external applications not controlled by us, services operated by our customers, or third-party platforms that maintain separate privacy policies.

4.1 Information You Provide Directly

Full name, business or personal email address, phone number, company or organization name, job title, country and region, billing information, GST details, profile photo, authentication credentials, customer support communications, survey responses, feedback, feature requests, and marketing preferences.

4.2 Candidate Information

Customers may upload candidate name, email, phone, resume or CV, employment and education history, certifications, skills, job role, candidate identifier, hiring references, recruiter notes, assessment invitations, and interview scheduling. Customers are responsible for ensuring they have a lawful basis to provide this information.

4.3 Assessment Information

Assessment responses, coding submissions, essay responses, multiple-choice answers, uploaded documents, portfolio links, completion status, progress, time spent, scores, skill ratings, benchmark comparisons, AI-generated summaries and recommendations, and recruiter feedback.

4.4 AI Interaction Data

Prompts submitted, questions asked, AI-generated responses, hiring report requests, candidate evaluation requests, interview preparation requests, workflow automation requests, and user feedback on AI outputs.

4.5 Account Information

User ID, workspace ID, team memberships, organization identifier, login history, authentication events, password reset requests, MFA status, session information, user preferences, and notification settings.

4.6 Technical Information

IP address, browser type and version, operating system, device type, screen resolution, language, time zone, device identifiers, network information, session identifiers, referring URLs, timestamps, error logs, crash reports, and performance diagnostics.

4.7 Usage Information

Pages visited, features accessed, navigation patterns, assessment activity, dashboard interactions, search queries, reports generated, downloads, API requests, integration activity, login frequency, session duration, feature adoption, and audit logs.

4.8 Payment Information

Payment processing is handled by trusted third-party providers who may collect billing name, billing address, business information, GST number, transaction ID, invoice, subscription, and tax information. NewSkill does not store complete card or banking credentials on its own servers.

4.9 Integrations

If you connect third-party services, we may receive user profile information, organization details, calendar events, authentication tokens, email metadata, workflow information, and team directory information, subject to permissions you grant.

4.10 Public Sources

We may receive business-related information from public sources such as company websites, professional networking platforms, public business directories, and government records, only where permitted by law.

Unless expressly required for a specific customer engagement or permitted by law, NewSkill does not intentionally collect or require users to provide:

• Government-issued identification numbers
• Aadhaar or passport numbers
• Driver's licence numbers
• Financial account passwords or card PINs
• Biometric identifiers
• Health or medical records
• Genetic information
• Religious beliefs, political opinions, or trade union membership
• Information about children under the applicable legal age

Customers should avoid uploading unnecessary sensitive personal data into the platform.

We process personal information only for legitimate business purposes and in accordance with applicable data protection laws — to provide the Services, operate AI-powered features, improve the platform, communicate with users, and prevent fraud.

Provide the Services

• Create and manage accounts
• Authenticate users
• Deliver assessments and recruiter dashboards
• Generate candidate reports
• Facilitate recruitment workflows
• Manage subscriptions and support

AI-Powered Features

Where enabled, AI may evaluate responses, generate summaries, produce hiring insights, identify skill gaps, assist during interviews, recommend questions, and draft evaluation reports. AI-generated outputs are intended to support human decision-making and should not be relied upon as the sole basis for employment decisions.

Communications

Account verification, password resets, assessment invitations, reminders, product updates, security notifications, billing, renewals, support, legal notices, and feature releases. Marketing communications are sent only with the appropriate consent where required by law.

Security & Fraud Prevention

To detect suspicious activity, prevent fraud, investigate misuse, protect accounts, monitor integrity, enforce our Terms, and comply with legal obligations.

Where applicable, including under the GDPR, we process personal information on one or more of the following legal bases:

• Contractual necessity — to create accounts, deliver assessments, process payments, and operate Services.
• Consent — for marketing, optional cookies, certain AI features, and optional integrations. Consent may be withdrawn at any time where legally permitted.
• Legitimate interests — to improve Services, maintain security, prevent abuse, run analytics, and ensure reliability.
• Legal obligations — to comply with laws, court orders, government requests, tax and regulatory obligations.

NewSkill uses AI for candidate skill analysis, resume summarization, assessment evaluation, report generation, interview assistance, competency mapping, hiring recommendations, skills-gap identification, natural language processing, and workflow automation.

AI-generated outputs are decision-support tools only. NewSkill does not guarantee their accuracy or completeness. Customers remain solely responsible for reviewing outputs, verifying recommendations, making hiring decisions, and ensuring compliance with employment laws. NewSkill does not make employment decisions on behalf of customers.

