Korture Technologies LLP ("Korture," "we," "us," or "our") operates the Korture platform accessible at https://korture.com and https://app.korture.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, first name, last name, display name, date of birth
- Profile Information: Avatar/profile picture, professional details
- Assessment Responses: RIASEC assessment responses, Job Demands-Resources (JDR) assessment responses, psychometric profile data
- Role & Team Data: Job role descriptions, team memberships, hiring preferences
- Communication Data: Messages sent through our Platform, feedback submissions
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on Platform, click patterns
- Device Information: Browser type, operating system, IP address, device identifiers
- Authentication Data: Login timestamps, OAuth tokens (Google, LinkedIn)
- Analytics Data: User interactions, session recordings (anonymized), conversion events
1.3 Information from Third Parties
- OAuth Providers: When you sign in with Google or LinkedIn, we receive your name, email, profile picture, and basic profile information
- Professional Networks: LinkedIn profile data (when you authorize access)
2. How We Use Your Information
2.1 To Provide Services
- Create and manage your account
- Generate assessment results and insights
- Match candidates to job roles
- Provide team collaboration and health insights
- Process billing events (when applicable)
2.2 To Improve Our Platform
- Analyze usage patterns to enhance user experience
- Develop and improve our psychometric assessment algorithms
- Conduct research to validate our scientific models (using anonymized data)
- Identify and fix technical issues
2.3 To Communicate With You
- Send assessment results and notifications
- Provide customer support
- Send product updates and feature announcements
- Respond to your inquiries at team@korture.com
2.4 For Marketing and Analytics
- Understand user behavior through analytics tools
- Measure advertising campaign effectiveness
- Send promotional communications (with your consent)
3. How We Share Your Information
3.1 We Share Information With:
- Service Providers: Supabase (database/authentication), PostHog (analytics), Google Analytics, Google Ads, LinkedIn Ads, Meta Ads, Google Tag Manager
- Team Members: When you join a team, your profile and assessment results are visible to team administrators
- Hiring Managers: When you apply for a role, your application and assessment results are shared with the hiring manager
3.2 We Do NOT:
- Sell your personal information to third parties
- Share your assessment results publicly without your consent
- Use your data for purposes other than stated in this policy
4. Legal Bases for Processing (GDPR)
We process your personal data based on:
- Consent: When you provide explicit consent (e.g., signing up, taking assessments)
- Contract Performance: To provide services you've requested
- Legitimate Interests: To improve our Platform and conduct research
- Legal Obligations: To comply with applicable laws and regulations
5. Data Retention
- Active Accounts: We retain your data while your account is active
- Inactive Accounts: Data is retained for 90 days after account closure
- Assessment Data: Anonymized assessment data may be retained indefinitely for research purposes
- Legal Requirements: Some data may be retained longer to comply with legal obligations
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal requirements)
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Restriction: Request limitation of processing in certain circumstances
- Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
To exercise these rights, contact us at team@korture.com.
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest for sensitive data
- Regular security audits
- Access controls and authentication
- Secure cloud infrastructure (Supabase)
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. International Data Transfers
Your data may be transferred to and processed in countries outside India, including:
- United States (Supabase, PostHog, Google services)
- European Union (various service providers)
We ensure appropriate safeguards are in place for such transfers, including:
- Standard Contractual Clauses (SCCs)
- Privacy Shield frameworks (where applicable)
- Data Processing Agreements with service providers
9. Cookies and Tracking Technologies
We use cookies and similar technologies:
- Essential Cookies: Required for Platform functionality
- Analytics Cookies: PostHog, Google Analytics (anonymized)
- Advertising Cookies: Google Ads, LinkedIn Ads, Meta Ads
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings, but some Platform features may not function properly if cookies are disabled.
10. Third-Party Services
Our Platform integrates with:
- Supabase: Database and authentication services
- Google OAuth: Single sign-on authentication
- LinkedIn OAuth: Single sign-on authentication
- PostHog: Product analytics and session recording
- Google Tag Manager, Google Analytics: Web analytics
- Google Ads, LinkedIn Ads, Meta Ads: Marketing and advertising
Each service has its own privacy policy. We recommend reviewing:
11. Children's Privacy
Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us at team@korture.com.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our Platform
- Updating the "Last Updated" date
- Sending email notifications (for significant changes)
Your continued use of the Platform after changes constitutes acceptance of the updated policy.
14. Dispute Resolution
For users in India, any disputes arising from this Privacy Policy shall be governed by Indian law and subject to the exclusive jurisdiction of courts in Bengaluru, Karnataka.
For users in the European Union, you have the right to lodge a complaint with your local data protection authority.
Acknowledgment: By using the Korture Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy.
