Privacy Policy

Obble runs a hiring funnel: an AI phone screening, an AI interview, and a final interview run by a person. For that last one, Obble prepares the questions beforehand from what the earlier rounds found, and drafts a structured report afterwards. It never makes the hiring decision.

This service is operated by Obble AI Private Limited, a company registered in the State of Telangana, India ("Obble", "we", "us", "our"). This policy covers our website and app at obble.ai and the interviews run through them.

If you have any question about this policy or your data, email privacy@obble.ai. We will reply in plain language.

There are three kinds of people in Obble:

• Customer (a company): the organisation that buys Obble and runs interviews on it. It pays; the candidate never does.
• Interviewer (a member of the Customer's team): the person who runs the final interview, with the questions Obble prepared.
• Candidate: the person being interviewed. A candidate has no account, is never charged, and never sees the interviewer's questions or scores.

This split matters for who is legally responsible for the data:

• For the Customer's own account information (an interviewer's name and work email, billing details, the settings they choose), Obble is the data controller.
• For everything captured about a Candidate during an interview (the recording, transcript, resume, and suggested scores), the Customer is the controller and Obble is the processor: we handle that data on the Customer's behalf and on their instructions, under a data processing agreement. If you are a candidate and want your data changed or deleted, we will help and, where the law requires it, pass your request to the employer who decides (see section 14).

A few hard limits decide how Obble is built. They are not settings we can turn off:

• We never read faces or emotions. The candidate's camera is recorded so people can review the interview (with consent), but it is never sent to any AI. Every AI signal comes from what was said (the words), never from a face, a voice tone, body language, "confidence", or "honesty".
• We never decide who gets hired.Obble scores candidates only against the role's own written requirements, with cited evidence, and a human decides. We produce no overall hireability score and no hire or no-hire recommendation, and every advancement or rejection is a decision a named person at the hiring organization makes and logs.
• We never guess protected characteristics such as race, gender, age, disability, religion, or pregnancy, from any source.
• We never sell your data, and we keep candidate data within approved regions, handled only by providers we have vetted.

From the Customer and interviewers

• Account details: name, work email, and your role in the company. We do not use passwords; sign-in is by a one-time code or a magic link.
• The content you enter: job descriptions and the context you give the AI about a position, notes, and the candidate lists you upload.
• Billing details, handled by our payment providers (we do not store full card numbers).
• A record of actions taken in the product, for security and audit.

From candidates, during an interview

• Identity provided by the employer: name and email, and the resume or CV and any documents shared.
• The audio of the call, and a candidate-focused recording: the candidate's camera, the two-way audio (so the question is audible), and any screen the candidate shares. The interviewer's camera is not recorded.
• The live transcript of what was said, and the timing of answers.
• The candidate's explicit consent to be recorded, including what notice was shown and when.

Generated by Obble

• The transcript, the questions prepared for the interview, AI-suggested trait scores that a human confirms, descriptive observations, and the timestamps of key moments.

From tools the Customer connects (optional)

• Candidate records and resumes imported from an applicant tracking system, if the Customer connects one.
• Calendar events, if the Customer connects Google or Microsoft Calendar. We request calendar access only. We never request access to email or inboxes.

Technical information

• Sign-in sessions, and the device and connection information needed to run a live video call and keep the service secure and reliable.

We use the information above to:

• Run the interviews: host the call, transcribe it, and prepare the questions the interviewer works from.
• Draft the post-interview report, with AI-suggested trait scores that the interviewer confirms, and produce the recording and the review tools around it.
• Operate prepaid credits, billing, and support.
• Keep the service secure, reliable, and free from abuse.
• Improve the Customer's own interview quality over time, and improve our product, using information from interviews. We do not use a Customer's private interview content to train any third party's public AI models.
• Meet our legal obligations.

Before any recording or AI runs, the candidate sees a clear notice: that the call is recorded, what AI does before and after it, what is captured, how long it is kept, and their rights. The candidate must explicitly agree to continue.

The wording adapts to where the candidate is, to meet local rules such as the GDPR in Europe, two-party-consent laws in some US states, and India's Digital Personal Data Protection Act. If a candidate does not agree, the interview does not record.

The notice is honest disclosure, not surveillance. The candidate is told plainly what AI does and does not do; they never see the prepared questions or the scores.

Where the GDPR or a similar law applies, we rely on these bases to handle personal data:

• Consent: for recording the interview. Consent can be withdrawn at any time.
• Performance of a contract: to provide the service a Customer signed up for.
• Legitimate interests: to keep the service secure, prevent abuse, and improve it, balanced against your rights.
• Legal obligation: where the law requires us to keep or disclose information.

For candidate interview data, the employer (the Customer) is the controller and sets the lawful basis for the interview; Obble processes that data on their behalf.

