Privacy Policy
Version 1.1 · effective 2026-06-29
This policy explains what Higher Orbit does with your personal data, what we ask your permission for, and how you get it back, corrected or deleted. It is written to meet India's Digital Personal Data Protection Act, 2023 and, for people in the EU/UK, the GDPR.
1. Who is responsible for your data
Higher Orbit, Bengaluru, Karnataka, India is the Data Fiduciary (DPDP) / Controller (GDPR) for the platform.
An employer you apply to — and, where that employer is a recruitment agency, the client company they are hiring for — decides its own hiring process and is a separate controller for what it does with your details. We tell you who they are before your CV reaches them.
2. What we collect
- Identity and contact: name, email, phone, city.
- Professional: CVs, skills, education, experience, salary expectations, preferences.
- Application activity: roles you viewed, liked, applied to, and their outcomes.
- Assessments: video answers you record, the transcript, and an AI-suggested rating (a human recruiter always makes the decision).
- Account and device: sign-in records, IP address and user agent when you give a consent.
- CVs uploaded about you by a company or a recruitment vendor, if you have not created an account yourself.
3. Why we use it, and our lawful basis
- Consent — sharing your CV and profile with employers, recording and AI-scoring assessments, Confidential Search, job alerts, analytics cookies.
- Performance of our agreement with you — running your account and the applications you make.
- Legitimate interests / legitimate uses — security, fraud prevention, keeping the platform working, and defending legal claims.
- Legal obligation — tax, accounting and lawful requests from authorities.
4. The consents we ask you for
These are the exact words, asked separately so you can say no to the optional ones. You can change any of them at any time from Settings → Privacy & Consents.
Terms of Use and Privacy Policyrequired · v1.0
I agree to Higher Orbit's Terms of Use and Privacy Policy, and to Higher Orbit creating and managing my candidate profile.
Sharing my CV and profile with employersrequired · v1.0
I agree that my CV, contact details and profile may be shared with employers I apply to or get selected by the system automatically & presented to the prospective employers or by the employer's internal recruitment team etc, and — where that employer is a recruitment agency — with the client company they are hiring for.
Manual and/or Video Assessment and recordingoptional · v1.1
I agree to record video answers for the role or roles I am being interviewed for, and to Higher Orbit transcribing and scoring them with AI to help the recruiter shortlist for the job. My recording is kept for 180 days and shared only with this employer. A human makes the hiring decision. I also agree, in cases where video interviews are not possible, to allow a human from the employer to record my answers in text form and entered into the system manually.
Referrals by friends and colleaguesinformation only · v1.0
I understand that some of my friends or colleagues (past or present) may refer me to a particular job without my prior authorization. I also understand that I have the right to refuse such referrals.
Confidential Searchoptional · v1.0
Show my profile to the companies I name here, with my contact details hidden until I accept their interest. I can block specific companies and turn this off any time.
Job alerts and updatesoptional · v1.0
Email me matching jobs, application updates and occasional product news. I can unsubscribe from any email.
How long we keep your datainformation only · v1.0
Your profile stays active while you use Higher Orbit. Ask us to delete it any time and we remove your profile, CVs and recordings within 30 days, except records we must keep by law.
Analytics cookiesoptional · v1.0
Allow Higher Orbit to use analytics cookies to see which pages help job seekers. Cookies needed to sign in and keep the site working stay on either way.
5. Who we share it with
We never sell your personal data. We share it with:
| Recipient | Where they process it |
|---|---|
| Employers and recruitment agencies you are put in front of | India / where that employer operates |
| MongoDB Atlas — application database | India / EU region |
| Object storage — CVs, agreements, recordings | India / EU region |
| Resend — transactional and alert email | EU / United States |
| OpenAI (Whisper + GPT) — transcription and draft assessment scoring | United States |
Where data leaves India or the EEA we rely on the recipient's contractual commitments (Standard Contractual Clauses where GDPR applies) and share only what the service needs.
6. How long we keep it
| What | How long |
|---|---|
| Your profile and CVs | While your account is open; deleted within 30 days of a deletion request |
| Video assessment recordings | 180 days from submission, then destroyed automatically |
| Transcripts and recruiter ratings | Kept with the application record, as the hiring decision trail |
| Applications and messages | 3 years from the last activity on that application |
| Consent records | Kept for as long as we must be able to prove what you agreed to |
| Billing and tax records | As required by Indian tax law (currently 8 years) |
7. Your rights, and the button that does it
- See and take a copy — Download my data gives you a zip of everything we hold, including your CV files.
- Correct — edit your profile and CVs any time; ask us if something else is wrong.
- Delete — Delete my account removes your profile, CVs and recordings after a 30-day window you can cancel in.
- Withdraw consent — per consent, with the date recorded.
- Nominate someone (DPDP §14) — name a person who may exercise these rights if you cannot.
- Object and restrict (GDPR Art. 18/21) — email the data-protection contact below.
- No decision made only by a machine — an AI rating is a suggestion; a person decides.
All of these live on one screen: Settings → Privacy & Consents.
8. Cookies
Cookies that sign you in and keep the site working are always on. Analytics cookies stay off unless you allow them in the banner, and you can change your mind from the same Privacy & Consents screen.
9. Children
Higher Orbit is for people aged 18 and over. We do not knowingly process a child's data; tell us if you believe we have and we will delete it.
10. Security
Passwords are hashed, files are held in access-controlled object storage, recordings are served through short-lived signed links, and every consent is stored with its version and timestamp. No system is perfect — if something goes wrong that affects you, we will tell you and the Data Protection Board as the law requires.
11. Changes
If we change a consent's wording, the old agreement stops counting and we ask you again — you will see the new words before anything continues.
12. Questions and complaints
Not satisfied? In India you may complain to the Data Protection Board of India. In the EU/UK you may complain to your local supervisory authority.
See also our Terms & Conditions.