🛡️ PAYANAI — PRIVACY POLICY

Your privacy is fundamental to PayanAI. Learn how we protect your voice data and personal information.

Effective Date: November 2025

1. Introduction

Payanai ("we", "our", "us") provides AI-powered assessment platforms, including voice-based and text-based assessments, that help organizations evaluate candidates' skills and related traits during the hiring process.

This Privacy Policy explains how we collect, use, and protect personal and biometric information when you use our platform, subscribe to our services, or participate in an assessment.

By providing your voice data or using our services, you consent to this Privacy Policy.

2. Information We Collect

a. Personal Information

  • Name, email address, phone number, and applicant ID
  • Information provided during registration or job applications

b. Assessment Data

  • Voice recordings and biometric voiceprints derived from your audio (for voice-based assessments)
  • Text responses and written assessments (for text-based assessments)
  • Acoustic and linguistic features extracted to assess communication and behavioral attributes
  • Assessment responses, transcripts, and evaluation results

c. Subscription and Billing Information

  • Payment information processed securely through Stripe
  • Subscription plan details, usage metrics, and billing history
  • On-demand purchase records and screening limits

d. Technical Information

  • Device type, browser, IP address, and timestamps
  • Interaction data for analytics and security

3. Purpose of Processing

We process personal and biometric data to:

  • Facilitate hiring assessments and generate evaluation results (voice-based and text-based)
  • Manage subscriptions, process payments, and track usage limits
  • Authenticate applicants and prevent misuse
  • Improve accuracy, fairness, and system performance
  • Comply with legal obligations or respond to regulatory requests

4. Legal Basis for Processing

Consent

We process biometric data based on your explicit consent.

Legitimate Interests

We process general data to operate, secure, and improve our platform.

Contractual Necessity

Some data processing is required to deliver assessment results to employers.

5. Consent for Biometric Data

Before recording your voice, we present a Biometric Data Consent Form.

By agreeing, you authorize Payanai to capture, analyze, and temporarily store your voice data for the purpose of evaluation.

You may withdraw consent at any time by contacting us at privacy@payanai.com. Withdrawal does not affect prior lawful processing.

6. Data Storage and Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Voice, biometric, and assessment data are stored separately from identifying data in Supabase hosted on AWS U.S. East region.

Payment and subscription data are processed securely through Stripe, which is PCI DSS compliant.

Access to raw data is restricted to authorized personnel with audit logging enabled.

7. Data Retention and Deletion

Voice and biometric data are retained for up to 90 days from the date of submission.

Text-based assessment responses are retained according to your subscription plan and usage requirements.

Subscription and billing records are retained as required by law for tax and accounting purposes.

Aggregated or anonymized data may be retained longer for research or analytics.

Upon request or withdrawal of consent, all identifiable data will be securely deleted from active systems and backups.

8. Data Sharing

We do not sell or commercially share biometric data.

We may share data only with:

  • Payment Processors: Stripe (for secure payment processing and subscription management)
  • Vendors: AssemblyAI, Picovoice, Supabase (for processing, transcription, and storage)
  • Employers/Clients: Assessment results relevant to their recruitment process
  • Legal Authorities: When required by law

All vendors operate under strict Data Processing Agreements (DPAs) and comply with GDPR and applicable U.S./UK/India data privacy regulations.

9. International Data Transfers

Data may be processed in the United States, United Kingdom, or India. Where transfers occur outside your region, we use Standard Contractual Clauses (SCCs) or equivalent safeguards to protect your information.

10. Your Rights

Depending on your location, you may have rights to:

  • Access or obtain a copy of your data
  • Correct or delete your personal information
  • Withdraw consent to biometric processing
  • Request restriction or portability of data

To exercise these rights, contact: privacy@payanai.com

11. Children's Privacy

Payanai is not intended for individuals under 18 years of age. We do not knowingly collect or process data from minors.

12. Changes to this Policy

We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date.

13. Contact

For questions, privacy concerns, or data requests:

📧 Email: privacy@payanai.com

🌍 Address: Payanai LLC, Texas