Obsyra Privacy Policy

Obsyra Privacy Policy

This policy explains how we handle personal information collected from candidates when administering an exam with the exam-monitoring and integrity feature "Obsyra" (the "Feature") active. A candidate is deemed to have agreed to this policy upon starting a monitored exam.

1. Information We Collect

• Records of interactions during the exam (leaving the tab or full screen, copy/paste, right-click, use of developer tools or certain browser extensions, cursor/keyboard patterns, etc.). We do not store raw coordinates; we record aggregated values and events.
• Technical information about the exam environment (traces of automation tools or headless browsers, browser/device characteristics, etc.), used to prevent misconduct.
• For exams where webcam use is required, still facial images captured for identity verification and integrity. These may constitute biometric personal data.

2. Purposes

• Verifying that you are the registered candidate and preventing/detecting impersonation and misconduct;
• Supporting human post-hoc review to confirm exam fairness; and
• Improving the quality of exam operations through statistical analysis.

3. Risk Score and Human Review

The Feature does not judge on a single signal; it combines multiple weak signals into a weighted risk score. Where the score exceeds a threshold, or where camera images exist, the session becomes subject to review by an authorized reviewer. By default, the Feature does not automatically disqualify a candidate. It does not perform facial recognition matching against third parties.

4. Handling of Webcam Images (Biometric Data)

Where webcam use is required, facial images are captured at intervals during the exam and stored in encrypted storage. Authorized recruiters may view them for integrity review.

• Capture occurs only for camera-required exams and only after you explicitly consent at the start.
• If you do not consent, or your device has no camera, you may be unable to take that exam.
• Stored images are automatically deleted after a predefined retention period (90 days by default; it varies by the Administering Company's settings).
• We do not perform facial recognition matching, nor use the images for any purpose other than identity verification and integrity.

5. Disclosure to Third Parties

We do not provide the collected information to third parties without prior consent, except as required by law. The company administering the exam handles this information within the scope of the selection process.

6. Storage and Security

Information is stored under restricted access and appropriate safeguards. Images containing biometric data are retained and accessed only to the minimum extent necessary.

7. Retention

Interaction records are retained for the period necessary for selection and legal requirements; webcam images are retained within the retention period above and deleted thereafter.

8. Your Rights

You may request disclosure, correction, or suspension of use of your personal information. Please contact us using the details below.

9. Contact

For questions about this policy, please contact the recruiting team of the company you applied to, or our support desk.