Privacy

Privacy policy

What we collect from the people who use Polar Integrity, the candidates they interview and their interviewers, why, how long we keep it, and your rights.

Last updated 12 October 202616 sections
On this page
  1. 01Who we are
  2. 02Our role
  3. 03What we collect
  4. 04What we never collect
  5. 05How we use it
  6. 06Data from Google
  7. 07Why we are allowed to
  8. 08How long we keep it
  9. 09Who we share it with
  10. 10Where data is processed
  11. 11How we protect it
  12. 12Your rights
  13. 13Cookies
  14. 14Children
  15. 15Changes to this policy
  16. 16Contact and Grievance Officer

01

Who we are

Polar Integrity is a service of Solvara Technologies & Softwares (OPC) Pvt Ltd (“we”, “us”). It helps hiring teams and staffing firms check that remote interviews are conducted fairly, and produces a report as evidence for human review.

This policy covers three groups of people: the people at our customers who use the dashboard, the candidates they interview, and the interviewers on those calls. It also covers visitors to polarintegrity.com.

02

Our role

For customer accounts (the people who sign in to the dashboard and buy credits) we decide how the data is used, so we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023, and the controller under similar laws.

For candidates and interviewers, the organization running the interview decides who is interviewed and why. It is the Data Fiduciary (or controller), and we process that data on its behalf and only on its instructions. Questions about a specific interview are best sent to that organization; if they reach us, we pass them on and help it respond.

03

What we collect

FromWhat
Customer usersName, work email address, organization and role; sign-in records (time, IP address, device); actions in the dashboard, kept in an audit log; billing details such as company name, billing address and country. Card and bank details are entered on our payment provider’s checkout and never reach us.
Connected calendarsIf a user connects a Google or Microsoft calendar, we read event titles, times, attendees and meeting links to find interviews. Access is read only and can be disconnected at any time.
CandidatesName, email address and the interview details the organization provides; a consent record (time, IP address, browser and the version of the notice); device-check results from Polar Check, such as running programs that can assist during an interview, displays, virtual machines and audio devices; and, only with consent that covers it, the audio of the interview call on the candidate’s computer.
InterviewersName and email address, given to us by the organization. Interviewers’ voices are part of the call audio captured on the candidate’s computer.
Report viewersAnyone opening a shared report enters a name and email address, which are recorded with the time of each view.
Website visitorsStandard server logs (IP address, browser, pages requested). People who write to sales give their name, work email, company, job title and what they ask us.

04

What we never collect

  • The candidate’s screen contents, keystrokes, files or browsing history.
  • Webcam video during the interview.
  • Passwords: sign-in is by a one-time link sent to a work email address.
  • Card or bank account numbers, which go straight to our payment provider.

05

How we use it

  • To run the service: detect interviews, send setup links and reminders, run the device check, analyse call audio and produce the report for the organization that ran the interview.
  • To operate accounts and billing: sign-in, invoices, credit balances and support.
  • To keep the service secure and working: rate limits, fraud prevention, audit logs, monitoring and error reports with personal data removed.
  • To meet legal obligations, such as tax records and responding to lawful requests.
  • We do not sell personal data, use it for advertising, or use candidate data to train models for anyone else. Reports never rank candidates or recommend a hiring outcome.

06

Data from Google

When a user connects a Google calendar, Polar reads event titles, times, attendees and meeting links only to find the user’s interviews and set them up in Polar. We do not use this data for advertising, sell it, or use it to train AI models, and people at Polar read it only with the user’s permission, for security, or where the law requires.

Polar does not use any third-party AI or machine-learning services, and data from Google is never processed by an AI or machine-learning model. The only model Polar runs analyses interview call audio, never data from Google. It is self-hosted on Polar’s own servers, and no data is sent to a model provider or used to train, retrain or improve any model.

Polar’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

07

Why we are allowed to

Candidates give consent in the Polar Check portal before anything is collected, and call audio is captured only under consent whose wording covers it. A candidate can withdraw by closing Polar Check; the report then shows that the check was stopped. Customer account data is processed to provide the service the customer signed up for and for legitimate business purposes such as security and billing. Where other laws apply, we rely on the equivalent grounds: consent, contract, legitimate interests and legal obligation.

08

How long we keep it

DataKept for
Full call audioNot stored. It is analysed while the call runs.
Evidence clips30 days by default. Each organization can set 7 to 90 days.
Voice profile used for matchingNot stored. It is built from the call audio while the call runs and discarded with it.
Reports and interview events12 months.
Candidate contact detailsDeleted with the interview.
Consent records and audit logKept as a record of what was agreed and done.
Customer account and billing recordsFor the life of the account, and invoices for as long as tax law requires.
Error reports30 days, with personal data removed.
Encrypted backupsUp to 90 days, then deleted.

Deleted data can remain in encrypted backups until they expire. It is not restored into the service except to recover from an incident. An organization can place a legal hold on an interview, which pauses deletion until it is lifted.

09

Who we share it with

Reports go to the organization that ran the interview and to the people it shares them with. We use these service providers, each bound to use the data only to provide their service to us:

ProviderPurpose
Amazon Web ServicesStorage of evidence clips, documents and backups
MongoDB AtlasDatabase
Cloud server providerRunning the application
CloudflareNetwork security, traffic routing and access control
ResendSending and receiving email
RazorpayPayments
Google and MicrosoftCalendar access, only for users who connect a calendar
Grafana LabsMonitoring and logs

We may disclose data where the law requires it, to protect our rights or users’ safety, or to a successor if the business is transferred, under the same protections.

10

Where data is processed

We serve customers worldwide, and our providers operate in several countries. Personal data may be processed outside the country where it was collected. Where we transfer data across borders, we do so only to countries the applicable law permits, and with contractual safeguards in place. Customers can ask which regions their data is stored in.

11

How we protect it

  • Encryption in transit everywhere, and encryption at rest for the database, files and backups.
  • Access by our staff only when needed for support, with every access recorded in an audit log and sensitive actions approved by a second person.
  • Signed links that expire for candidates, interviewers and shared reports.
  • Backups encrypted with a key that our servers never hold.

12

Your rights

Depending on where you live, you can ask to access, correct or erase your personal data, withdraw consent, object to or restrict processing, receive a copy of your data, and nominate someone to act for you. You can also raise a grievance with us, and you may complain to your data protection authority, including the Data Protection Board of India.

Candidates and interviewers: please contact the organization that ran your interview first, since it controls that data. You can also write to us and we will pass the request on and help. Everyone else: write to [email protected]. We reply within 30 days, and may ask you to confirm your identity.

13

Cookies

We use only the cookies needed for the service to work: a session cookie that keeps you signed in to the dashboard (up to 60 days) and a short-lived security cookie while you connect a calendar. We do not use advertising or cross-site tracking cookies.

14

Children

Polar Integrity is a tool for businesses and is not meant for anyone under 18. We do not knowingly process children’s data; if an organization has interviewed someone under 18 through Polar, we will delete that data on request.

15

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use personal data, we tell customers by email before it takes effect. Candidates are asked to consent again whenever the consent wording in Polar Check changes.

16

Contact and Grievance Officer

Grievance Officer: Sauvik Nath, Solvara Technologies & Softwares (OPC) Pvt Ltd. Write to [email protected]. We acknowledge grievances within 48 hours and resolve them within 30 days.

For anything else, write to [email protected] or see Contact.