How Echobotics handles your data.

Echobotics is a hiring intelligence workspace operated by Caseindex. We help hiring teams manage job openings, screen and rank candidates using AI, and make faster, more informed shortlisting decisions.

For questions about this Privacy Policy or how we handle your data, contact us at support@echobotics.in.

Account information — When you register, we collect your name, organisation name, work email address, mobile number, and country code. This is used to create and manage your workspace account.

Workspace content — Resumes, job descriptions, candidate notes, AI-generated summaries, scores, and any other content you upload or generate within the platform ('Customer Content').

Usage data — Information about how you interact with the Service, including pages visited, features used, API calls made, and session durations.

Payment information — When you purchase credits, payment is processed by Razorpay. We store a payment reference ID and transaction status, but we do not store your full card number, CVV, or other sensitive payment credentials.

Communications — If you contact us by email or through the contact form, we retain those communications to help resolve your enquiry.

Technical data — IP address, browser type, device type, operating system, and authentication tokens used to secure your session.

To provide the Service — Delivering AI-powered resume screening, candidate ranking, JD generation, workspace chat, and pipeline management features.

To manage your account — Verifying your identity, maintaining account security, and processing payments.

To improve the product — Analysing aggregated, anonymised usage patterns to fix bugs, improve features, and optimise performance. We do not use your Customer Content to train AI models.

To communicate with you — Sending transactional emails (account verification, password reset, payment receipts) and material service updates.

To comply with legal obligations — Retaining records as required by applicable law, including tax and accounting regulations.

We process your personal data on the following grounds:

Contract performance — Processing necessary to deliver the Service you have subscribed to.

Legitimate interests — Improving the product, detecting fraud, and maintaining security, balanced against your privacy rights.

Legal obligation — Compliance with applicable laws in India and other jurisdictions where you operate.

Consent — Where we ask for your consent, such as for optional communications. You may withdraw consent at any time.

We do not sell, rent, or trade your personal data. We share data only as follows:

Infrastructure providers — AWS (RDS database, cloud hosting) processes data to store and serve the platform.

AI model providers — Groq processes message content to generate AI responses. Data sent to Groq is governed by Groq's data processing terms.

Payment processor — Razorpay processes payment transactions. Razorpay's privacy policy governs data shared during payment.

Search and caching — OpenSearch and Redis are used internally for candidate search and session caching. These operate within our own infrastructure.

Email delivery — Brevo (formerly Sendinblue) delivers transactional emails such as verification and password reset.

Legal disclosure — We may disclose data if required by law, court order, or to protect the rights and safety of our users or the public.

Echobotics processes candidate personal data (names, contact details, resume content) on your behalf as a data processor. You are the data controller for that candidate data.

You are responsible for ensuring you have a lawful basis to upload and process candidate data — including obtaining any required consent under applicable data protection law such as India's Digital Personal Data Protection Act 2023 (DPDPA) or the EU General Data Protection Regulation (GDPR).

We process candidate data solely to provide the features you request and do not use it for any independent purpose.

We retain your account data and workspace content for as long as your account is active and as required to provide the Service.

If you close your account, we will delete or anonymise your personal data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

Anonymised, aggregated usage statistics may be retained indefinitely for product analytics.

We protect your data using SSL/TLS encryption in transit, encrypted database storage on AWS RDS, and row-level security controls that ensure each workspace can only access its own data.

Access to production systems is restricted to authorised personnel and secured with multi-factor authentication.

Despite these measures, no system is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and protect your account credentials.

Depending on your jurisdiction, you may have the right to access, correct, delete, or port the personal data we hold about you. You may also have the right to object to or restrict certain processing.

To exercise any of these rights, email support@echobotics.in with the subject line 'Privacy Request'. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with a relevant data protection authority.

Your data is stored primarily in AWS infrastructure in the Asia Pacific (Mumbai) region. Some third-party providers (such as Groq and Brevo) may process data in other regions.

Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with applicable data protection law.

Echobotics is intended for business use only and is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact support@echobotics.in and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-product notice at least 14 days before taking effect. The 'Effective date' at the top of this page reflects the date of the latest revision.

For any privacy-related questions, requests, or concerns, reach us at support@echobotics.in. We aim to respond within 2 business days.