Privacy Policy

1. Introduction

BeQuizzy Inc. ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our assessment platform.

2. Information We Collect

2.1 Account Information

Name, email address, profile photo, organization details, and authentication credentials (managed by Supabase Auth).

2.2 Assessment Data

Text answers, audio recordings, video recordings, voice interview transcripts, code submissions, and evaluation results.

2.3 Usage Data

Browser type, IP address, pages visited, time spent, and interaction patterns for service improvement.

2.4 Payment Information

Payment processing is handled by PayPal. We do not store credit card numbers or payment credentials on our servers.

3. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) process assessments and generate evaluations; (c) send service-related notifications; (d) improve and personalize the Service; (e) comply with legal obligations.

4. AI Processing

Assessment responses may be processed by AI systems (Google Gemini, GCP Vertex AI) for evaluation purposes. AI-generated evaluations assist but do not replace human judgment. Organizations retain the final decision on candidate outcomes.

5. Data Storage & Security

Data is stored on Supabase (PostgreSQL with row-level security) and Cloudflare R2 (media files). All data is encrypted in transit (TLS 1.3) and at rest. Access is controlled through role-based permissions.

6. Data Sharing

We do not sell your personal data. We share data only with: (a) service providers necessary to operate the platform (Supabase, GCP, Cloudflare, PayPal, Mailgun); (b) as required by law; (c) with your organization (for organizational data).

7. Your Rights (GDPR / CCPA)

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data in a portable format; (e) object to or restrict processing; (f) withdraw consent. Exercise these rights from your profile settings or by contacting privacy@bequizzy.com.

8. Data Retention

Account data is retained while your account is active. Upon account deletion, data enters a 30-day grace period before permanent removal. Assessment data is retained according to the organization's configured retention policy.

9. Cookies

We use essential cookies for authentication and session management. No third-party tracking cookies are used. Analytics (if enabled) use privacy-respecting solutions.

10. Children's Privacy

BeQuizzy is not intended for children under 16. We do not knowingly collect data from children under 16.

11. International Transfers

Data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for international transfers.

12. Changes to This Policy

We will notify you of material changes via email or in-app notification. The "effective date" at the top of this policy indicates the last update.

13. Contact

For privacy inquiries: privacy@bequizzy.com