Privacy & Data Protection Policy
Effective Date: September 20, 2026 • Data Controller: Xentic AI Workforce Pvt. Ltd.
This Privacy Policy explains how Xentic AI Workforce Pvt. Ltd. collects, processes, protects, and retains personal data when you use the GoAirM platform and services.
1. Information We Collect
To deliver accurate skill benchmarks, adaptive evaluations, and job matchmaking, Xentic AI Workforce Pvt. Ltd. collects information in the following categories:
- Full name, verified email, and international mobile number.
- Total years of experience, current compensation (CCTC), expected compensation (ECTC), and notice period.
- Uploaded resumes (PDF/DOCX), parsed work history, education, and technical competencies.
- Adaptive assessment responses, code submissions, audio/video interview recordings, and benchmark percentiles.
- Corporate legal entity name, authorized business domain, and headquarters location.
- Recruiter and interviewer identity (names, business emails, phone numbers, and available discussion slots).
- Job descriptions, required technical skills, compensation brackets, and workplace modes.
- Sequential interview notes, ratings, and hiring evaluation outcomes.
2. How We Use Your Data
We process data strictly for recruitment orchestration, assessment validation, and platform operations:
- Adaptive Skill Benchmarking: Generating personalized technical questions and assessing candidates against global engineering percentiles.
- Objective Candidate-to-Job Matching: Analyzing candidate competencies and compensation expectations against active employer requisitions.
- Sequential Multi-Round Interview Scheduling: Sharing interviewer contact details, discussion slots, and video meeting coordinates.
- Security & Fraud Prevention: Verifying corporate domain authenticity via OTP, monitoring rate limits, and enforcing role-based permissions.
3. Data Protection & Security Measures
Xentic AI Workforce Pvt. Ltd. implements enterprise-grade technical and organizational safeguards:
- Encryption Everywhere: All data in transit is encrypted via TLS 1.3 / HTTPS. All database stores and storage buckets utilize AES-256 encryption at rest.
- Strict Non-Sale of Personal Data: We never sell, rent, or trade candidate or employer information to advertisers, data brokers, or marketing intermediaries.
- Isolated Multi-Tenant Access: Access to candidate dossiers is restricted strictly to authorized recruiters for specific roles the candidate has applied to or matched with.
4. Candidate Rights & Data Control
Under applicable data protection legislation (including India's Digital Personal Data Protection Act and GDPR principles), you possess comprehensive rights over your personal data:
- Right to Access & Portability: You can download a standardized PDF copy of your verified profile and assessment benchmarks at any time.
- Right to Rectification: You can update your total experience, Current CTC, Expected CTC, and notice period directly in your candidate profile.
- Right to Erasure: You may request complete deletion of your profile, resume files, and assessment records by emailing our Data Protection Officer.
5. Data Retention Policy
We retain personal data for as long as your account is active or as necessary to fulfill the recruitment purposes outlined in this policy. Inactive candidate accounts without activity for 24 months are queued for automated archiving or anonymization upon notification.
6. Data Protection Officer & Contact
For privacy inquiries, data subject access requests (DSAR), or compliance questions, please contact our designated Data Protection Officer: