Kira-AILegal

Privacy policy

Last updated: 29 July 2026

Kira-AI is a voice-interview platform: companies create interviews, candidates talk with Kira, and hiring teams review the results. This policy explains what personal data that involves, why we process it, and the choices you have. If you’re a candidate about to interview, the short version is on the candidate consent page.

Who is responsible for your data

It depends on which side of the interview you’re on:

  • Candidates: the company you’re applying to decides why and how your interview data is used — it is the data controller. Kira-AI processes that data on the company’s behalf, under a data processing addendum.
  • Workspace members: Kira-AI is the controller for your account data (name, email, account activity).

What we collect

  • From candidates: your email address. It is either given to us by the hiring company when they invite you, or a verification code was requested for this address. We also collect the name you enter before the interview, the audio recording of the conversation, and its written transcript. Where the hiring company has enabled scoring, an AI-drafted summary and suggested scores are also built from your answers. Optionally, the star rating and comment you leave afterwards.
  • From recruiters: account details (name, email, password or Google sign-in), company settings, and the content you create — vacancies, questions, scoring criteria, notes.
  • Technical basics: the minimum needed to run and secure the service — IP address, browser type, and security and audit logs. We don’t run advertising trackers.

How interviews are processed

Kira conducts a voice conversation, records it, and transcribes it. Where the hiring team has defined scoring criteria, Kira also drafts a summary with suggested scores against them. Three commitments shape this processing:

  • People decide. AI output is a suggestion, clearly labeled as such. Kira never rejects a candidate, and hiring decisions are always made by a person at the hiring company.
  • Content only. Scoring is based on what was said — never on emotion, tone of voice, accent, personality inference, or anything similar.
  • Audio only. There is no video recording and no camera access, ever.

What we use data for

  • Running interviews and delivering results to the hiring team
  • Operating, securing, and supporting the platform
  • Billing companies for their subscription
  • Legal obligations, where they genuinely apply

We do not sell personal data, we don’t use it for advertising, and candidate interview data is never used for anything beyond the hiring process it belongs to.

How long we keep it

Interview data is kept until it is deleted — there is no silent expiry. Candidate deletion is handled through Kira-AI support on the hiring company’s instruction, which removes the recording, transcript, scores, and notes together. When a company asks us to close its account, its data is deleted with it. Ending or cancelling a subscription is not the same thing and deletes nothing — the workspace simply stops being able to run new interviews, and its past data stays available to the company until it asks us to delete it. Account and billing records are kept only as long as the law requires.

Who can see it

  • The hiring team at the company you applied to: everyone that company has added to its Kira-AI workspace can see interview data. Access is workspace-wide — there are no per-vacancy shares or read-only roles.
  • Service providers that host and power the platform (cloud infrastructure, speech and language model providers), bound by data processing agreements and used only to run the service

Quality assurance and support access

A small number of authorized Kira-AI staff can access interview recordings, transcripts, scorecards, and candidate names and email addresses. They may do so for exactly two reasons: to resolve a support problem, or to check the quality and accuracy of Kira’s interviews and scoring — the ongoing monitoring that EU rules for AI hiring tools require us to perform. Each individual access is logged with who accessed what and when; these access records are kept for 24 months. This access is never used for marketing and nothing is exported in bulk. Your rights (access, copies, deletion) are unaffected and work as described below.

Emails we send candidates

Kira emails candidates only for the interview itself, and only on the hiring company’s instruction: an invitation when a company invites you, a verification code when you apply yourself, and the personal link that lets you return to an interview you started. That’s all — no marketing, no newsletters, and your address is never shared with anyone else or used for another company’s vacancy. The one exception is the public demo on our website, described next.

Verifying your email confirms that the address is yours. It does not confirm who is speaking during the interview, and Kira does not claim to verify a candidate’s identity.

The public demo

Our website offers a short demo interview anyone can take. It isn’t part of any company’s hiring, so for demo data Kira-AI is the data controller. We keep the email address you verify and whether you ticked the product-updates box when requesting your code. If you ticked it, we may email you product updates from Kira-AI — every such email includes an unsubscribe link, and unsubscribing takes one click. If you didn’t, we won’t. The demo conversation is recorded and transcribed like a real interview, but it is never scored and never shared with any hiring company. To have your demo data deleted, email support@getkira.com.

Your rights

Under the GDPR and similar laws you can ask for access to your data, a copy of it, correction, deletion, or restriction of its use. These requests are handled manually: contact the company you applied to first (they control the data), or email support@getkira.com and we’ll route the request and help put together what you’re owed within the legal deadline. You can also complain to your local data protection authority.

International transfers

Where data moves outside the EU/EEA — for example to a cloud or model provider — we rely on standard contractual clauses and equivalent safeguards, as set out in the data processing addendum.

Security

Data is encrypted in transit and at rest, access is workspace-based and logged, and interview links use unguessable tokens. Archiving a vacancy revokes links that have not started an interview; an interview already running can finish. No internet service can promise perfection; we can promise that a breach affecting your data would be reported to the people and authorities concerned without undue delay.

Changes and contact

If this policy changes in a way that matters, we’ll say so here with a new date at the top. Questions, requests, complaints: support@getkira.com.