Privacy notice

This notice explains what personal data UntilSeen collects, why, who sees it, how long we keep it, and your rights under the Digital Personal Data Protection Act, 2023, the rules made under it, and the Information Technology Act, 2000 and its rules. We collect only what we need for hiring, and ask for your consent before we collect it.

Who we are

Potpally Vinay (“UntilSeen”, “we”) decides why and how your data is processed. For the Act, we are the Data Fiduciary. A company that opens a role here becomes a separate Data Fiduciary for anything you choose to share with it.

Adults only

UntilSeen is only for people aged 18 or older. You confirm your age when you sign up. We do not knowingly process data of children. If you think a child has an account, tell the Grievance Officer and we will erase it.

What we collect, and why

• Account. Name, email, and a password hash (never the password), so you can sign in. We email you about your account, ask once for your feedback the day after your first test, and, if you confirm your email but do not start a test, send at most two reminders, which you can turn off from the email. Legal basis: your consent at sign-up.
• Resume. The file you upload, the text read from it, and suggested fields. It is used to fill your profile. Before the text is stored, we remove date of birth, age, gender, marital status, religion, caste, category, nationality, parents’ or spouse’s names, blood group, Aadhaar, PAN, and passport numbers where we can find them. We never ask for these, and employers never see them.
• Profile you confirm. Headline, years of experience, location, preferred work arrangement, skills, companies, honours, awards, claims, current and expected CTC, notice period or last working day, and optionally phone, links, and whether you hold an offer and its CTC (never which company; shown for 60 days). Used to match you to roles. A resume only suggests values; nothing is saved until you check and confirm it.
• Assessment. Your answers, time taken, code, written answers, the full AI assistant chat from the code sitting, times you left the page, and paste attempts on the first two code answers. Shown with your results to companies you share with. These signals prompt interview questions; they never decide anything on their own.
• One sitting per person. We store a one-way hash of your email, phone, LinkedIn, GitHub, and resume text. Two accounts are treated as one person when the email or LinkedIn matches, or when two weaker details agree (for example the same phone and the same resume). A shared family phone or a copied sample CV on its own is not enough. We cannot read the original values from those hashes. Legal basis: our legitimate interest in a fair sitting, and your use of the product.
• Activity, for ordering shortlists. When you last used UntilSeen, how many asks from companies you answered or left unanswered in the last six months (never what you answered or to which company), and, if you turn it on, that you are actively looking. Used only to put people likely to reply first on a company's shortlist. A company may see that you are actively looking, or a general note that you may be slow to reply; never dates or other companies. None of this takes you off a shortlist. “Actively looking” switches off by itself after 60 days. Legal basis: your consent to the pool.
• Your choices. A record of each consent you give or withdraw, with the time and the version of this notice.
• Early retakes, if you buy one. The order ID, payment ID, amount, and date, so we can give you the retake, handle refunds, and keep the records tax law requires. Legal basis: the purchase you ask for, and legal obligation.
• Employers. Organisation name, role details, shortlists, notes sent, and outcome feedback, used to run hiring for that organisation.
• Requests. Emails, requests to us, and audit entries of sensitive actions (for example, a resume download), kept to show we handled your data properly.
• Company outreach visits. If you open UntilSeen from a company email we sent, that link includes a company code (for example /hire?from=saaya). We store that code, the page you opened, the action (opened hire, opened pricing, started or finished sign-up, WhatsApp), a random visit id in this browser's session storage (not a cookie), and the time. We do not store your name, email, or IP on this log. Staff use it to see which emails led to the site. Rows older than 90 days are deleted. Legal basis: our legitimate interest in measuring our own outreach, and your use of the link.

We never see or store card, UPI, or bank details, and we do not collect health data, biometrics, or location tracking. There is no third-party analytics or advertising tracker, and we do not sell personal data.

