Legal

Privacy Policy

Plain terms, published in full.
Last updated 19 September 202612 sections

What Orcred Is

Orcred is a technical verification platform for AI/ML engineers in India. We facilitate live 45-minute Socratic review sessions conducted by senior engineers who have studied the candidate's project submission before the call. Candidates who pass receive a verified credential — an Orcred Score — that attests to their demonstrated understanding of their work.

Reviewers may use an AI assistant during a session to help them probe your work. It is a tool for the reviewer, not an automated assessor — it never scores you, and it only runs if you consented to AI-assisted tooling when you applied. Session recordings are stored for 90 days and then permanently deleted unless a dispute is active.

Orcred does not guarantee employment, job placement, or any specific outcome as a result of receiving a credential.

Information We Collect

We collect information from two types of users — Students and Reviewers.

Students: When you join the waitlist we collect your email address. When you submit a project for verification we collect your name, email address, phone number, college name, graduation year, LinkedIn URL, GitHub repository URL, Loom walkthrough URL, project details, build decisions, AI tools declaration, and availability windows. Payment is made by direct bank transfer (UPI, IMPS or NEFT). We store the payment reference number you give us and, if you upload one, a screenshot of the transfer. We never see or store your card or banking credentials. During your session, you show a government-issued photo ID for identity verification — this is viewed on camera only and is not stored by Orcred.

Reviewers: We collect full legal name, residential address, government ID type and number, PAN number, bank account details, email address, phone number, LinkedIn URL, current employer and role, years of experience, areas of expertise, and a passport photograph. This information is collected for payment, TDS compliance, and engagement purposes only.

Waitlist: When you join the waitlist we collect your email address, and your phone number if you provide one. We use these to tell you when verification opens and, for your phone number, to reach you about scheduling. We delete waitlist entries on request and when they are no longer needed.

We collect standard server logs — IP address, browser type, page visit timestamps — retained briefly for security purposes.

How We Use Your Information

Your data is used solely to operate the Orcred platform — to evaluate submissions, assign reviewers, conduct sessions, issue credentials, process payments, and communicate with you about your verification.

Live verification sessions are recorded with both parties' explicit consent. Recordings are used solely for internal quality assurance and dispute resolution. Recordings are permanently deleted after 90 days unless a dispute is active.

If you consented to AI-assisted review tooling: during your session the reviewer may send your project details, your stated build decisions and the reviewer's own working notes to a third-party language model (OpenAI or Anthropic) to suggest follow-up questions. Your session recording may also be sent to Groq for transcription and summary. Your name, email, phone number and college are never sent to these services. If you did not consent, neither of these runs and your review is unaffected.

The project idea generator on our website sends whatever you type into it to Anthropic. Do not put personal information into that tool.

Reviewer identities are never disclosed to candidates. Reviewers conduct all sessions under anonymised display names.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Retention

Session recordings are deleted after 90 days unless a dispute is active. Failed application data is retained for 2 years from submission. Passed application data and credentials are retained indefinitely — credentials are permanent. Payment records are retained for 7 years for tax compliance. Consent records are retained permanently as evidence of lawful processing. You may request deletion of your personal data at any time by emailing team@orcred.com — subject to legal retention requirements.

Cookies & Analytics

We use Google Analytics to understand how the website is used — pages visited, session duration, and general usage patterns. It loads only after you accept analytics cookies in the banner. If you decline, no analytics script is loaded at all.

We use no advertising cookies, retargeting pixels, or any other third-party tracking. Essential session storage is used solely to maintain your form state within a single visit.

Third-Party Services

We use the following third-party services to operate the platform. Supabase — database, sign-in and file storage, hosted in India (Mumbai). Vercel — application hosting and server logs, United States and global edge. Zoom — live review sessions and recording, with our account's data region set to India. Resend — transactional email delivery, United States. Google Analytics — website analytics, loaded only if you accept analytics cookies. Google Fonts — font assets.

If you consented to AI-assisted review tooling, we additionally use: OpenAI and Anthropic — reviewer assistant during sessions, United States. Groq — transcription and summary of session recordings, United States. These are the only services that receive session content, they receive it only for the request in question, and we ask each provider for zero data retention where their terms offer it.

None of these services receive more of your personal information than their specific function requires. Your account, application, scores and credentials are stored in India (Mumbai region). Some processors named above operate outside India; where that happens it is limited to the purpose described.

We do not use any CRM, advertising, or data-broker platforms.

Your Rights

Under the Digital Personal Data Protection Act 2023 you have the right to access personal data we hold about you, correct inaccurate data, request deletion of your data subject to legal retention requirements, withdraw consent at any time, and raise a grievance with us or the Data Protection Board of India.

If you have an account, you can download everything we hold about you, and delete your account, from your dashboard at any time. Deleting your account removes your session recording and transcript immediately and anonymises your profile. Credentials you have already been awarded are kept unless you ask us to remove those too, because they are records you may be relying on.

For anything else, or if you do not have an account, contact us at contact@orcred.com. We will respond within 30 days.

Data Security

Data is stored with Row Level Security on our database, encrypted connections throughout, and role-based access controls so that only authorised personnel can reach personal data. Application data is never read directly by your browser — every request goes through our API, which checks your role and your ownership of the record first.

Your reviewer sees your project, your code and your submission. Administrators can additionally see payment and scheduling records. Session recordings are accessible only to administrators and to your assigned reviewer, through links that expire after ten minutes.

In the event of a data breach we will notify affected individuals within 72 hours as required under the Digital Personal Data Protection Act 2023.

Children's Data

Orcred is not intended for persons under 18. We do not knowingly collect data from minors. If we become aware that data from a person under 18 has been collected, we will delete it immediately.

Grievance Officer

For data protection queries or to exercise your rights under the Digital Personal Data Protection Act 2023, contact: Pragathi S A — Founder, Orcred — contact@orcred.com

We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the platform after changes are posted constitutes acceptance of the revised Policy. We will note the date of the most recent update at the top of this page.

Contact

For any privacy-related questions reach us at contact@orcred.com

Questions about this document? Write to contact@orcred.com.