Privacy Policy

1. Who is responsible

ARK Tech & Logistics (“Testiy”, “we”, “us”) operates Testiy Recruit at https://recruit.testiy.com. This draft explains how we process personal data when you use the Recruit product: employer and agency accounts, jobs, candidate browsing, messages, offers, hires, and placement-fee invoices.

Under the GDPR we act as controller for account, billing, and desk-operation data. When an employer or agency uses Recruit to assess candidates, that organisation is typically an independent controller of the candidate data it reviews; Testiy provides the platform and, where we process candidate data on the organisation’s documented instructions, we act as processor. The draft Data Processing Agreement in Settings is the intended processor terms — it also needs a legal check before launch.

Controller contact: ARK Tech & Logistics 106 C, Karuvanchery Parakkad, Thrissur, Kerala 680620 India Email: support@testiy.com Register number: [Register number] VAT ID: [VAT ID]

2. Who this covers

This draft is written for people and organisations using Testiy Recruit:

• European employers and European recruitment agencies that post jobs and hire through the desk
• Indian sending agencies that link candidates, recommend them for live jobs, and read employer–candidate chats
• Candidates represented by those agencies, whose summaries, documents, and chat messages appear on the desk
• People named as billing or notification contacts on a Recruit account

3. What we collect

We collect only what the product needs to run the hiring desk. In the current Recruit code that includes:

• Account and login: name, email, password hash (held by our auth provider), optional Google sign-in identifiers, and optional two-factor (TOTP) credentials
• Organisation profile: legal name, country, city, registered address, registration number, VAT/tax ID, website, contact person, and KYC documents uploaded for review
• Jobs: title, location, pay, contract length, start date, requirements, and review status
• Candidates: a Testiy-made summary (first name, profession, experience, skills, languages, qualifications, target countries, availability, age in years when known). Surnames, contact details, and gender are not shown to employers on the public summary
• Documents: passports, CVs, certificates, and similar files uploaded by the candidate or agency. Employers see a file only after they request it in chat and the candidate shares it. Views are logged
• Messages: three-way hiring chats between employer, candidate, and the candidate’s linked Indian agency. Contact details in chat are masked until the candidate signs the employer’s offer
• Offers, hires, and invoices: offer terms, signed letters, hire stages, placement-fee amounts (fixed fee or a number of months of gross monthly salary), invoice PDFs, and arrival confirmation
• Settings: language (English or German), time zone, email-notification choices, extra notification addresses, billing contact, and account-deletion requests
• Technical data: session cookies needed to stay signed in, security logs, and approximate location derived from IP only as needed for security

4. Why we process it

We use this data to:

• Create and secure Recruit accounts, including password reset and optional two-factor login
• Review organisations before they can post jobs or represent candidates
• Publish jobs, match agencies and candidates, and keep hiring conversations on Testiy
• Issue placement-fee invoices when a work contract is signed, and keep tax records
• Send transactional email you asked for (for example job live, new message, invoice issued)
• Answer support requests and handle account-deletion or data-export requests
• Detect abuse, fraud, and off-platform contact that the product is designed to prevent

5. Legal bases

Where GDPR applies, we rely on: performance of a contract (providing the desk you signed up for); legitimate interests (security, product integrity, limited service email); legal obligation (tax invoices, responding to lawful requests); and consent where we ask for it (optional Google sign-in, optional marketing — Recruit does not send marketing by default).

Where India’s Digital Personal Data Protection Act, 2023 applies to Indian agencies or candidates, we process personal data for the uses described at signup and in this draft, and we honour withdrawal of consent where processing was based on consent.

6. Who can see candidate data

Employers and EU recruitment agencies see a limited candidate summary until a chat starts. Documents stay locked until the employer requests a file in chat and the candidate shares it. The Indian agency linked to the candidate can read that chat and the shared files, so it can support the placement. Testiy staff can access data as needed to review organisations, jobs, and abuse reports.

Phone numbers and emails stay masked for everyone until the candidate signs the offer on Testiy. Do not move hiring conversations to WhatsApp, email, or another app.

7. Processors we use in this product

These are the processors visible in the Recruit codebase. This list needs a legal check and may be incomplete:

• Supabase — authentication, database, and file storage for accounts, jobs, chats, documents, and invoices
• Resend — transactional email (organisation review, job live, new messages, invoices)
• Hosting and content delivery for recruit.testiy.com (the application is served as a web app)
• Google — only if you choose “Continue with Google” to sign in; Google then acts as your identity provider

8. International transfers

Review specialists who check organisations and candidate files work from Germany. Database, auth, and file storage are provided by subprocessors that may process data in India and other countries. Where GDPR transfer rules apply, we intend to use appropriate safeguards (for example standard contractual clauses) — the final wording needs a legal check.

9. Retention

Account, job, chat, hire, and invoice records are kept while the account is active and as long as we must keep them for tax, dispute, or legal holds. KYC documents stay available to Testiy reviewers for the organisation review. Candidate documents shared in chat remain available to the chat participants for the hiring process. After a valid deletion request is completed, we delete or anonymise personal data we no longer need, except records we must keep (for example issued invoices).

You can download a copy of your account data and submit a deletion request from Settings. Deletion is not immediate: it creates a request for Testiy staff to handle.

10. Your rights

Subject to the law that applies to you, you may request access, correction, erasure, restriction, objection, or portability, and you may withdraw consent. Use Settings (data export and deletion request) or email the address above. You may also complain to a supervisory authority in your EU Member State or, for Indian data principals, to the Data Protection Board of India.

11. Children

Recruit is for organisations hiring adult workers. You must be 18 or over to create an account. We do not knowingly collect data from children.

12. Changes

This draft was last updated on 29 October 2026. We will change the date when a legally reviewed version is published. Material changes will be notified in the product or by email where required.