Privacy and Policy

Protecting your privacy is important to us, and this Privacy Policy explains how we collect, use, and disclose information from users of our website and related services.

Last Updated on: August 14, 2026

Novelio Technologies Private Limited Privacy Policy

Northstarz.AI is a product of Novelio Technologies Private Limited (“Northstarz,” “we,” “us,” “our”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what your rights are when you visit our website www.northstarz.ai, use our services, or interact with our platform.

Who we are

Novelio Technologies Private Limited is responsible for the personal data we process for our own business purposes, including website administration, sales, marketing, product support, and account management. When Northstarz processes personal data on behalf of a hiring company as part of our recruitment services, that company is the Data Controller or Data Fiduciary, and Northstarz acts as the Data Processor, unless a separate agreement or applicable law states otherwise.

Scope

This Privacy Policy applies to personal data collected through our website, platform, mobile and web applications, support channels, events, marketing activities, and services we provide to customers. It does not apply to third-party websites or services linked from our platform, those third parties have their own privacy practices. Where we process candidate or employee data on behalf of a customer, or where Northstarz is deployed by an authorised reseller under a separate brand name, the customer’s or reseller’s own privacy notice will govern how that data is handled. This policy governs Northstarz’s own data practices as the underlying platform operator.

Personal data we collect

We collect only the data we need for the purpose it is collected. The categories below cover data we may collect depending on how you interact with us. (Please note the below list is not exhaustive in nature)

Identifiers and contact details that may include your name, email address, phone number, organisation, job title, and business contact information.
Account and profile data such as login credentials, profile preferences, and account settings.
Your CV or resume, education, employment history, assessments, interview notes, candidate status, and any other information you submit through the platform.
Your video recording, voice, image, facial expressions, and verbal responses during AI-moderated video interviews. We process this data only with your explicit consent and solely to assess your suitability for the role you applied for. Where our AI analyses facial expressions, a separate explicit consent is collected at the start of each AI video interview session.
Your enquiries, messages, support tickets, and feedback.
Technical and device data such as IP address, device identifiers, browser type, operating system, language preferences, log files, and access timestamps.
Your usage data, e.g. pages visited, features used, actions taken, and how you interact with our services.
Cookie and tracking data collected subject to your consent where required by law. See Section 8 for more detail.
General location inferred from your IP address, or precise location only where you choose to enable it.
Sensitive or special category data only where necessary and lawful, such as information you voluntarily provide during recruitment or where required for compliance purposes, with appropriate safeguards in place.

Sources of data

We collect personal data directly from you when you register, complete forms, apply for roles, communicate with us, attend events, or use our services. We also collect data automatically through our website, platform, cookies, and similar technologies. In some cases, we receive data from our customers, authorised users, integration partners, analytics providers, and publicly available professional sources, where permitted by applicable law.

How we use your data

We use your personal data for specific, legitimate purposes and only where we have a valid legal basis. Here is what we use it for:

Run, maintain, and improve our website and services.
Verify user identity, manage accounts, and provide customer support.
Manage job applications, recruitment workflows, candidate communications, and related talent operations.
Record and analyse your AI video interview as one input in the evaluation process. The AI assessment is never the sole basis for a hiring decision. A qualified human reviewer at the hiring company always reviews AI outputs before any decision is made.
Allow hiring companies to invite, evaluate, and communicate with candidates.
Conduct analytics, improve our product, troubleshoot issues, and monitor platform performance.
Send service updates and administrative notices, and, where you have given consent, marketing communications.
Detect, investigate, and prevent fraud, misuse, security incidents, and unlawful activity.
Meet our legal obligations, enforce our agreements, and protect the rights of our users, customers, and the public.

Legal bases for processing

We must have a valid legal basis for processing your personal data. Depending on the activity, we rely on one or more of the following:

Performance of a contract: to deliver the services you have requested or to take steps before entering into a contract with you.
Legitimate interests: to run and improve our services, keep our systems secure, detect misuse, and manage business communications, where these interests are not outweighed by your rights.
Consent: for cookies where required by law, optional marketing, certain recruitment uses, AI video interviews, and processing of sensitive personal data.
Legal obligation: to comply with applicable laws, regulations, tax requirements, or court orders.

Our role as data controller & data processor

When you visit our website or contact us directly, Northstarz acts as a Data Controller for your personal data. When a hiring company uses Northstarz to process candidate or employee data, we act as a Data Processor and handle that data only on the company’s documented instructions, in line with our contract and applicable law. If your data was submitted to us by a hiring company, you may need to contact that company directly to exercise some of your rights. We will assist where required by our contract and applicable law.

Cookies & tracking

We use cookies, pixels, and similar technologies to keep the platform running, remember your preferences, analyse traffic, and improve your experience. Where the law requires it, we ask for your consent before placing non-essential cookies. You can manage your cookie preferences at any time through your browser settings or our cookie banner.

