Privacy Policy
Last updated: February 17, 2026
This Privacy Policy explains how Kira AI ("we", "us", or "our"), operating at getkira.com, collects, uses, stores, and protects personal information when you use our AI-powered candidate screening platform ("Service"). We are committed to protecting your privacy and handling your data responsibly.
Information We Collect
Account Information
When you register for an account, we collect your name, email address, company name, job title, and password. If you subscribe to a paid plan, payment information is collected and processed by our merchant of record, Paddle.com — we do not store your credit card details.
Candidate Data
When you use the Service to screen candidates, data may be collected including candidate names, email addresses, video responses, text responses, and AI-generated assessment outputs (summaries, scorecards). You, as our customer, are the data controller for all candidate data. We process this data on your behalf as a data processor.
Usage Data
We automatically collect information about how you interact with the Service, including IP address, browser type, device information, pages visited, features used, and timestamps. This data helps us improve the Service and troubleshoot issues.
Cookies and Tracking
We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process candidate screenings and generate AI-powered assessments
- Process payments through Paddle (our merchant of record)
- Send transactional emails (account confirmations, billing notifications, screening alerts)
- Provide customer support
- Improve and develop new features for the Service
- Monitor and prevent fraud, abuse, and security threats
- Comply with legal obligations
AI Processing
Our Service uses artificial intelligence to analyze candidate video and text responses, generate summaries, produce scorecards, and detect AI-generated answers. AI processing occurs on secure infrastructure. We do not use candidate data to train our AI models without explicit consent from the data controller. AI outputs are generated in real-time and are associated only with the specific screening session.
Data Sharing
We do not sell your personal information. We may share data with:
- Paddle.com — our merchant of record, for payment processing. Paddle acts as the seller of record and has its own privacy policy governing transaction data.
- Infrastructure providers — cloud hosting and storage services necessary to operate the Service, under strict data processing agreements.
- Analytics providers — to help us understand usage patterns and improve the Service (data is aggregated and anonymized where possible).
- Legal authorities — when required by law, court order, or to protect our rights and safety.
Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow for reactivation, after which it is permanently deleted. Candidate screening data is retained according to the retention settings you configure in your account. You may delete candidate data at any time through the Service.
Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and secure infrastructure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Portability — request your data in a portable format
- Restriction — request that we limit processing of your data
- Objection — object to processing of your data for certain purposes
- Withdrawal of consent — withdraw consent where processing is based on consent
To exercise any of these rights, contact us at support@getkira.com. We will respond to requests within 30 days.
Rights for Candidates
If you are a candidate who has been screened through our platform, the organization that invited you to the screening is the data controller. Please contact them directly to exercise your data rights. If you need assistance, you may also contact us and we will help direct your request appropriately.
International Data Transfers
Your data may be processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms, to protect your data in accordance with applicable law.
Children's Privacy
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates the most recent revision.
Contact
If you have questions or concerns about this Privacy Policy or our data practices, contact us at support@getkira.com.