Privacy policy

Last updated: 8 November 2026

Kira-AI is a voice-interview platform: companies create interviews, candidates talk with Kira-AI, and hiring teams review the results. This policy explains what personal data that involves, why we process it, and the choices you have. If you’re a candidate about to interview, the short version is on the candidate consent page.

Who is responsible for your data

It depends on which side of the interview you’re on:

Candidates: the company you’re applying to decides why and how your interview data is used — it is the data controller. Kira-AI processes that data on the company’s behalf, under a data processing addendum.
Workspace members: Kira-AI is the controller for your account data (name, email, account activity).

What we collect

From candidates: your email address. It is either given to us by the hiring company when they invite you, or a verification code was requested for this address. We also collect the name you enter before the interview, the audio recording of the conversation, and its written transcript. Where the hiring company has enabled scoring, an AI-drafted summary and suggested scores are also built from your answers. Optionally, the star rating and comment you leave afterwards.
From recruiters: account details (name, email, password or Google login), company settings, and the content you create — vacancies, questions, scoring criteria, notes.
Technical basics: the minimum needed to run and secure the service — IP address, browser type, and security and audit logs.
Optional measurement: it starts only after consent in the EEA, UK, Switzerland, Brazil, India, China, South Korea, Quebec and California. Elsewhere it is on by default, based on our legitimate interest in measuring which ads lead to signups and payments. You can turn it off at any time through “Cookie settings” by choosing “Reject optional”. This stops future collection and Google Ads exports. Outside opt-in regions, a rejection lasts 6 months; after that, if the browser no longer holds the rejection, measurement is on by default again until you reject it again. A browser Global Privacy Control signal gives you the opt-in experience. We use approximate location from our hosting provider’s IP lookup only to choose which experience applies, and do not store it. Google Analytics measures route-template visits inside the recruiter app, together with a constant app title, referrer origin, and standard browser, device and approximate-location data. On the public website only, the same choice also allows PostHog visit recordings; PostHog does not run in the app. We may also retain a Google click identifier and source tags for up to 90 days and, for the original workspace creator’s measurement context, send the workspace signup and first-payment outcome to Google Ads. Measurement does not run on candidate application, interview, public demo, login, onboarding or legal pages. We send no candidate or interview content, email address or phone number for ad measurement.

How interviews are processed

Kira-AI conducts a voice conversation, records it, and transcribes it. Where the hiring team has defined scoring criteria, Kira-AI also drafts a summary with suggested scores against them. Three commitments shape this processing:

People decide. AI output is a suggestion, clearly labeled as such. Kira-AI never rejects a candidate, and hiring decisions are always made by a person at the hiring company.
Content only. Scoring is based on what was said — never on emotion, tone of voice, accent, personality inference, or anything similar.
Audio only. There is no video recording and no camera access, ever.

What we use data for

Running interviews and delivering results to the hiring team
Operating, securing, and supporting the platform
Improving Kira-AI and measuring ad outcomes under the choice described above
Billing companies for their subscription
Legal obligations, where they genuinely apply

We do not sell personal data or use it to personalise ads. Candidate interview data is never used for anything beyond the hiring process it belongs to.

After deletion, we retain pseudonymous deletion records for 24 months and transactional email delivery records for 30 days. Under our providers’ standard terms, content processed by Gemini may remain in Google’s abuse-monitoring records for 55 days; Resend retains email and logs for 30 days and backups for 7 days. These retained copies are distinct from Kira-AI’s active database and file storage. Lawful billing and legal retention also applies.

How long we keep it

Interview data is kept until it is deleted — there is no silent expiry. Candidate deletion is handled through Kira-AI support on the hiring company’s instruction, which removes the recording, transcript, scores, and notes together. When an owner deletes their account in Settings, their workspace is deleted too. A member deleting their personal account does not delete the company workspace. Other members keep their personal accounts when a workspace closes. Ending or cancelling a subscription is not the same thing and deletes nothing — the workspace simply stops being able to run new interviews, and its past data stays available to the company until it asks us to delete it. Account and billing records are kept only as long as the law requires.

Who can see it

The hiring team at the company you applied to: everyone that company has added to its Kira-AI workspace can see interview data. Access is workspace-wide — there are no per-vacancy shares or read-only roles.
Service providers that host and power the platform (cloud infrastructure, speech and language model providers), bound by data processing agreements and used only to run the service
Our support chat provider (Crisp, France, hosted in the EU), which receives what you write to us and — for logged-in workspace members who open the chat — your name, email address and workspace name. The chat uses cookies when you open it to keep your conversation available. Kira-AI never sends it interview recordings, transcripts or scorecards; please do not paste candidate details into a support conversation
Google, when optional measurement applies, which receives the limited analytics and ad-outcome data described above. We do not load a Google Ads browser tag or enable remarketing, ad personalisation or Google Signals

Quality assurance and support access

A small number of authorized Kira-AI staff can access interview recordings, transcripts, scorecards, and candidate names and email addresses. They may do so for exactly two reasons: to resolve a support problem, or to check the quality and accuracy of Kira-AI’s interviews and scoring — the ongoing monitoring that EU rules for AI hiring tools require us to perform. Each individual access is logged with who accessed what and when; these access records are kept for 24 months. This access is never used for marketing and nothing is exported in bulk. Your rights (access, copies, deletion) are unaffected and work as described below.

Emails we send candidates

Kira-AI emails candidates only for the interview itself, and only on the hiring company’s instruction: an invitation when a company invites you, a verification code when you apply yourself, and the personal link that lets you return to an interview you started. That’s all — no marketing, no newsletters, and your address is never shared with anyone else or used for another company’s vacancy. The one exception is the public demo on our website, described next.

Verifying your email confirms that the address is yours. It does not confirm who is speaking during the interview, and Kira-AI does not claim to verify a candidate’s identity.

The public demo

Our website offers a short demo interview anyone can take. It isn’t part of any company’s hiring, so for demo data Kira-AI is the data controller. We keep the email address you verify and whether you ticked the product-updates box when requesting your code. If you ticked it, we may email you product updates from Kira-AI — every such email includes an unsubscribe link, and unsubscribing takes one click. If you didn’t, we won’t. The demo conversation is recorded and transcribed like a real interview, but it is never scored and never shared with any hiring company. To have your demo data deleted, email support@getkira.com.

Your rights

Under the GDPR and similar laws you can ask for access to your data, a copy of it, correction, deletion, or restriction of its use. These requests are handled manually: contact the company you applied to first (they control the data), or email support@getkira.com and we’ll route the request and help put together what you’re owed within the legal deadline. You can also complain to your local data protection authority.

International transfers

Where data moves outside the EU/EEA — for example to a cloud or model provider — we rely on standard contractual clauses and equivalent safeguards, as set out in the data processing addendum.

Security

Data is encrypted in transit and at rest, access is workspace-based and logged, and interview links use unguessable tokens. Archiving a vacancy revokes links that have not started an interview; an interview already running can finish. No internet service can promise perfection; we can promise that a breach affecting your data would be reported to the people and authorities concerned without undue delay.

Changes and contact

If this policy changes in a way that matters, we’ll say so here with a new date at the top. Questions, requests, complaints: support@getkira.com.