Privacy Policy

Effective Date: October 23, 2025

This Privacy Policy explains how Coffee Tap Studio SRL ("Niju," "we," "us," or "our") collects, uses, and protects your information when you use the Niju platform (niju.dev) (collectively, the "Service").

Our company is registered in Romania with company number 49753478.

This policy applies to Company Users (our customers) and Candidate Users (individuals invited by our customers). By using Niju, you agree to the collection and use of information in accordance with this policy.

1. Our Role: Controller vs. Processor

Our role under data protection law (like GDPR) depends on who you are:

For Company Users: When you create an account, we act as the Data Controller for your personal account information (e.g., your name, email, company name).
For Candidate Users: The Company that invited you to the interview is the Data Controller of your personal data. We act as the Data Processor, processing your data on their behalf and according to their instructions. Our processing of your data is governed by the Data Processing Agreement (DPA) with that Company.

2. Information We Collect

We collect several types of information to provide and improve our Service.

From Company Users (as Controller):
- Personal Data: When you create an account, we collect your name and email address.
- Company Data: We collect your company's name.
- Billing Data: We do not collect your payment information. This is collected directly by our Merchant of Record, Dodopayments.
From Candidate Users (as Processor):
- Personal Data: We collect your name and email address to facilitate the interview invitation from the Company.
- Interview Data: During the 20-minute session, we collect:
  - Video recording (from your webcam)
  - Audio recording (from your microphone)
  - Screen recording (your entire screen)
  - All code written in our editor
- Technical Data: We automatically collect your IP address and browser/OS user-agent data for security and platform integrity.
From All Users:
- Usage Data & Cookies: We may collect information about how the Service is accessed and used (e.g., feature interactions, page views). Our web portal uses essential cookies (like session cookies) to keep you logged in and to help operate the service.

3. How We Use Your Information

Your information is used for the following specific purposes:

To Provide and Maintain our Service:
- We use Company account data to manage accounts and provide access.
- We use Candidate Interview Data to record the session, generate the AI transcript and analysis, and deliver the complete report to the Company that invited you.
- We use Technical Data (IP address) for security, to prevent abuse, and to ensure the integrity of the interview process.
To Process Payments:
- We use Company data to facilitate billing for interviews via our Merchant of Record, Dodopayments.
To Improve Our Service:
- We analyze anonymized Usage Data to understand how our users interact with Niju, which helps us fix issues and improve features.
- We may use Anonymized Data (e.g., anonymized transcripts, code, or AI reviews that cannot be linked back to you) to improve our service and for internal analytics. We will not use your raw video or audio recordings to train AI models.
To Communicate With You:
- We use your email address (Company or Candidate) to send service-related notifications, such as interview invitations, receipts, or important updates to our policies.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following limited circumstances:

With the Company: All Candidate Interview Data and the resulting AI report are shared with the Company that invited the Candidate. This is the core function of the Service.
With Third-Party AI Providers (Sub-processors): To generate transcripts and analysis, parts of your Interview Data (such as audio or code) are sent to be processed by our third-party AI service providers. We have strict data processing agreements in place with them.
With Other Service Providers (Sub-processors): We employ third-party companies to facilitate our Service, such as providing secure cloud hosting (e.g., for storing video data) and analytics.
With Our Merchant of Record: We share necessary Company information with Dodopayments to process your payments.
To Comply with Laws: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Security

We take reasonable technical and organizational measures to protect your information from unauthorized access or disclosure. This includes encryption of all data in transit (HTTPS/TLS) and encryption of data at rest, as well as strict access controls within our team. However, no method of transmission or storage is 100% secure.

6. User Rights & Data Retention

Your Data Rights:
- Company Users: As we are the Controller for your account data, you have rights under GDPR (access, rectify, delete). You can exercise these by contacting us directly at support@niju.dev.
- Candidate Users: The Company is your Data Controller. To exercise your rights (e.g., to access your data or request its deletion), please contact the Company that invited you. We are a Processor and will act on their instructions to fulfill your request.
Data Retention:
- Company Data: We retain your account data for as long as your account is active or as needed to comply with legal obligations.
- Candidate Data: We automatically delete all raw, identifiable Candidate Interview Data (video, audio, screen recording, IP address) 30 days after the session is completed, or sooner if the Company deletes it from their dashboard.
- Anonymized Data: We may retain anonymized, non-identifiable derived data (e.g., anonymized transcripts) for service improvement and statistical purposes after the raw data is deleted.

7. Updates to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. If we make a change that we believe is material, we will notify you by email.

8. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Romania.

9. Contact Us

If you have any questions about this Privacy Policy, please contact our privacy team:

Coffee Tap Studio SRL Company Number: 49753478 Email: support@niju.dev