Privacy Policy

1. Our role

We act as data controller for personal data relating to visitors of our website and to the users of our customers' accounts.

When an organization uses InterviewLabs to assess candidates, that organization is the data controller of the candidate data and we process it on its behalf as data processor. Candidates who have questions about how their application is handled should contact the organization they applied to. We will assist the organization in responding to such requests.

2. Information we collect

Information you provide to us:

• account information, such as name, business email address, role and organization
• candidate information, such as contact details, CV, application answers and, where you choose to share it, information used for equal opportunity reporting
• information you share when you contact us, request a demonstration or receive support

Interview information:

• audio and video recordings, transcripts and answers given during the interview
• integrity information collected during the interview, such as screen share images and session events
• assessments, scores and reports generated on the basis of the CV and interview

Information collected automatically:

• device and connection information, such as IP address, browser type and operating system
• usage information, such as pages visited, actions taken and the time and date of access
• approximate location derived from the IP address
• information collected through cookies and similar technologies, as described in our Cookie Policy

Information from third parties: information provided by organizations about candidates they invite, and information from analytics and advertising partners where you have given consent.

3. How we use your information

• to provide, operate and maintain our services
• to conduct interviews and to prepare analyses and reports for the organizations that use our services
• to create and manage accounts and to communicate with you about the services
• to protect the security and integrity of our services and to prevent fraud and misuse
• to analyze and improve our website and services
• to carry out marketing activities, where you have given consent
• to comply with legal obligations and to establish, exercise or defend legal claims

4. Legal bases

We process personal data on the following legal bases: the performance of a contract, compliance with legal obligations, our legitimate interests in operating a secure and reliable service and, where required by law, your explicit consent. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5. Artificial intelligence and automated processing

Our services use artificial intelligence to conduct interviews, transcribe answers and generate assessments. These assessments are designed to support human decision making. Hiring decisions are made by the organizations using our services, not by our systems. Candidates have the right to object to a decision based solely on automated processing.

We do not use facial recognition, and we do not use candidate or customer data to train artificial intelligence models.

6. How we share your information

We do not sell personal data. We share personal data only with the following recipients and only to the extent necessary:

• organizations using our services, which receive the application and interview information of the candidates they assess
• service providers that support us in providing our services, such as cloud hosting and storage, real time communication, speech recognition and artificial intelligence, email delivery, security and analytics providers, which are contractually bound to process data only on our instructions
• professional advisors, such as lawyers and auditors
• public authorities, where required by law
• a successor entity in the event of a merger, acquisition or sale of assets

7. International data transfers

Personal data may be processed in Türkiye, the European Union and the United States. Where personal data is transferred abroad, we rely on the safeguards provided under KVKK and the GDPR, such as standard contractual clauses, and on your explicit consent where required.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. Interview recordings and related assessments are deleted one year after the interview. Candidate application data is retained in accordance with the instructions of the relevant organization and is deleted upon its request or upon termination of its agreement with us. Account data is retained for as long as the account remains active. Personal data may be retained for longer where required by law or for the establishment, exercise or defense of legal claims.

9. Data security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role based access controls, access logging and regular security reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

In accordance with Article 11 of KVKK and, where applicable, the GDPR, you have the right to:

• learn whether your personal data is processed and request information about it
• learn the purpose of processing and whether data is used in line with that purpose
• know the third parties to whom your data is transferred, domestically or abroad
• request the correction of incomplete or inaccurate data
• request the deletion or destruction of your data
• object to a result arising against you from analysis carried out solely by automated systems
• claim compensation for damages arising from unlawful processing

You also have the right to lodge a complaint with the Personal Data Protection Authority or with the supervisory authority in your country.

11. How to submit a request

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request by one of the following methods:

• in writing, with a wet signature, delivered in person, by post or through a notary to Çayır Caddesi, Partaş Plaza No: 1/4, Ataşehir, İstanbul, Türkiye
• through a registered electronic mail (KEP) address, a secure electronic signature or a mobile signature
• by email to marketing@neuroconnectai.com from an email address you have previously notified to us or that is registered in our systems

Your request should include your name, surname and signature if submitted in writing, your Turkish identity number or, for foreign nationals, your nationality and passport or identity number, your address for notification, your email address or telephone number if available, and the subject of your request.

We will conclude your request free of charge as soon as possible and within 30 days at the latest. If the request requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

12. Children's privacy

Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal data from them.

13. Third party links

Our website may contain links to third party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

14. Changes to this policy

We may update this policy from time to time. The current version is always available on this page together with the date of the last update. We will notify you of material changes where required by law.

15. Contact

For questions about this policy, you can contact us at marketing@neuroconnectai.com.

NeuroConnect AI Yapay Zeka Çözümleri A.Ş., Çayır Caddesi, Partaş Plaza No: 1/4, Ataşehir, İstanbul, Türkiye