Privacy Policy

1. Who we are

Vraify, Inc. ("Vraify," "we," "us," or "our") provides expert human data, evaluations, RL environments, and related infrastructure for frontier AI teams. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit vraify.com, apply to or participate in expert opportunities, contact us, or use our assessment and platform tools.

For privacy questions or requests, contact research@vraify.com. Candidates and assessment participants may also contact experts@vraify.com.

2. Information we collect

We collect information in the following categories, depending on how you interact with us:

• Website and product usage data, such as pages viewed, approximate location derived from IP address, browser and device information, and referral source. We use Google Analytics for aggregated site analytics.
• Contact and enquiry details you submit, such as name, work email, organization, project description, and related correspondence.
• Expert and candidate application data, such as contact details, resume or CV materials, professional background, skills, work authorization or location information you choose to provide, and communications about roles or projects.
• Referral attribution data, including referral codes stored in cookies and local browser storage for up to 90 days so we can attribute and verify referrals.
• Assessment and interview data when you take a skills or voice assessment, which may include responses, transcripts, integrity or session events, and — when enabled and consented to — microphone audio and camera recordings.
• Customer project and platform data processed under contract. Where we integrate with a customer's cloud environment, customer content is handled according to that agreement and our security posture described on the Security page.

3. How we use information

We use personal information to:

• Operate, secure, and improve our websites, products, and services.
• Respond to enquiries and communicate about projects, roles, and support.
• Evaluate applications, administer assessments, and manage expert engagements.
• Attribute referrals, prevent abuse, and measure marketing and recruiting effectiveness.
• Comply with legal obligations, enforce agreements, and protect Vraify, our users, and the public.
• Produce aggregated or de-identified insights that do not reasonably identify you.

4. Assessments, recordings, and retention

If you participate in a Vraify assessment, we keep responses, interview transcripts, and any enabled camera recordings for 30 days after submission or expiry, unless a longer retention period is required for a legal hold, dispute, or compliance obligation. Deleted camera files may remain recoverable within a restricted storage safeguard for up to 7 additional days.

Microphone audio may be processed by speech and language service providers to conduct a voice interview and create captions or structured interview support. When enabled for the assessment, microphone audio may also be included in the camera recording. Integrity events may be logged. Assessment outputs support human review and do not replace an independent hiring or engagement decision.

You will be asked to consent to the disclosed microphone, recording, retention, and review practices before starting an assessment that uses those features.

5. Cookies and similar technologies

We use cookies and similar technologies for essential site functionality, analytics, and referral attribution. Referral cookies are set with a limited lifetime (typically up to 90 days), SameSite=Lax, and Secure flags where supported. You can control cookies through your browser settings; disabling cookies may affect referral attribution and some site features.

Third-party analytics providers may set their own cookies subject to their privacy policies. Our site currently uses Google Analytics.

6. How we share information

We do not sell personal information. We may share information with:

• Service providers and subprocessors that help us host, secure, analyze, communicate, store, or operate our services, under contractual confidentiality and data-protection obligations. Depending on the product surface, this can include cloud hosting and storage (such as Google Cloud / Firebase), website analytics (Google Analytics), model and speech processing used in assessments (such as OpenAI and Azure Speech), and email or messaging providers used for operational communications. A current subprocessor list is available on request.
• Customers or project partners when you apply to or work on a project for them, to the extent needed to evaluate, staff, or deliver that engagement.
• Professional advisers, auditors, or authorities when required by law, legal process, or to protect rights, safety, and security.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

7. Customer and project data

For customer engagements, our default posture is data minimization, encryption in transit and at rest, role-based access controls with audit logs, and contractor zero-retention policies (annotators may view assigned materials to perform work but may not retain them outside approved systems). Where agreed, work can run with customer-cloud integration so customer content remains in the customer's cloud environment. More detail is available on the Security page.

Customer contracts, statements of work, and security due diligence materials may impose additional terms that control over this policy for customer-provided project data.

8. Retention

We retain personal information for as long as needed for the purposes described in this policy, including to provide services, maintain business and employment records, resolve disputes, and meet legal, tax, and accounting requirements. Assessment materials follow the retention windows described above unless a different period is disclosed at collection or required by law.

When information is no longer needed, we delete or de-identify it, subject to backup, archival, and legal-hold constraints. Candidate operational suppression (for example, do-not-contact handling) can remove portal access and active recruiting records without always completing a full erasure of every source application, resume, or related storage object; those fuller deletion requests are handled through a separate retention review.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, audit logging, and employee authentication controls. No method of transmission or storage is completely secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by applicable law. More detail on our security approach is available on the Security page.

10. Your rights and choices

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or information about how your personal information is processed, and to object to certain processing. You may also withdraw consent where processing is based on consent.

To make a request, email research@vraify.com or, for candidate and assessment matters, experts@vraify.com. We may need to verify your identity before fulfilling a request. Some requests may be limited where we must retain information for legal, security, fraud-prevention, or contractual reasons, or where records remain in source applications, backups, audit logs, or storage objects that require a separate controlled retention workflow.

You can opt out of non-essential marketing emails using the unsubscribe link in those messages or by contacting us. Operational messages about applications, assessments, or active engagements may still be sent when necessary.

11. International transfers

Vraify operates internationally and may process information in the United States and other countries where we or our service providers operate. Where required, we use appropriate transfer mechanisms and contractual protections for cross-border transfers.

12. Children's privacy

Our services are directed to adults and professional users. We do not knowingly collect personal information from children under 16 (or the applicable age of digital consent). If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Material changes will be posted on this page and, when appropriate, communicated by other reasonable means. Continued use of our websites or services after an update means you acknowledge the revised policy.

14. Contact

Vraify, Inc.

Privacy enquiries: research@vraify.com

Candidate and assessment privacy requests: experts@vraify.com

Security and diligence: see Security or Contact.