Privacy Policy
We believe privacy policies should be readable — not something you skip because it looks like a legal textbook. This one tells you exactly what data we collect, why we need it, and what you can do about it.
Who we are
Cynchrony is an interview and assessment practice platform for students, freshers, working professionals, and institutions. We help people prepare for real interviews and help institutions run and manage assessment programmes at scale.
We are operated by Mirai Gen Private Limited, incorporated under the Companies Act 2013, recognised by the DPIIT as a startup.
Registered address: Madhapur, Hyderabad, Telangana — 500081, India
Under DPDP Act 2023
Data Fiduciary
We determine the purpose and means of processing your personal data.
Under GDPR (EEA users)
Data Controller
For users in the European Economic Area.
What data we collect
We collect only what we need to run the platform and improve your experience.
Data you give us directly
| What | Examples |
|---|---|
| Account details | Name, email, phone number, institution name, year of study or job role |
| Practice content | Interview responses, assessment answers, audio or video recordings made during sessions |
| Communications | Messages you send through contact forms, support requests, or email |
Data collected automatically
| What | Examples |
|---|---|
| Usage data | Pages you visit, features you use, session duration, button clicks |
| Technical data | IP address, browser type, device type, operating system, approximate city-level location |
| Cookie data | Session identifiers, preference settings |
What we do not collect
- Sensitive personal data such as biometric data, health records, caste, religion, or political views
- Payment card numbers or banking credentials — payments handled entirely by a certified gateway partner
- Data about employers, recruiters, or HR professionals
Why we collect it and our legal basis
Every piece of data we collect has a specific reason.
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Performance of contract |
| Deliver interview and assessment sessions | Performance of contract |
| Provide personalised feedback | Performance of contract |
| Send session summaries and platform updates | Consent |
| Send marketing communications (if opted in) | Consent |
| Understand platform usage and improve it | Legitimate interest |
| Prevent fraud and ensure security | Legitimate interest |
| Comply with applicable Indian law | Legal obligation |
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review. Where we rely on consent, you can withdraw it at any time by emailing privacy@cynchrony.in.
How long we keep your data
We keep your data only for as long as it is needed for the purpose it was collected, or as required by law.
| Data type | Retention period |
|---|---|
| Account and profile data | Until you delete your account, plus 30 days for account recovery |
| Practice session data (responses, scores, recordings) | For the duration of your active subscription or institutional contract |
| Usage and analytics data | Up to 26 months (Google Analytics default retention) |
| Support and communication records | 3 years from the date of last interaction |
| Data retained for legal compliance | As required by Indian law, typically 5–7 years |
After the relevant period ends, your data is either securely deleted or anonymised so it can no longer be linked back to you.
How we protect your data
Encryption in transit
All data exchanged between your device and our servers is encrypted using TLS (Transport Layer Security).
Access controls
Personal data is accessible only to authorised Cynchrony team members who need it to do their jobs.
Vendor due diligence
We only work with third-party processors that meet acceptable security standards and have signed data processing agreements with us.
Breach response
In the event of a personal data breach, we will notify you and the relevant authority within timeframes required by the DPDP Act 2023.
Your rights
You have real rights over your personal data — not just on paper.
Under the DPDP Act 2023 (India)
Right to access
Request a summary of the personal data we hold about you and how we are using it.
Right to correction
Ask us to correct inaccurate or incomplete data.
Right to erasure
Ask us to delete your personal data where we no longer have a lawful reason to keep it.
Right to withdraw consent
Where we process your data based on consent, withdraw it at any time.
Right to grievance redressal
File a complaint with our Grievance Officer if you believe your data has been mishandled.
Right to nominate
Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
Additional rights under GDPR (EEA users)
- Right to object to processing based on legitimate interest
- Right to restrict processing in certain circumstances
- Right to data portability — receive your data in a machine-readable format
- Right to lodge a complaint with your local data protection supervisory authority
How to exercise your rights
Email us at privacy@cynchrony.in with your name, registered email, and the specific right you want to exercise. We will respond within 30 days. We will not charge you for making a reasonable request.
Children's data
⚠️ Cynchrony is intended for users aged 18 and above.
We do not knowingly collect personal data from anyone under 18 years of age.
If we discover that we have inadvertently collected personal data from a minor without verifiable consent from a parent or guardian, we will delete that data as quickly as possible. If you believe we have collected data about a minor, please notify us immediately at privacy@cynchrony.in.
Note for institutions
If your institution enrols students who may be under 18, please ensure that appropriate parental or guardian consent is obtained before enrolling those students on the platform.
Changes to this policy
We will update this policy as our platform evolves or as law requires. When we make a material change, we will send a notification to your registered email address and display a prominent notice on the platform.
The date at the top of this page always reflects the most recent revision. We recommend checking it periodically.
Contact us and grievance redressal
For any privacy-related question, data request, or complaint, contact our Grievance Officer — a requirement under Rule 5(9) of the Information Technology Rules, 2011, and consistent with the DPDP Act 2023.
Grievance Officer — Mirai Gen Private Limited
Madhapur, Hyderabad, Telangana — 500081, India
privacy@cynchrony.in48h
Acknowledgement
30 days
Resolution target
If your grievance remains unresolved after 30 days, you may escalate to the Data Protection Board of India once constituted under the DPDP Act 2023. EEA users may also contact their local supervisory authority at edpb.europa.eu.