Privacy Policy

Zynq AI (“Zynq AI”, “we”, “us”, or “our”) operates the AI hiring platform at https://zynqai.in and associated services. We are headquartered in India and primarily serve placement agencies, HR teams, and founders across India and Southeast Asia.

We take privacy seriously. This policy explains what data we collect, why we collect it, how we use it, and what rights you have over your data under the Information Technology Act 2000, the Digital Personal Data Protection Act 2023 (DPDP), and applicable data protection laws in Singapore, Malaysia, Indonesia, Philippines, and Vietnam.

Data you give us directly

• Name, email address, phone number, company name when you book a demo or sign up
• Resume files and candidate data that you upload for screening (PDFs, Word documents, exports from Naukri, JobStreet, or other job portals)
• Job descriptions, screening criteria, and pipeline configuration you create on the platform
• Messages and notes you add to candidate records

Candidate data you upload

When you upload candidate resumes or data for screening, you are the data fiduciary for that candidate data. Zynq AI acts as a data processor on your behalf. Candidates whose resumes you upload have not necessarily consented to Zynq AI processing their data — that consent obligation rests with you as the recruiter or agency. We process candidate data only to deliver the screening service you requested.

Data we collect automatically

• IP address, browser type, device type, operating system
• Pages visited, time on site, referrer URL
• Feature usage patterns within the platform (which features you use, how often)
• Error logs and performance data

We use Google Analytics 4 for anonymous web analytics. GA4 data is governed by Google’s privacy policy.

• To provide, operate, and improve the Zynq AI platform
• To process resumes and generate AI screening scores and reports
• To send you service emails (demo confirmation, account updates, product changes)
• To respond to support requests
• To detect fraud, abuse, and security threats
• To comply with legal obligations

We do not use candidate resume data to train our AI models. Candidate data is processed to generate screening results for the specific job you uploaded them for — nothing else.

We do not sell your data or candidate data to third parties. We do not share data with advertisers.

Zynq AI uses large language models to screen resumes and generate candidate scores and reports. This constitutes automated processing of personal data. Our AI:

• Reads resume text to extract skills, experience, and context
• Scores candidates 0–100 based on criteria you set
• Flags potential fraud indicators for human review
• Generates plain-English summaries of candidate profiles

AI-generated scores and flags are recommendations for human review. Zynq AI does not make final hiring decisions. All decisions remain with the recruiter or employer using the platform.

Resume text is processed by our AI inference infrastructure under a data processing agreement that prohibits training on customer data.

We share data only with:

• AI inference provider — processes resume text for screening (resume text only, not contact details), under a data processing agreement prohibiting training on customer data
• Railway — cloud infrastructure hosting our database and backend
• Vercel — frontend hosting and edge delivery
• Google Analytics — anonymous website analytics
• Law enforcement — when required by valid legal process under Indian law

All third-party processors are bound by data processing agreements that restrict their use of your data to delivering services to Zynq AI.

If you use PULSE (our WhatsApp outreach feature) to contact candidates, messages are sent through your connected WhatsApp account or via WhatsApp Business API. You are responsible for ensuring candidates have given appropriate consent to receive messages from your agency.

We use essential cookies required for the platform to function (session management, authentication). We use Google Analytics cookies for anonymous usage analytics. We do not use advertising cookies or cross-site tracking cookies.

You can disable non-essential cookies in your browser settings without affecting core platform functionality.

We retain different types of data for different periods:

Bureau plan customers can configure custom candidate data retention periods from 30 to 365 days. All data is deleted within 30 days of a verified deletion request.

Under the DPDP Act 2023 and applicable laws, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request correction of inaccurate personal data
• Erasure — request deletion of your personal data (subject to legal retention obligations)
• Grievance redressal — raise a complaint about how we handle your data
• Nomination — nominate a person to exercise rights on your behalf in case of death or incapacity (as required under DPDP)

To exercise any of these rights, email us at hello@zynqai.inwith “Privacy Request” in the subject line. We will respond within 30 days.

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We enforce access controls so that each agency can only access their own data. We do not store candidate resume PDFs after text extraction — only the extracted text and screening results are retained.

In the event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware of the breach, as required under applicable law.

Zynq AI is a B2B platform intended for use by placement agencies, employers, and HR professionals. We do not knowingly collect personal data from anyone under 18 years old.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or via a notice on the platform at least 30 days before the changes take effect. Your continued use of the platform after that date constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints, contact us at:

Under the DPDP Act 2023, you may also escalate unresolved complaints to the Data Protection Board of India.