Privacy Policy

Who we are

EYMA AI ("EYMA AI", "we", "us" or "our") is based in Delhi, India. We connect AI companies with qualified human experts for AI training, evaluation, annotation, red teaming, curriculum design and related services.

For the personal data described in this policy, EYMA AI decides why and how the data is processed, and acts as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). We also follow the Information Technology Act, 2000 and the rules made under it.

Scope of this policy

This policy covers personal data we process when you:

• visit our website at eymaai.com;
• send us a message through our contact form or by email;
• apply to join our expert network or apply for an open role;
• use the EYMA AI Expert Portal at expert.eymaai.com; or
• work with us as a client, expert or partner.

It does not cover data that our clients provide to us for processing on their behalf as part of a project. That data is handled under our contract with the relevant client. If a separate agreement with you contains different privacy terms, that agreement applies to the extent of any conflict.

Personal data we collect

Information you give us

• Contact enquiries: your name, email address, company, the topic of your enquiry and your message.
• Expert and job applications: your name, email address, phone or WhatsApp number, city and state, primary domain, highest qualification, experience level, weekly availability, the role you are applying for, your LinkedIn or portfolio link, and your written answers.
• Skills tests: if you take a test (as an applicant, or as an expert applying to have a skill verified), your answers, when you started and submitted it, how many times you left the test page or pasted text while taking it, and how many characters you pasted into each answer. We also compare written answers with other candidates' answers to the same questions to detect copying. We use these signals only to help assess every candidate fairly, and a person always makes the decision. Our reviewers see the counts and any close matches, not what you were doing: we do not see your screen, your other tabs or the websites you visit. See Skills tests in our Terms of Use.
• Expert Portal account: your email address and name, and any details you add or update, such as phone number, location, areas of expertise, availability, weekly hours and display preferences.
• Work records: skill applications and assessment outcomes, project invitations and participation, documents shared with you (such as agreements), payment records (amounts, status, dates and references), and any payout details you provide so we can pay you.
• Correspondence: messages you exchange with us through the Expert Portal or by email.

Information collected automatically

When you use our website or the Expert Portal, our hosting and infrastructure providers record limited technical information, such as your IP address, browser and device type, the pages requested and the date and time of each request. We use this to deliver the service, prevent abuse and investigate problems.

When you sign in to the Expert Portal, your browser stores a session token so that you stay signed in. See our Cookie Policy for details of the cookies and similar technologies we use.

Information from other sources

We may receive information about the quality of your work from reviewers or clients on projects you contribute to, and we may view public professional profiles that you link to in your application.

How we use your data

We process personal data only for clear, lawful purposes:

Decisions about applications and project matching are made by people on our team. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

Emails and communications

When you submit an application or sign in to the Expert Portal, you consent to receive emails from EYMA AI. These fall into two groups:

• Service emails about your application, account security and password resets, project invitations, assessments and payments. These are part of providing the service, so you will receive them while your account or application is active.
• Updates about new opportunities, programmes and EYMA AI news. You can stop these at any time using the unsubscribe link in the email or by writing to support@eymaai.com.

Withdrawing consent does not affect processing that took place before you withdrew it.

Who we share data with

We do not sell or rent personal data. We share it only where needed, and only with:

• Service providers who process data on our behalf under contract, including our cloud database and authentication provider (Supabase), our hosting and network provider (Cloudflare), and email delivery providers. They may use the data only to provide their services to us.
• Clients, to the extent needed for a project you work on. This is usually limited to your work output, and where a client requires it, your relevant qualifications. We do not share your contact or payment details with clients without your permission.
• Professional advisers, such as lawyers, auditors and accountants, under a duty of confidentiality.
• Authorities, where required by law, court order or a lawful request from a government body.
• A successor business, if EYMA AI is involved in a merger, acquisition or sale of assets. We will tell you before your data becomes subject to a different privacy policy.

Our website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when you visit.

International transfers

Some of our service providers store or process data outside India. Where we transfer personal data outside India, we do so in line with the DPDP Act, including any restrictions the Government of India notifies, and we require our providers to protect the data to a standard consistent with this policy.

How long we keep data

We keep personal data only for as long as we need it for the purposes above, or as the law requires:

• Contact enquiries: for as long as needed to deal with your enquiry and any resulting engagement.
• Applications that do not lead to onboarding: up to 24 months, so that we can consider you for future opportunities, unless you ask us to delete them sooner.
• Expert Portal accounts: while your account is active, and for a reasonable period after it closes to resolve queries or disputes.
• Payment and financial records: for as long as Indian tax and accounting laws require.

When data is no longer needed, we delete it or make it anonymous.

How we protect data

We use reasonable security practices and procedures, appropriate to the nature of the data, to protect personal data against unauthorised access, alteration, disclosure or loss. These include encryption in transit, access controls that limit each person to the data they need for their role, and authentication safeguards.

No method of transmission or storage is completely secure. If we become aware of a personal data breach that affects you, we will notify you and the Data Protection Board of India as the law requires.

You can help keep your account safe by using a strong, unique password and not sharing your sign-in details with anyone.

Your rights

Subject to applicable law, you have the right to:

• access a summary of the personal data we hold about you and how we use it;
• correct, complete or update inaccurate or incomplete data;
• erase data that we no longer need or that you no longer consent to us using, unless we must keep it by law;
• withdraw consent at any time, as easily as you gave it;
• nominate another person to exercise your rights if you die or become unable to do so; and
• raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.

Expert Portal users can update most profile details directly in the portal. For any other request, email support@eymaai.com. We may need to verify your identity before acting on a request, and we aim to respond within 30 days.

Children

Our services are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

Third-party websites

Our website and the Expert Portal may link to other websites and tools, such as assessment platforms or project resources. Those services have their own privacy policies, and we are not responsible for how they handle your data.

Changes to this policy

We may update this policy as our services or legal requirements change. We will post the updated version on this page with a new "Last updated" date. If a change materially affects how we use your data, we will tell you by email or through the Expert Portal before it takes effect.

Contact and grievances

For questions about this policy, to exercise your rights or to raise a grievance, contact our Grievance Officer:

We will acknowledge your grievance promptly and aim to resolve it within 30 days.