Privacy policy

1. Who we are

DeepAssessment is a technical-assessment platform operated by Refrit Private Limited, a company registered in Pune, Maharashtra, India. This policy explains what personal data we collect, why, who sees it, and the rights you have over it.

It is written to meet India's Digital Personal Data Protection Act (DPDP) and the EU General Data Protection Regulation (GDPR) — and to be readable by a human.

2. Who this policy covers

• Workspace users — recruiters, hiring managers, and team members who create accounts and run assessments.
• Candidates — people invited to take an assessment. Candidates never need an account to take one.
• Visitors — people browsing this website.

3. What we collect

From workspace users:

• Name, work email, and a password (stored only as a secure hash), or your Google / LinkedIn sign-in identity
• A profile photo, if you choose one — or a one-time import from your sign-in provider, which you can change or remove any time
• Your team and organization details, and the assessments and questions you create
• Billing records — payment itself is processed by Razorpay; we never store your card number

From candidates: the name and email your inviter provided, and — only after you agree on the consent screen — the assessment session record. Depending on the capture level the hiring team chose, that record can include your code timeline and runs, copy-paste events, tab-focus changes, camera and screen recordings, and the full conversation with the in-workspace AI assistant when AI is enabled. The consent screen always lists exactly what applies to your session, before your clock starts. Nothing is captured before consent.

From visitors: standard server logs and basic, non-advertising analytics about how the site is used.

4. Consent for assessment capture

Proctoring only happens with informed consent. Every assessment opens with a consent screen listing exactly what that session captures. A visible recording indicator stays on whenever camera or screen capture is live. If you close the tab instead of agreeing, nothing is recorded.

5. How we use personal data

• To run assessments and produce evidence reports for the team that invited the candidate
• To operate, secure, and support accounts and workspaces — including session and device management
• To process payments, credits, and invoices
• To comply with law and respond to lawful requests

We do not sell personal data. We do not use assessment data for advertising.

6. Who we share data with

• The hiring team that invited you — a candidate's session evidence is visible to that workspace, and to no other customer.
• Payment processing — Razorpay processes payments for workspace purchases.
• Service providers — cloud hosting, object storage for session media, and transactional email delivery, each bound to process data only on our instructions.
• AI processing — submitted code and captured session content are processed by our AI scoring providers to produce the code review and scores. These providers are contractually barred from using your data to train their models on our behalf beyond providing the service.

7. International transfers

Some service providers process data outside your own country. Where that happens we rely on recognized safeguards (such as contractual protections) and share only what the service requires.

8. How long we keep data

• Account data — for as long as the account is active, then deleted or anonymized
• Candidate session evidence — retained to support the hiring decision it was created for, and deleted on verified request or when the owning workspace deletes it
• Billing and tax records — for the period required by law

9. Your rights

Under the DPDP Act and the GDPR you can ask us for access to your personal data, correction, deletion, and — where GDPR applies — restriction, portability, and objection. Candidates can exercise every right without creating an account.

To exercise any right, email hello@deepassessment.dev from the address your invitation or account uses. We verify, then act — and we will not make you write a legal letter. If you are unsatisfied with our response, you may escalate to your data-protection authority.

10. Cookies

We use cookies to keep you signed in and to remember preferences. We do not use third-party advertising cookies.

11. Children

DeepAssessment is not directed to individuals under 18, and we do not knowingly collect their data.

12. Changes to this policy

When we make material changes we will update the date at the top and, for significant changes affecting how your data is handled, notify workspace users by email.

13. Contact & grievance

Refrit Private Limited · Pune, Maharashtra, India. Grievance and privacy contact: hello@deepassessment.dev. Postal address is listed on the contact page.