Legal & Policies

Privacy policy

1. Who we are

Elora IQ is an AI-powered assessment platform operating under the name Elora IQ, based in India. We provide tools for organisations to create, administer, and mark assessments for hiring, internal promotions, skills certification, and compliance testing.

For any privacy-related queries, contact us at hello@eloraiq.com.

2. Data we collect

We collect the following categories of personal data:

• Account data — name, email address, organisation name, and job title when you sign up or join the waitlist.
• Assessment data (organisations) — assessment configurations, question sets, candidate lists, and results that you create using our platform.
• Candidate data — name, email address, assessment answers, submission time, and integrity event logs (tab switches, copy-paste attempts, time off-tab) collected when a candidate takes an assessment.
• Usage data — browser type, device type, IP address, pages visited, and time spent on the platform — collected automatically via logs and analytics tools.
• Waitlist data — email address and the page you signed up from, if you join our early access waitlist.

3. How we use your data

• To provide and improve the Elora IQ platform and its features.
• To send you assessment reports, notifications, and platform updates.
• To process waitlist signups and send early access communications.
• To monitor platform security and detect fraudulent or abusive activity.
• To comply with legal obligations under Indian law and applicable international regulations.
• To conduct internal analytics to improve product quality and performance.

4. Candidate data — special notice

5. Legal basis for processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process personal data under the following lawful bases:

• Contract performance — processing necessary to deliver the services you've signed up for.
• Legitimate interests — security monitoring, fraud prevention, and platform improvement.
• Consent — where you have explicitly opted in, such as joining our waitlist or receiving marketing communications.
• Legal obligation — where we are required to process data to comply with applicable laws.

6. Data sharing

We do not sell your personal data. We share data only in the following circumstances:

• Service providers — Supabase (database), Resend (email delivery), Anthropic (AI processing), and Vercel (hosting). Each is bound by data processing agreements.
• Legal compliance — where required by Indian law, court order, or regulatory authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

7. Data retention

• Waitlist data is retained until you request deletion or unsubscribe.
• Assessment and candidate data is retained for as long as your account is active, plus 12 months after account closure.
• Usage logs are retained for up to 90 days for security and debugging purposes.

8. Your rights

Under the DPDP Act 2023 (India) and GDPR (EU/UK), you have the right to:

To exercise any of these rights, email us at hello@eloraiq.com. We will respond within 30 days.

9. International data transfers

As a global platform with infrastructure hosted outside India (Vercel, Supabase, Anthropic), your data may be processed in the United States, European Union, or other jurisdictions. Where such transfers occur, we ensure appropriate safeguards are in place including standard contractual clauses and data processing agreements.

10. Children's data

Elora IQ is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us immediately at hello@eloraiq.com.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Terms of service

1. Acceptance of terms

By accessing eloraiq.com or using the Elora IQ platform in any capacity — as an organisation, administrator, or assessment participant — you agree to be bound by these Terms of Service, our Privacy Policy, and Cookie Policy.

2. Description of service

Elora IQ is a software-as-a-service (SaaS) platform that enables organisations to create AI-powered assessments, share them with participants, monitor assessment integrity in real time, and receive automated AI-marked reports. The platform is currently in an early access phase.

3. Eligibility

• You must be at least 18 years of age to create an account or use the platform as an organisation.
• You must have the authority to bind your organisation to these terms if using Elora IQ on behalf of a company or entity.
• Elora IQ is not available in jurisdictions where its use is prohibited by local law.

4. Accounts and access

• You are responsible for maintaining the confidentiality of your account credentials.
• You are responsible for all activity that occurs under your account.
• You must notify us immediately at hello@eloraiq.com if you suspect unauthorised access to your account.
• We reserve the right to suspend or terminate accounts that violate these terms.

5. Acceptable use

You agree not to use Elora IQ to:

• Create assessments that are discriminatory, unlawful, misleading, or designed to harm participants.
• Collect or process sensitive personal data (health, biometric, caste, religion, political affiliation) through assessments without appropriate legal basis and participant consent.
• Attempt to reverse engineer, decompile, or extract the underlying AI models or platform code.
• Use automated scripts or bots to interact with the platform in an abusive manner.
• Resell, sublicense, or redistribute access to the platform without our written permission.
• Violate any applicable law, regulation, or third-party right.

