Last updated: [date]
[Company legal name], a company registered at [registered address] ("Nous", "we", "us"), operates Nous, an async AI screening-call platform for recruiters and hiring teams.
From recruiters and admins (account holders): name, email, company name, password (stored as a one-way hash, never in plain text), billing region, and usage data (campaigns created, candidates invited).
From candidates completing a screening call — this is more sensitive, and we treat it that way:
Candidates are shown this notice, in plain language, and asked to consent before a call begins.
We do not sell personal data, and we do not use candidate answers or photos to train AI models.
We use the following subprocessors to operate the service. Each only receives the data it needs to perform its function:
We do not share candidate data with any party other than the recruiter who invited that candidate and the subprocessors above.
Candidate screening data (transcripts, photos, scores) is retained for [retention period, e.g. 12 months from completion] unless deleted sooner. Recruiters can permanently delete a candidate's data at any time from their dashboard. Deleting a candidate's data removes their transcript, answers, photo, and score — this cannot be undone.
Recruiter account data is retained for as long as the account is active, and for [period] after closure for legitimate business and legal purposes.
Depending on where you're located, you may have the right to access, correct, or request deletion of your personal data. Candidates should contact the recruiter who invited them in the first instance, since the recruiter controls that data; recruiters and admins can contact us directly using the details below.
If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correct, and erase your personal data, and to file a complaint with our Grievance Officer.
We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, rate limiting on authentication endpoints, and role-based access controls. No system is completely secure, and we cannot guarantee absolute security.
Our subprocessors may process data outside your country, including in the United States. Where required, we rely on appropriate legal safeguards for these transfers.
Nous is not directed at, and should not be used to screen, individuals under the age of [18, or applicable local age].
[Grievance Officer name]
Email: [grievance@yourcompany.com]
Address: [registered address]
We may update this policy from time to time. Material changes will be notified to account holders by email or through the product.