NewSkill uses cookies, local storage, authentication tokens, web beacons, and similar technologies to keep users signed in, remember preferences, secure sessions, analyze performance, and improve reliability. Users can control cookie preferences through browser settings. See our Cookie Policy for details.

We do not sell personal information. We may share information only where necessary to operate our Services or where required by law.

10.1 Service Providers

Providers of cloud infrastructure, database hosting, email delivery, authentication, analytics, customer support, payment processing, AI processing, monitoring, and backup — bound by appropriate contractual obligations.

10.2 Customer Organizations

If a candidate completes an assessment for a customer organization, responses, scores, reports, recruiter notes, interview feedback, AI summaries, and hiring recommendations may be made available to that organization.

10.3 Business Transfers

In a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable law.

10.4 Legal Requirements

We may disclose information to comply with law, respond to lawful requests, protect our rights, investigate fraud, prevent unlawful activity, and enforce our Terms.

NewSkill primarily operates from India. To deliver Services efficiently, personal information may be processed or stored in other countries. Where international transfers occur, we implement appropriate contractual, technical, and organizational safeguards, including encryption and internationally recognized transfer mechanisms where applicable.

NewSkill may integrate with trusted third-party providers for authentication, cloud hosting, payment processing, email delivery, analytics, AI services, productivity tools, calendar services, and communication platforms. Each provider maintains its own privacy practices. Users should review their policies before connecting them.

Protecting personal information is a core priority. We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

• TLS encryption of data in transit
• Encryption of sensitive data at rest where appropriate
• Role-based access controls (RBAC)
• Multi-factor authentication for administrative access
• Secure password hashing
• Network security controls and firewalls
• Security logging and monitoring
• Regular software updates and patches
• Vulnerability management
• Backup and disaster recovery procedures
• Employee confidentiality obligations and security awareness training

No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their credentials.

We retain personal information only for as long as necessary to provide the Services, fulfill contractual obligations, maintain account records, process assessments, generate reports, comply with legal obligations, resolve disputes, enforce agreements, and protect legitimate business interests. When no longer needed, we securely delete, anonymize, or dispose of it in accordance with our internal policies and applicable law.

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, withdraw consent, receive a portable copy, request information regarding processing, and lodge a complaint with a supervisory authority.

We may request reasonable verification of identity before fulfilling privacy requests. Certain rights may be limited where required by law.

Where applicable, individuals may have rights under the DPDP Act, including:

• Obtain information regarding processing
• Request correction of inaccurate personal data
• Request erasure, subject to legal obligations
• Withdraw previously provided consent
• Seek grievance redressal through our designated Grievance Officer
• Exercise additional rights under applicable Indian law

• Right of access
• Right to rectification
• Right to erasure ("Right to be Forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making where applicable

When candidates complete assessments through NewSkill, the recruiting organization generally acts as the primary controller of the candidate's assessment process. Candidates wishing to update information, request deletion, or inquire about recruitment decisions should generally contact the recruiting organization. Where legally required, we will assist customers in responding.

• Ensuring a lawful basis for processing candidate and employee information
• Providing appropriate privacy notices
• Obtaining any required consents
• Configuring access permissions appropriately
• Maintaining confidentiality of user credentials
• Using the Services in compliance with applicable employment, privacy, and data protection laws

NewSkill is intended for business and professional use and is not directed toward children. We do not knowingly collect personal information from individuals below the applicable legal age. If we become aware of such collection, we will take reasonable steps to delete the information.

We may update this Privacy Policy from time to time. When material changes are made, we may notify users through email, in-product notifications, website notices, or account dashboard announcements. The "Last Updated" date indicates the most recent revision. Continued use of the Services constitutes acceptance of the revised policy to the extent permitted by law.

For questions regarding this Privacy Policy or our privacy practices, please contact:

INGENIOUSPOLYMATH (OPC) PRIVATE LIMITED — Brand: NewSkill

Registered Office: B-128, First Floor, Sector-2, Noida, Gautam Buddha Nagar - 201301, Uttar Pradesh, India

• Website: newskill.tech, newskill.in
• General enquiries: support@newskill.in
• Privacy enquiries: privacy@newskill.in
• Grievance Officer (India): grievance@newskill.in
• Enterprise team: enterprise@newskill.in

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of India, without regard to conflict of law principles. Nothing in this Privacy Policy limits any mandatory rights available under applicable data protection or consumer protection laws.