Sharing of data

We do not sell your personal data. We share it only where necessary, and only with the following categories of recipients:

Our affiliates and group companies, where necessary to deliver our services.
Service providers and sub-processors that host, maintain, support, or help us deliver our services. They are bound by confidentiality obligations and may not use your data for their own purposes.
Analytics, communications, and marketing technology providers, where required to operate our platform.
Hiring companies and their authorised users, where data is shared as part of the recruitment service we provide.
Professional advisers, auditors, insurers, and legal counsel, on a need-to-know basis.
Regulatory authorities, courts, or law enforcement agencies, where disclosure is required or permitted by applicable law.
A purchaser or successor entity in connection with a merger, acquisition, restructuring, or asset transfer. You will be notified before any such transfer takes effect.

We do not share your personal data for third-party marketing purposes unless you have given your consent or the law otherwise permits it.

International transfers

Northstarz, while headquartered in Bengaluru, India, serves clients globally. Your personal data may therefore be transferred to, stored in, or accessed from countries other than your own, including India. Where the UK GDPR or EU GDPR applies, we put in place appropriate safeguards such as Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or other legally recognised transfer mechanisms. We also rely on adequacy decisions where available. For all other jurisdictions, we apply equivalent contractual protections aligned with local law.

Retention

We keep your personal data only for as long as necessary for the purpose it was collected, including to deliver our services and meet legal, tax, audit, and security obligations. When we process data on behalf of a hiring company, retention periods are set by that company’s instructions and our contract with them, subject to any legal requirements. When data is no longer needed, we securely delete or anonymise it.

Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include access controls, encryption, network protections, logging, monitoring, backup procedures, and vendor security requirements. No system is entirely secure, but we regularly review and strengthen our safeguards to reflect the sensitivity of the data we hold. If we become aware of a data breach that may affect you, we will notify you and the relevant regulatory authority as required by law.

Your Rights

Depending on your country and how we process your data, you may have some or all of the rights listed below. To exercise any right, write to us at dpo@northstarz.ai. We will acknowledge your request within 48 hours and aim to resolve it within 30 days.

Right to Access: You can access the personal data we hold about you.
Right of Correction: You can ask us to correct inaccurate or incomplete data.
Right to Erasure: You can ask us to delete your personal data, where permitted by law.
Right of Restriction or objection: You can ask us to limit or stop processing your data in certain circumstances.
Right to Portability: You may receive your data in a structured, machine-readable format, where applicable.
Right to Withdraw consent: You may withdraw any consent you have given at any time. This does not affect the lawfulness of processing carried out before withdrawal. Once you withdraw consent, we will stop using your data for the purpose originally agreed upon, unless there’s a legal reason for continued processing (like a court order). To withdraw consent, please click here.
Right to Lodge a complaint: You may raise a concern with the relevant data protection regulator in your country.
Right to Nominate a representative: Under the DPDPA, you may nominate another person to exercise your rights on your behalf.
DPDPA rights: You have all rights under India’s Digital Personal Data Protection Act 2023, where applicable.
Where we process your data on behalf of a hiring company, we may refer you to that company to exercise certain rights, as they determine the purposes of that processing. We will assist wherever our contract and applicable law require us to.

Automated decisions

We use automated tools to support recruitment screening, fraud prevention, service personalisation, and workflow efficiency. Where automated decision-making has a significant impact on you and is subject to applicable law (such as the GDPR or DPDPA), we will provide clear notice and the appropriate safeguards, including the right to request human review of any automated decision. We do not use automated processing in a way that overrides your legal rights.

Children

Our platform is intended for adults aged 18 and above. We do not knowingly collect personal data from children. Under India’s DPDPA and DPDP Rules 2025, processing of a child’s data requires verifiable parental consent. If you believe a child has submitted data through our platform without proper authorisation, please contact us at dpo@northstarz.ai and we will take prompt action to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make significant changes, we will post the updated policy on our website and, where required, notify you directly. The effective date at the top of this document shows when the current version took effect. We encourage you to review this page periodically.

Means to contact us

If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern, please contact our Grievance Officer by writing to us at dpo@northstarz.ai.

You may also contact Northstarz at our mailing address below:
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Novelio Technologies Private Limited

AWFIS, 5th Floor, 12th, 1st & 2nd Bannerghatta Road, BTM Stage 2, BTM Layout, Bengaluru 560076, India

We will acknowledge your request within 48 hours and resolve it within 30 days. If your concern is not resolved to your satisfaction, you may escalate it to the relevant data protection regulator in your jurisdiction.

Contact Information

For any questions, comments, or concerns regarding our data processing activities, feel free to email us at info@northstarz.ai.