Privacy Policy
Read the SuperDriven AI Privacy Policy — how we collect, use, and protect your information when you use our AI recruitment platform, and your privacy rights.
Last updated:
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Services of SuperDriven AI and tells You about Your privacy rights and how the law protects You.
1. Interpretation and Definitions
1.1 Interpretation
The following words have been defined for the purpose of this Policy and those words as the definitions provides shall have the same meaning regardless of whether they appear in singular or in plural.
1.2 Definitions
Company: Refers to SuperDriven AI.
Device: Includes any device that can access the Service such as a computer, cell phone, or digital tablets.
Personal Data: Any data about an individual who is identifiable by or in relation to such data.
Service: Refers to visiting our website, engaging with us in related ways, or responding to our advertisements.
2. Personal Data Collection
2.1 What Information We Collect
We collect personal data you voluntarily provide when you show interest in learning more about our services, participate in activities on our platform, or otherwise attempt to contact the company.
Personal Data You Provide:
- First Name and Last Name
- Email Address
- Phone Number
- Location details (address, city, country)
- Personal preferences, requirements, or comments
2.3 Information Collected Automatically
Log and Usage Data
IP address, device details, browser type, activity timestamps, pages viewed, searches performed, and feature usage.
Device Data
Device information, IP address, browser type, hardware model, operating system, and system configuration.
2.4 How We Use Your Personal Data
- ✓Deliver and facilitate Services
- ✓Respond to user inquiries
- ✓Send administrative information
- ✓Enable user communications
- ✓Request feedback
- ✓Marketing communications
- ✓Targeted advertising
- ✓Protect our Services
- ✓Identify usage trends
- ✓Measure campaign effectiveness
5. Data Retention
We will only keep your Personal Information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law.
When we have no ongoing legitimate business need to process your Personal Data, we will either delete or anonymize such information.
6. Children's Privacy
We do not intentionally collect data from or target children under the age of 18. If we discover that we have collected personal information from users under 18, we will deactivate the account and take reasonable steps to promptly remove such data from our records.
7. Your Privacy Rights
Right to Delete
You can ask for the deletion of your personal information, subject to certain exceptions provided by law.
Right to Know
You have the right to know what personal information we collect, use, and disclose.
Withdraw Consent
You can withdraw your consent to our processing of your personal information at any time.
Opt-out of Marketing
You can unsubscribe from our marketing and promotional communications at any time through our unsubscribe page.
Non-Discrimination
We will not discriminate against you if you exercise your privacy rights.
8. Data Protection and Security Mechanisms
8.1 Security Safeguards
SuperDriven AI implements comprehensive technical and organisational safeguards to protect sensitive user data, OAuth credentials, and Google Workspace information against unauthorised access, disclosure, alteration, and destruction.
Encryption in Transit
All data transfers, API calls, and OAuth token exchanges are enforced exclusively over HTTPS using TLS 1.2 / TLS 1.3.
Encryption at Rest
All persistent database records, sensitive files, and OAuth access and refresh tokens are encrypted at rest using AES-256 standards.
Access Control & Token Isolation
OAuth credentials and sensitive records are strictly isolated under Role-Based Access Control (RBAC) and least-privilege policies.
Token Revocation & Data Purge
When you disconnect your Google account or delete your account, OAuth tokens are immediately revoked with Google and stored credentials are purged from our systems.
8.2 Managing Google Permissions
You can review, manage, or revoke SuperDriven AI's access permissions at any time directly through your Google Account Security Permissions page.
9. Google Workspace API Data and Limited Use Disclosure
9.1 Limited Use Compliance Statement
SuperDriven AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9.2 What Google User Data We Access
Google Calendar
Scope: calendar.events
We read and write calendar events to synchronise interview schedules between recruiters and candidates. Calendar data is used exclusively for scheduling and is never passed to AI workflows.
Google Drive
Scope: drive.file (https://www.googleapis.com/auth/drive.file)
We access only the specific resume documents explicitly selected by the user through the interactive Google Picker file selector. SuperDriven AI does not have access to view, browse, or read any other files or folders in your Google Drive. Selected files are imported solely to parse candidate details and evaluate qualifications against the job description.
9.3 How Google Data is Used in AI Workflows
- ✓Synchronising interview events with Google Calendar
- ✓Importing recruiter-selected resumes from Google Drive
- ✓Screening candidate resumes via commercial AI APIs
- ✓Matching candidate qualifications against job descriptions
Commercial AI API Processing
Resume content imported via Google Drive is processed through commercial AI APIs governed by enterprise data protection terms. Customer data submitted to these APIs is processed solely in real time for candidate screening and is not retained or used to train provider models.
9.4 Prohibited Data Uses
- ✕We do NOT use, transfer, or sell Google user data to train, improve, or fine-tune foundational or generalised AI/ML models.
- ✕We do NOT transfer Google user data to any third-party service that uses it for model training.
- ✕We do NOT use Google user data for advertising, ad targeting, or marketing profiling.
- ✕We do NOT sell Google user data to third parties under any circumstances.
- ✕We do NOT use Google user data for any purpose beyond user-requested features.
10. India Digital Personal Data Protection (DPDP Act 2023) Compliance
If you are based in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) applies to how we handle your information. SuperDriven AI acts as a Data Fiduciary under this law, which means we are responsible for processing your personal data fairly, transparently, and only for the purposes we have told you about.
10.1 How We Use Your Data
We only process your information when we have a genuine reason to do so. That reason is one of three things: you have clearly given us consent, it is necessary for us to provide the service you signed up for, or we are required to by law. If you have given consent, you can take it back at any time and we will stop.
10.2 Rights of Data Principals
As an Indian user, the DPDP Act gives you specific rights over your data. You can exercise any of these by writing to us at support@superdriven.in.
Access & Summary
Ask us what personal data we hold about you, who we have shared it with, and how it is being used.
Correction & Erasure
Ask us to fix incorrect information, fill in gaps, update outdated details, or delete data we no longer need to keep.
Raise a Concern
Contact our Grievance Officer directly with any concern about your data before escalating to a regulatory authority.
Nominate Someone
Nominate a trusted person to act on your behalf in case of your death or incapacity.
10.3 Data Breach Notification
If we ever become aware of a breach affecting your personal data, we will notify both the Data Protection Board of India and you directly, in the way required by the DPDP Act.
10.4 How to Reach Our Grievance Officer
If you have a concern about how we are handling your data, or you want to exercise any of the rights listed above, please reach out to our Grievance Officer. We aim to acknowledge every message within 48 hours and resolve it within 7 working days. If you are not satisfied with our response, you can escalate the matter to the Data Protection Board of India.
Grievance Officer, SuperDriven AI
Based in India • We typically respond within 48 hours
10.5 International Telemetry & Cross-Border Transfers
Some of the tools we use to keep the platform running and to understand how it is used are operated by providers based outside India, including in the United States. This means that certain technical usage data may be processed on servers located abroad. We only work with providers in countries where Indian law permits data to be sent, in line with the DPDP Act 2023. All data sent to these providers travels over an encrypted connection, and any personal form inputs are masked before they leave your browser, as described in Section 3.
11. Updates and Contact
Policy Updates
We may update this privacy notice from time to time. The updated version will be indicated by an updated date and will be effective as soon as it is accessible.
Contact Us
If you have any questions about this Privacy Policy, you can contact us:
Email: support@superdriven.in
Website: SuperDriven AI
This Privacy Policy is effective as of
Privacy Policy Questions
Reviewed by the SuperDriven AI recruiting automation team. ·
Related Documents:
Last Updated: September 25, 2026 • Version 1.0