6. Assessment content and responsibility

Organisations are solely responsible for:

• The legality and appropriateness of assessments created using Elora IQ.
• Obtaining any necessary consent from assessment participants.
• Communicating results to participants in accordance with applicable employment and privacy laws.
• Ensuring that assessments are used fairly and without discrimination.

Elora IQ provides AI-assisted tools but does not review or approve assessment content created by organisations.

7. AI marking and accuracy

8. Subscription and billing

• Elora IQ offers Basic, Pro ($69/month), and Business ($149/month, up to 15 team members) plans, plus custom Enterprise pricing for larger organisations.
• Paid plans are billed monthly or annually, at your choice. Annual billing is discounted and paid upfront for the year. Subscriptions renew automatically unless cancelled.
• Refunds are not provided for partial billing periods. You may cancel at any time and retain access until the end of the current billing period.
• We reserve the right to change pricing with 30 days' notice to existing subscribers.

9. Intellectual property

• Elora IQ retains all intellectual property rights in the platform, including its AI models, UI, and underlying code.
• You retain ownership of assessment content you create on the platform.
• By using the platform, you grant us a limited licence to process your content solely to deliver the service.

10. Limitation of liability

To the fullest extent permitted by applicable law, Elora IQ shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the platform, including but not limited to loss of revenue, data, or business opportunity. Our total liability to you shall not exceed the amount you paid to us in the 12 months preceding the claim.

11. Governing law

These terms are governed by the laws of India. Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts of India. For users in the EU/UK, mandatory consumer protection rights under local law are not affected.

12. Changes to terms

We may update these terms at any time. Material changes will be communicated to registered users by email at least 14 days before taking effect. Continued use of the platform after changes constitutes acceptance of the updated terms.

Cookie policy

This Cookie Policy explains what cookies are, which cookies Elora IQ uses, and how you can control them.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.

Cookies we use

Essential cookies

These cookies are necessary for the platform to function and cannot be disabled. They include:

• Session cookies — maintain your logged-in state while you use the platform.
• Security cookies — protect against cross-site request forgery (CSRF) attacks.
• Preference cookies — remember your UI preferences such as theme settings.

Analytics cookies

We use analytics tools to understand how visitors use our website and platform. This helps us improve the product. Analytics data is aggregated and anonymised where possible. These cookies are only placed with your consent.

Third-party cookies

Some features of Elora IQ use third-party services that may set their own cookies:

• Supabase — authentication and session management.
• Vercel — infrastructure analytics and performance monitoring.

How to control cookies

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device.
• Delete all or specific cookies.
• Block cookies from specific websites.
• Block all third-party cookies.

Note that disabling essential cookies may affect the functionality of the Elora IQ platform. For browser-specific instructions, visit your browser's help pages.

Your consent

By continuing to use eloraiq.com, you consent to the use of essential cookies. For non-essential analytics cookies, we will request your consent separately where required by applicable law (including GDPR for EU/UK users).

Security

Infrastructure security

• Hosting — Elora IQ is hosted on Vercel, which provides enterprise-grade infrastructure with DDoS protection, automatic SSL/TLS, and global edge deployment.
• Database — all data is stored in Supabase, which provides encrypted PostgreSQL databases with row-level security (RLS) enabled. Data is encrypted at rest and in transit.
• HTTPS — all connections to eloraiq.com are encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.

Data security

• Encryption at rest — all database data is encrypted at rest using AES-256.
• Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS.
• Access controls — database access is governed by row-level security policies ensuring organisations can only access their own data.
• API security — all API endpoints are authenticated. Public endpoints are rate-limited to prevent abuse.

Assessment integrity

• Candidate results and integrity reports are visible only to the organisation that administered the assessment.
• Candidates never have access to their results through the platform.
• Each candidate receives a unique assessment link — shared links cannot be used by multiple people.
• All integrity events (tab switches, copy-paste attempts, time off-tab) are logged with timestamps and stored securely.

AI and data processing

Assessment answers are processed by Anthropic's Claude API for AI marking. Data sent to Anthropic is governed by Anthropic's data processing terms. We do not send personally identifiable information to Anthropic beyond what is necessary to mark assessment answers.

Responsible disclosure

We take security vulnerabilities seriously. If you discover a security issue in the Elora IQ platform, please report it responsibly before public disclosure:

Our commitments