Privacy notice
Last updated: 25 October 2026
Zenpas connects skilled people with employers across borders. This notice explains what personal data we collect, why, who sees it, how long we keep it, and the rights you have.
1. Who we are
Zenpas is a product of Nest One Bridge, operated by NestOne Group Private Limited, 974, Ground Floor, 23rd Main, 25th A Cross, Sector 2, HSR Layout, Bengaluru, Karnataka 560102, India (“Zenpas”, “we”). We decide how your personal data is used, which makes us the controller under the GDPR and UK GDPR and the data fiduciary under India's Digital Personal Data Protection Act 2023.
Privacy contact and grievance officer: the Zenpas Privacy Officer, privacy@zenpas.ai.
2. What we collect
| Who you are | What we collect |
|---|---|
| Consultants and applicants | Name, email, country, programme and track, years of experience, project history, LinkedIn profile, CV, start date, working hours, work status; AI interview recording and transcript; scenario test answers; scores and reviewer notes; references; identity document and a live video match; and, if we engage you, your contract, tax number (PAN), bank details and invoices. |
| Employers and their staff | Name, work email, company, country, the roles you want to fill, your messages to us, and contract and billing contacts. |
| Website visitors | Basic technical data our hosting provider records to run and protect the site, such as IP address, browser and pages requested. We use no advertising or analytics cookies. |
We do not ask for, and you should not send, information about health, religion, caste, ethnicity, political views, sexual orientation or family status. We do not use such information in any decision.
3. Why we use it, and on what basis
| Purpose | Basis under GDPR and UK GDPR |
|---|---|
| Assessing your application: screening, AI interview, scenario test, reviewer interview, references and identity checks | Steps you ask us to take before a contract, and your consent to the recorded AI interview and assessment |
| Proposing your profile to employers and managing placements | Steps before a contract, and performance of your contract with us |
| Paying consultants and keeping tax and accounting records | Contract, and our legal obligations |
| Answering employers and managing client contracts | Our legitimate interest in running the business, and contract |
| Preventing fraud, such as interview proxies or false identities | Our legitimate interest, and that of our clients, in honest assessments |
| Emailing you about your application or our programmes | Your consent, which you can withdraw at any time |
Under India's data protection law, we process your data on the basis of the consent you give in our forms and for the legitimate uses the law allows, such as meeting legal obligations.
4. How we use AI, and the human decision
AI helps us interview and test many applicants fairly and quickly. It suggests scores; it does not decide. A senior SAP reviewer and a Zenpas manager review every result, and a person makes every decision about whether you go forward. No decision about you is made by automated means alone.
You can ask for a person to review any decision, and we will reply within 10 working days. You can also ask us how a score was reached.
5. Who we share it with
| Recipient | What and why |
|---|---|
| Employers | Your profile summary, scores and CV, only when we propose you for a specific role. We tell you before we share. |
| Senior SAP reviewers | Your application, interview and test, so they can assess you. They are independent contractors bound by confidentiality. |
| Service providers | Website hosting, sign-up storage, CV storage and sign-up alert emails (Cloudflare), and email (Google Workspace). As we add tools for interviews, identity checks, e-signature and accounting, we will list them here. They act only on our instructions. |
| Authorities | When the law requires it. |
We never sell your personal data, and we never charge consultants for joining, assessment or placement.
6. International transfers
We are based in India, and some of our service providers operate in the United States, the European Union and elsewhere. When personal data from the UK or EU is transferred to India or another country without an adequacy decision, we use the European Commission's standard contractual clauses or the UK's international data transfer addendum, together with security measures suited to the risk.
7. How long we keep it
| Data | How long |
|---|---|
| AI interview recordings | 6 months after the interview |
| Applications, scores and reviewer notes for applicants not placed | 2 years, so you can reapply and we can show our process was fair |
| Consultant contracts, invoices, tax and payment records | As long as Indian tax and company law requires, usually up to 8 years |
| Identity document images | Deleted once the check is complete; we keep a record that it was done |
| Employer contacts and messages | 2 years after our last contact, or longer while a contract is active |
| Waitlist sign-ups | Until you ask us to remove you, or 12 months after the relevant programme opens |
8. How we protect it
Access is limited to people who need it, accounts use multi-factor authentication, data is encrypted in transit, and our contractors are bound by confidentiality. If a breach puts your data at risk, we will tell you and the relevant authorities as the law requires.
9. Your rights
Depending on where you live, you can ask to see your data, correct it, delete it, restrict or object to its use, receive a copy in a common format, and withdraw consent at any time. Under Indian law you can also nominate someone to exercise your rights if you cannot.
To use any right, email privacy@zenpas.ai. We reply within one month, and sooner where the law requires.
If you are unhappy with our answer, you can complain to the Information Commissioner's Office in the UK, the data protection authority in your EU country (in the Netherlands, the Autoriteit Persoonsgegevens), or the Data Protection Board of India.
10. Age
Zenpas is for professionals aged 18 and over. We do not knowingly collect data from anyone younger.
11. Changes
We will update this notice when our services or the law change, and show the date of the latest version at the top. If a change affects you significantly, we will tell you by email.