Legal
Privacy Policy
Last updated: June 2026
This policy explains what data we collect, why, and how we protect it.
1. Who we are
ScreenCode is a technical hiring assessment platform operated from India. If you have questions about this policy, please contact us.
2. What data we collect
HR users: name, work email, and organisation name at sign-up. Candidates: name, email, MCQ responses, code submissions, and anti-cheat event logs (tab switches, paste events). We do not collect payment data directly - billing is handled by our payment provider.
3. How we use your data
HR users: to provide the platform, send authentication links, and communicate about the service. Candidates: to conduct assessments, score responses, and provide results to the HR organisation that invited you. We use anonymised, aggregated usage data to improve the platform. We never use your data to train third-party AI models.
4. Legal basis for processing
For HR users: contract performance (providing the service you signed up for). For candidates: legitimate interests of the HR organisation conducting hiring, and where required, your consent. We rely on the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 (India).
5. Data sharing
We share data only with the service providers necessary to operate the platform: Supabase (database and auth, hosted in Mumbai, India), Vercel (frontend hosting), Render (backend hosting), Judge0 (code execution sandbox), and Resend (transactional email). We do not sell data to any third party.
6. Data retention
Candidate assessment data is deleted 90 days after assessment completion. HR organisation data is deleted 90 days after account cancellation. Backups are retained for 7 days.
7. Your rights
You have the right to access, correct, or delete your personal data. To exercise these rights, please contact us. We will respond within 30 days. Candidates may request deletion of their assessment data by contacting the HR organisation that administered the assessment, or contact us directly.
8. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.
9. Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). See our Security page for full details.
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance.
11. Contact
For privacy-related questions or data requests, please use our contact form.