1. Who we are
Zorvis AI Technologies Pvt Ltd ("Zorvis", "we", "us") is the data fiduciary (under the India DPDP Act 2023) and data controller (under UAE Federal Decree-Law 45/2021 on Personal Data Protection, "PDPL") for personal data processed through this website and the Zorvis platform.
For data we process on behalf of employer customers (e.g. CV data ingested into a customer's hiring pipeline), we act as a data processor under a separate Data Processing Addendum signed with that customer.
2. What personal data we collect
Website visitors: page views and aggregate usage analytics (no individual profiling).
Waitlist sign-ups: name, work email, company, role, country.
Employer customers: company information, billing details, named user accounts, and the candidate/employee data uploaded into their workspace.
Candidates: CV content, contact details, assessment responses, AI phone-interview recordings (with explicit consent), and identification documents (Aadhaar, PAN, Emirates ID — depending on market).
3. Lawful basis
India DPDP Act 2023: data is processed on the basis of consent (Section 6) for candidates and contract performance (Section 7) for employer customers.
UAE PDPL: data is processed on the basis of consent (Article 4) and contractual necessity. Sensitive personal data (Article 1) is processed only with explicit consent.
4. AI phone interview recordings
If you receive an AI phone interview from a Zorvis customer:
- A recording disclosure is played in your preferred language before the call connects.
- You may decline. Declining does not auto-reject your application.
- Recordings are retained for 30 days, then auto-deleted.
- You may request a full transcript and dispute any AI scoring.
- The AI never makes the final hiring decision — it only ranks.
5. Data localisation
India personal data is stored in AWS Mumbai (ap-south-1). UAE personal data is stored in AWS Bahrain (me-south-1). No cross-border transfer occurs without an explicit lawful basis (e.g. customer-initiated transfer in a multi-country deployment).
6. Your rights
Under both DPDP and PDPL, you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, port your data, and object to automated decision-making.
To exercise these rights, email privacy@zorvis.ai. We will respond within 30 days.
7. What we do not do
- We do not sell personal data. Ever.
- We do not store individual employee attrition or flight-risk scores. Permanently.
- We do not use customer data to train cross-customer AI models without explicit opt-in.
- We do not allow advertising tracking on our website.
8. Security
Encryption in transit (TLS 1.3) and at rest (AES-256). Role-based access controls. Audit logs for all data access. SOC 2 and ISO 27001 in progress.
9. Contact
Data Protection Officer (India): privacy@zorvis.ai
Data Protection Officer (UAE): privacy-uae@zorvis.ai
General: founder@zorvis.ai
For our Terms of Service, see /terms.