Privacy & integrity monitoring
Candidate Personal Data Notice
This notice applies to candidates taking online interview/exam sessions through Invigile.
Last updated: 2026-07-27
Full text
CANDIDATE PERSONAL DATA NOTICE AND CONSENT 1) Data controller and processor In this session, the data controller of your personal data is the employer / organization that invited you to this assessment (“Customer”). Invigile provides services as a data processor on behalf of and under the instructions of the Customer. 2) Categories of data processed • Identity and contact: name, email (invite and session matching). • Session integrity signals: tab/focus changes, clipboard (copy/paste) events, browser visibility state. • Image processing (if enabled by policy): face presence, multiple faces, and gaze-direction metadata from the camera; raw video is not sent to the server. • Identity verification (if enabled by policy): ID document and selfie verification via Didit; continuity scores (raw selfie is not stored permanently). • OS-level signals (if enabled by policy): process, display layout, and screenshot-attempt metadata via Invigile Agent. • Technical logs: session ID, timestamps, SDK version, device/browser technical data. 3) Purposes of processing Assessing honesty and integrity during online interviews/exams; presenting violation signals to Customer staff as an evidence trail; security and service quality. 4) Legal basis Your explicit consent; additional explicit consent where identity verification or special-category data risks apply. Performance of the contract between Customer and Invigile, and legitimate interests — only as balanced by the Customer. 5) Transfers Data may be stored on EU/UK-compatible cloud infrastructure (Supabase/Vercel). Identity verification is handled via Didit (EU). OpenAI session summaries (if any) are limited to structured text. 6) Retention Session evidence records follow Customer policy and contract; default Invigile retention is up to 12 months. Opt-in blurred violation frames are kept up to 14 days. Identity selfie URLs are limited to temporary access. 7) Your rights You may request access, information, correction, deletion, objection, and redress regarding processing of your data. Contact the inviting Customer first; Invigile channel: privacy@invigile.com 8) Consent By checking the box below, you confirm that you have read and understood this notice and give explicit consent to the processing of your personal data as described. You cannot continue the session without consent. Last updated: 2026-07-27
How to contact us
Contact the inviting organization first; Invigile channel: privacy@invigile.com