Privacy Policy

1. Who we are

Oximus Pro and oximuspro.com are provided by HackGeniX Tech Private Limited (CIN U62013TZ2025PTC035022), 67/1, Thiyagi Nadesan Street No. 3, Ammapettai, Salem – 636003, Tamil Nadu, India ("HackGeniX", "we", "us"). This policy explains what personal data we handle, why, how long we keep it, and the rights you have. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 with the rules made under it.

2. Our two roles

Data fiduciary. For visitors to our website, people who contact us or book a demo, and the business contacts of companies that license Oximus Pro, HackGeniX decides why and how data is used and is the data fiduciary.

Data processor. For Candidates, and for the staff a company adds to Oximus Pro, the hiring company is the data fiduciary. It decides who is invited, what is monitored, how long data is kept, and every decision about a Candidate. HackGeniX processes that data only on the company's instructions, under a Data Processing Agreement. If you are a Candidate, please contact the company that invited you first; we will help it respond.

3. What we collect from visitors and customers

• Enquiries and demo requests — name, work email, phone, company, role, team size, hiring needs, your message, and how you found us (for example a campaign tag in the link).
• Customer accounts and billing — names and work emails of authorised users, billing address, GSTIN and payment records. Card and UPI details are handled by the payment gateway; we do not store them.
• Website and security logs — IP address, browser, device type, pages requested and time, kept to protect the website and the service.

4. What is collected during an assessment or interview

On behalf of the hiring company, depending on the checks it switches on:

• Profile — name, email, phone, experience and current employer, as given to the hiring company.
• Notice and consent — the notice the Candidate agreed to, with the time and network address.
• Identity — a photograph of the Candidate's face and of an identity document, taken before each round.
• Webcam pictures — still pictures at an interval the company sets (every 15 seconds by default), and pictures around each signal.
• Phone camera — when the Candidate pairs their phone, a side-view picture at intervals and a live view for the interviewers.
• Screen — where the round requires it, the entire screen is shared; pictures of it are kept at intervals and when a signal is raised, and it is shown live to interviewers in live rounds.
• Live video and audio — seen and heard by the interviewers during the round. Oximus Pro does not record video or audio.
• Eye movement — analysed on the Candidate's own device. Only the resulting signal and its time are sent to us; no eye-tracking video is sent.
• Answer timing — after a question, the Candidate's device measures the silence before speaking and how steadily they answer. Only timings are sent; no audio is sent or stored.
• Typing — whether text in an answer or code pad was typed or appeared all at once.
• Sound in silent tests — on the Candidate's device, whether speech or sustained noise is heard during an online test. Only the signal and its time are sent; no audio is sent or stored.
• People and devices in view — on the Candidate's device, the camera picture is checked for a second person, a mobile phone or another screen. Only the signal, with a still picture, is sent.
• Leaving the round's window — every round shares the Candidate's entire screen. When the Candidate switches away from the round, still pictures of the screen are kept, and the text in them is read automatically on our own servers (it is not sent to any AI provider) to check for AI tools, web searches, answer sites, documents, messaging apps or the round's own question.
• Device information — operating system, browser, screen size, number of displays, signs of a virtual machine or virtual camera, camera and microphone names, and IP address.
• Answers and evaluation — test answers and scores, code, whiteboard drawings, interviewers' ratings, notes and scorecards.

Face images are used so that people at the hiring company can confirm the same person took each round. Oximus Pro does not perform automated face recognition, face matching or emotion analysis.

We do not ask for, and Candidates should not provide, information about health, religion, caste, political views, sexual orientation or other sensitive matters.

5. Why we use personal data

• To run assessments and interviews on the hiring company's instructions.
• To protect the integrity of the hiring process by recording signals that a Candidate may be receiving outside help, for the hiring company to review.
• To prepare integrity reports and final-round checks for the hiring company.
• To reply to enquiries, prepare quotations, provide demos and manage customer relationships.
• To provide support, keep the service secure, prevent fraud and abuse, and fix faults.
• To meet legal, tax and regulatory obligations and to establish or defend legal claims.

We do not sell personal data, use it for advertising or profiling, or use Candidates' answers or images to train AI models.

6. Signals and decisions

A signal is a record for the hiring company to review. It is never, on its own, a finding of misconduct, and Oximus Pro does not decide whether a Candidate is hired. A company may choose to have an online test end when signals pass a limit it sets; live interviews are never ended automatically. If you believe a decision about you was unfair, raise it with the hiring company, which can review the evidence.

7. Who we share data with

• The hiring company — only staff whose role gives them access.
• The hiring company's client, where a recruitment consultancy shares reports for the job the Candidate applied for.
• Service providers who host data, store files, send email, relay video, run code or, where a company switches it on, draft final-round questions (job and question text only — no Candidate personal data). They act on our instructions and are bound by confidentiality and security obligations.
• Payment gateways, to process payments.
• Authorities, where the law, a court order or a lawful government request requires it, or to protect the rights, safety or property of Candidates, customers, the public or HackGeniX.
• A successor, if our business or assets are transferred, subject to this policy.

8. Where data is stored

Oximus Pro production data and monitoring captures are stored on cloud servers located in India. Some service providers, such as email delivery, may process limited data outside India; we only transfer data to countries not restricted by the Government of India under the DPDP Act and with appropriate safeguards.

9. Security

We use reasonable security safeguards appropriate to the data, including encryption in transit, private storage of pictures shown to staff through links that expire within minutes, separation of each company's data, role-based access, logging of administrative actions, and regular backups. No system is completely secure. If a personal data breach occurs, we will inform affected hiring companies without undue delay, and notify the Data Protection Board of India, affected individuals and CERT-In as the law requires.

10. How long we keep data

• Monitoring captures (pictures and signals) — for the period the hiring company sets, 180 days by default, then deleted automatically.
• Answers, scores and scorecards — while the hiring company's account is active or as it instructs, and deleted within thirty days after the account ends.
• Enquiries and demo requests — up to two years from our last contact, unless they become a customer relationship.
• Billing and tax records — as long as tax and company law require, currently up to eight years.
• Security logs — up to 180 days, longer where needed to investigate an incident.

11. Cookies and similar technologies

See our Cookie Policy. In short: the website uses no advertising or tracking cookies, and Oximus Pro uses a strictly necessary cookie to keep you signed in.

12. Your rights

Subject to the DPDP Act, you may ask to access a summary of your personal data and how it is processed, correct, complete or update it, erase it where it is no longer needed or consent is withdrawn, withdraw consent (which does not affect processing already done), nominate a person to exercise your rights if you die or become incapable, and seek redress of grievances.

Candidates should write first to the hiring company that invited them, since it decides how their data is used; we will assist it. Everyone else may write to privacy@oximuspro.com. We may need to verify your identity before acting on a request.

13. Grievance Officer

Grievance Officer: Grievance Officer name, HackGeniX Tech Private Limited, 67/1, Thiyagi Nadesan Street No. 3, Ammapettai, Salem – 636003, Tamil Nadu, India. Email privacy@oximuspro.com · Phone phone number.

We acknowledge grievances within two working days and resolve them within one month. If you are not satisfied, you may complain to the Data Protection Board of India.

14. Children

The website and Oximus Pro are not intended for anyone under 18. Hiring companies must not invite a person under 18 unless verifiable consent of a parent or lawful guardian has been obtained as the law requires.

15. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change materially affects how personal data is used, we will notify customer administrators by email before it takes effect.