To transcribe the call, prepare the questions, and draft the report, text and audio are processed by specialist providers. The candidate's video and face are never sent to any of them.

We only use providers that meet all of these conditions:

• they keep data in an approved region;
• they do not train their own models on your data (a "zero-retention, no-training" arrangement); and
• they have signed a data processing agreement with us.

Speech-to-text turns the audio into a transcript. A large-language-model provider reads the transcript text, the position context, and the resume to suggest the next question and to draft the report. Both work from words, not faces.

We do not sell personal data. We share it only with the service providers that help us run Obble, each under a data agreement and the region and security rules above. We use providers in these categories:

• Cloud hosting and storage: to run the application and securely store data such as recordings, resumes, and reports, in our chosen region.
• Live call infrastructure: to carry the real-time video call.
• Speech-to-text: to turn the call audio into a transcript. It receives audio only, never video.
• AI model providers: to prepare the questions, conduct the AI rounds, and draft the report. They receive text only, never video, and do not train their models on your data.
• Recruitment and calendar connectors: only if you choose to connect your applicant-tracking system or your calendar. Calendar access is limited to events, never email.
• Payment processors: to take payment from Customers. They handle billing data only and never receive candidate data.
• Operational tools: for security, error monitoring, and support.

We choose each provider for its security and data-protection standards, keep candidate data in our chosen region, and never send the candidate's video or face to any AI provider. A current list of the specific sub-processors we use is available to Customers on request and under our Data Processing Agreement.

We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale, in which case we will require that this data stays protected. We will tell Customers about new providers that handle personal data.

Obble runs in a chosen region, and keeps candidate audio, video, transcripts, resumes, and personal data within that region, handled only by providers we have vetted for it.

Some processing may involve a transfer across borders (for example, between India and the EU). Where it does, we use appropriate safeguards, such as Standard Contractual Clauses or an equivalent, so your data stays protected.

Interview content (the recording, captions, shared-screen frames, and, depending on the region, the raw transcript text) is kept for a retention period agreed with the Customer, and is then automatically deleted.

The basic record that an interview happened, and the confirmed scores and outcome, may be kept longer for legitimate record-keeping and to improve the Customer's interview quality, in de-identified form where appropriate.

Billing and tax records are kept for as long as the law requires. When a Customer closes their account, we delete their data after a short backup-purge window.

We build security in from the start:

• encryption of data in transit and at rest;
• strict separation between Customers, enforced in the database, so one company can never see another's data;
• least-privilege access and encrypted secrets;
• passwordless sign-in, with sessions that can be revoked instantly; and
• a candidate join link that works for a single interview only and grants no other access.

No system is perfectly secure, but we design for safety and review it continuously. If a breach ever affects your data, we will act and notify as the law requires.

Depending on where you live (for example under the GDPR, UK GDPR, India's DPDP Act, or US state laws), you can ask us to:

• access the personal data we hold about you;
• correct it if it is wrong;
• delete it;
• give you a copy in a portable form;
• limit or object to how it is used; and
• withdraw consent you gave earlier.

To exercise any of these, email privacy@obble.ai. We will not treat you differently for asking. If you are unhappy with our response, you can complain to your local data protection authority.

If you were interviewed through Obble, the employer who interviewed you is the controller of your interview data; Obble holds it on their behalf.

• You are never charged and never need an account.
• You can ask for your interview recording and data to be deleted, or for a copy. Email privacy@obble.ai and we will help, and route your request to the employer where they must decide.
• AI prepares the interviewer's questions before the call and drafts the record afterwards. It works only from what is said, never from your face or emotions.

Because Obble suggests trait scores, we treat it as a regulated hiring tool, not an exempt one, and we build for fairness:

• We keep a full record of every AI-suggested score and the human's confirmed or changed score, so an employer can run a bias audit on the human decisions and outcomes (for example, as some laws such as New York City Local Law 144 and the EU AI Act expect).
• We never guess protected characteristics. Any fairness analysis uses information the employer supplies, never anything Obble infers.
• Candidates are always told what AI does in their interview.

We use only what is needed to sign you in and keep the service secure and working, such as a sign-in session. We do not use advertising trackers. If we ever add product analytics, we will update this policy first.

Obble is a workplace hiring tool, meant for adults of working age. It is not intended for anyone under 18 (or the age of majority where they live), and we do not knowingly collect data from children.

We may update this policy from time to time. The "Last updated" date at the top always shows the current version, and we will tell Customers about significant changes. If you keep using Obble after a change takes effect, you accept the updated policy.

Have a question about your data or this policy? We are glad to help. You can reach us here:

Obble AI Private Limited
State of Telangana, India

• Privacy and data requests: privacy@obble.ai
• General support: support@obble.ai

For India's DPDP Act, you can reach our grievance contact at privacy@obble.ai.