Privacy Policy

Erasolis Ventures Private Limited ("Erasolis Ventures Private Limited", "we", "our", or "us"), operating the Provio platform, is committed to protecting the privacy of candidates, recruiters, and visitors ("you") who use our platform. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

For the purposes of the DPDP Act, Provio is a Data Fiduciary and you are a Data Principal. We process your personal data on the basis of your consent(or another lawful basis permitted by the Act). You may withdraw consent at any time — see "Your Rights" below.

1. Information We Collect

We collect the following categories of personal data:

• Account information: name, email address, phone number, gender, and role (candidate or recruiter). We use passwordless email OTP and social sign-in (Google, LinkedIn, Microsoft) — we do not store passwords.
• Profile information: education, work experience, skills, projects, certifications, resume, portfolio links (GitHub, LinkedIn, LeetCode, Figma, Medium, Behance), and references.
• Verification & proctoring data: responses to skill assessments and, where you take a proctored assessment, live webcam analysis to detect malpractice. Webcam frames are processed in real time and not stored; only violation events (e.g. tab switches) are recorded.
• Device & fraud-prevention data: a device/browser fingerprint, IP address, and user-agent are collected during reference and document verification to detect fraud and forgery.
• Payment information: processed by our payment partner Razorpay. We do not store full card numbers or UPI credentials.
• Usage & analytics data: IP address, browser type, pages visited, and time spent. Product analytics and session replay (PostHog) run only if you opt in.
• Cookies: used for authentication and session management (essential) and, with your consent, analytics.

2. How We Use Your Information

• To create and manage your account on the platform.
• To verify credentials, run skill assessments and proctoring, and compute your profile score.
• To match candidates with recruiters based on skills, role, and preferences.
• To process payments for premium features.
• To send transactional emails such as verification and security alerts.
• To send marketing communications — only if you have opted in, and you can withdraw at any time.
• To detect and prevent fraud, abuse, and violations of our Terms.
• To comply with legal obligations.

3. Consent

We ask for your consent before we process your personal data, in clear language, separately for each purpose. Consent for essential account and verification processing is required to use Provio; consent for marketing emails and for analytics is optional and off by default. You can review and withdraw your optional consents at any time from your account Settings, or by contacting our Grievance Officer. Withdrawing consent does not affect processing carried out before withdrawal.

4. How We Share Your Information & Cross-Border Transfers

We do not sell your personal data. We share it only as described below. Many of our processors are located outside India (primarily the United States and the EU); by using Provio you acknowledge that your data may be transferred to and processed in these countries, which is permitted under the DPDP Act except to territories the Central Government may restrict. We maintain Data Processing Agreements with these processors.

• With recruiters: verified candidate profiles are visible to registered recruiters searching for talent.
• With service providers (Data Processors):Supabase (database, authentication & storage — US/EU), Razorpay (payments — India), Brevo (email — EU), PostHog (analytics — EU, opt-in), and AI providers Anthropic, Google (Gemini), Groq, and Deepgram (verification, insights & speech — US) used to power verification and recommendation features.
• Legal compliance:when required by law, court order, or to protect our rights and users' safety.

Third-party SDKs & trackers: Provio does not use any advertising, ad-tracking, or cross-site tracking SDKs (for example Google Ads, Meta/Facebook Pixel, Firebase, or similar). The only third-party code that runs in your browser is the Razorpay Checkout script (loaded only when you make a payment) and, if you opt in to analytics, PostHog (with all form inputs masked in session replay). All other third-party processing happens on our servers, and SDK data collection is described in this policy.

5. Data Retention

We retain personal data only as long as needed for the purpose it was collected, and enforce retention through automated deletion jobs:

• Authentication & security logs (IP, user-agent): up to 90 days.
• Completed or expired assessment sessions: up to 180 days.
• One-time verification codes: cleared once used or shortly after they expire.
• Profile data: for as long as your account is active. When you delete your account, it is removed across our systems.

A limited set of records we are legally required to keep (e.g. payment and tax records) is retained under that legal obligation and kept isolated from your active profile.

6. Data Security

We use industry-standard security measures including encryption in transit (HTTPS), passwordless and secure authentication, rate limiting, and row-level security on our database. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

7. Your Rights

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct or update your information — most fields are editable directly in your dashboard.
• Erase your account and data — available self-serve under account Settings → Delete my account & data.
• Withdraw consent for marketing or analytics, from Settings.
• Nominate another individual to exercise your rights in the event of death or incapacity (Right to Nominate). You can register a nominee from account Settings → Data & privacy → Register a nominee, or by emailing our Grievance Officer.
• Grieve or raise a complaint with our Grievance Officer (below).

To exercise any of these rights, contact our Grievance Officer at contact@provio.in. We respond within 30 days.

8. Children's Privacy

Provio is intended only for users aged 18 and above. The DPDP Act treats anyone under 18 as a child and requires verifiable parental consent to process their data. We do not knowingly collect personal data from anyone under 18, and we do not perform behavioural tracking or targeted advertising toward children. If you believe a minor has provided us with personal data, please contact our Grievance Officer and we will delete it.

9. Grievance Officer

In accordance with the DPDP Act, you may contact our Grievance Officer with any questions, consent requests, or complaints regarding your personal data:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date, and where required we will ask you to re-consent.