Privacy Policy

Last updated: 10 June 2026

1. Scope

This policy explains how Navi AI Agents FZCO ("Navi", "we") processes personal data in the AI Interviewer service. It covers two groups: recruiting team members who hold accounts, and candidates who take AI-conducted interviews at the invitation of a recruiting team.

2. Data we process

  • Recruiters: name, work email, profile photo, login and usage records.
  • Candidates: name, email, position applied for, a portrait photo taken at the start of the interview, the interview audio and transcript, and the AI-generated evaluation (scores, strengths, flags).
  • Billing: payment details are collected and processed by Paddle.com, our merchant of record — we never see card numbers.

3. Why we process it

Candidate data is processed on behalf of the recruiting team (the data controller) to conduct and evaluate a first-round interview the candidate has been invited to. Recruiter data is processed to operate the account (contract). We do not sell personal data and do not use candidate data to train AI models.

4. AI processing and human review

Interviews are conducted by an AI voice agent and scored by AI models. The output is a recommendation for the recruiting team, who make the actual hiring decisions. Candidates may request human review of an evaluation via the recruiting team that invited them.

5. Sub-processors

  • Supabase (database, storage, authentication)
  • Vercel (application hosting)
  • Agora and ElevenLabs (real-time voice infrastructure)
  • Anthropic, Google and Alibaba Cloud (language models used for interviewing and scoring)
  • Paddle (payments, as merchant of record)
  • Google / Gmail (transactional email)

6. International transfers

Our infrastructure is hosted internationally. For interviews conducted in mainland China, real-time voice traffic is carried by Agora's network; interview records are stored on our international infrastructure. Where the EU GDPR or the PRC Personal Information Protection Law (PIPL) applies, we rely on the candidate's informed consent collected before the interview starts and on contractual safeguards with our sub-processors.

7. Retention

Interview records are retained for as long as the recruiting team's account is active, so they can review past candidates. Controllers may request deletion of a candidate's records at any time; we honour such requests within 30 days. Ledger and invoice data is retained as required by accounting law.

8. Your rights

Depending on your jurisdiction (GDPR, PIPL, or similar), you may request access, correction, deletion, or portability of your personal data, and you may withdraw consent. Candidates should address requests to the recruiting team that invited them; you can also contact us directly at administration@naviassistant.ai and we will assist or forward the request to the responsible controller.

9. Security

Data is encrypted in transit, access is scoped per account with row-level security, and administrative access is limited to named platform staff. No method of storage is 100% secure; we notify affected controllers of any breach without undue delay.

10. Contact

Navi AI Agents FZCO, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates — administration@naviassistant.ai