Who sees your data

• Companies that shortlist you from the pool. Matching you to companies is what UntilSeen is for, so when you sign up to look for a job you are in the pool. The sign-up form says so, and you can turn it off at any time. No company sees you before your profile is confirmed. While you are in the pool, a company hiring for a matching role can put you on its shortlist. When it does, we share your profile with that company for that role: name, skills, experience, location, current and expected CTC, notice period or last working day, an offer in hand if you said so, a short brief from your resume, results, code, and AI chat. The company may ask, through UntilSeen, if you are interested; we send that email for it. A company can also let us send that same email, in its name, to the people we recommend for the role. Across all companies you get no more than 5 asks a week, and these automatic asks stop once you have had 3 that week. Your email, phone, links, and resume file are shared with that company only after you answer I'm interested. Say Not for me and we stop sharing for that role; remove a company on your Privacy page and we stop sharing with it; pause the pool from your home page, profile, or Privacy page and we stop sharing with every company. Legal basis: your consent, given when you create the account with this notice in front of you, which you can withdraw at any time. If you joined the pool before 29 September 2026, companies do not see you until you agree to this sharing from your profile. If you signed up before 30 September 2026 and did not join the pool, you stay out of it until you turn it on.
• Companies you applied to. If a company invites you to take the assessment and you accept, you agree to share with that company, for that role only. Accepting does not change whether you are in the pool.
• Processors. Our AI provider (USA) runs the AI model for questions, the code task, and matching. To write your questions it gets your skills, years of experience, and the work lines from your resume with names, company names, and contact details removed. Your personal details (name, email, phone, links, ID numbers) are never shared with any AI model. Zoho Payment Technologies Private Limited (India) takes payment for early retakes; you enter your payment details with Zoho Payments, not with us. Our hosting and email providers store and send data for us. Each processor may use the data only to provide its service to us.
• Authorities, only where Indian law requires it.

Transfer outside India

Some processing happens in the USA (our AI provider). The Act allows transfers except to countries the Government of India restricts; we will stop any transfer to a restricted country.

How long we keep it

• Account, profile, resume, and assessments: while your account is active. If you do not sign in for 24 months, we email you and erase everything 48 hours later unless you sign in.
• Unanswered or declined invites: deleted when they expire, 30 days after sending.
• After erasure, a one-way hash of your email stays in the consent record for one year, to prove what consent we had. Then it is deleted. Hashes used to stop a second sitting stay with that record until you have had a fair wait for the next free sitting (30 days), then they are unused; we do not turn them back into email, phone, or links.
• Resolved requests to us: one year.
• Early-retake payment records (order ID, payment ID, amount, date): eight years, as tax and accounting law requires, even after erasure. Nothing else about you is kept with them.
• Server logs (IP address, time, and the page asked for): 180 days, as CERT-In directions under the IT Act require. Then they are deleted.
• Backups, if any, roll over within 30 days.

Your rights

• Access: download a copy of your data from Settings → Privacy, or ask for a summary. The file says what it leaves out (a company's private notes, answer keys of shared questions, your password hash) and why.
• Correction: edit your profile at any time, or ask us to correct something.
• Erasure: erase your account from Settings → Privacy. It happens straight away. Companies you already shared with keep only what they downloaded, under their own obligations.
• Withdraw consent: pause the pool from your home page, profile, or Privacy page, remove a company's access, or say Not for me to a request at any time. Withdrawing is as easy as giving consent and does not affect what was done before.
• Nominate someone to exercise these rights if you die or cannot act.
• Grievance: complain to our Grievance Officer. If you are not satisfied, you may complain to the Data Protection Board of India.

Use the data request form. We confirm by email, check the request came from the account owner, and reply within 30 days.

Security and breaches

Passwords are hashed, resume files are stored with owner-only access, and access to data is limited by role and logged. If a breach affects your data, we will tell you and the Data Protection Board without delay, with what happened, the likely impact, and what you can do, and report it to CERT-In as required.

Grievance Officer

Potpally Vinay. Email grievance@untilseen.com, or use the data request form and choose “Grievance”. We acknowledge within 24 hours and resolve within 15 days.

Changes

If we change this notice in a way that affects your consent, we will tell you and ask again. The date at the top is the version you are reading.