These Terms govern your use of aurasync.ai and the AuraSync platform, operated by Genesis Technologies Private Limited ("Genesis Technologies", "we", "our", "us"), a company registered in India with its office in Pune, Maharashtra.

By creating an account, connecting an integration, or otherwise using AuraSync, you agree to these Terms. If you are agreeing on behalf of an organisation, you confirm you are authorised to bind it, and "you" means that organisation.

The Google integration terms below set out, in full, what AuraSync does with Gmail and Google Calendar data. Read that section before connecting a Google account.

The service

AuraSync is a business-to-business recruitment platform made of two products, plus the integrations you choose to enable. Features available to you depend on your subscription plan.

The ATS module

The Applicant Tracking System covers full-cycle recruitment: job requisitions and approvals, candidate pipelines and stage tracking, resume parsing and AI-assisted profiling, email correspondence through a connected mailbox, interview scheduling and video interviews, offers, and pipeline analytics. It is the only part of the platform that connects to a Google account.

Optional integrations include Google or Microsoft mailboxes and calendars, 100ms for video interviews, and Salesforce or ServiceNow for single sign-on. The Salesforce AppExchange package renders AuraSync inside a Lightning component as an iframe; it does not read, write, or transmit any Salesforce CRM object data.

The Assessment module

A separate service that generates job-specific assessments, scores candidate responses, produces behavioural and psychometric indicators, and raises integrity flags during monitored sessions. Candidates reach it from a tokenised invite link, and results are returned to the ATS. The Assessment module has no Google connection of any kind.

Your plan may meter assessments through a token allowance; that allowance is separate from user seats.

We may change, add, or withdraw features. Where a change materially reduces functionality you rely on, we will give reasonable notice to account administrators.

Accounts and access

You are responsible for the accuracy of your account details and for keeping credentials confidential.
You are responsible for what your users do with their accounts.
Your plan may cap the number of user accounts you can create. Reaching that cap prevents new accounts until seats are freed or the plan is changed.
We may suspend an account that is being used unlawfully, that threatens the security or stability of the platform, or that is materially overdue on payment. Where circumstances allow, we give notice first.

Your responsibilities as an employer

If you use AuraSync to evaluate candidates, you are the Data Fiduciary for that processing. You are responsible for:

having a lawful basis to process the candidate data you upload or collect;
giving candidates the notices your jurisdiction requires;
obtaining informed candidate consent before an assessment begins, and separately for camera monitoring and for facial verification, which are distinct purposes;
using assessment output as one input to a hiring decision rather than the sole determinant, and providing human review where a candidate asks for it;
reviewing integrity flags yourself, treating them as signals for a person to look at rather than findings of misconduct, and letting the candidate explain;
offering an adjustment where a candidate cannot complete the assessment in its standard form;
honouring candidate rights requests that concern data you control.

Compliance with employment law

You are solely responsible for ensuring that AI-assisted hiring complies with the employment, anti-discrimination and AI-governance law that applies to you. That includes equal-opportunity obligations, any automated-decision-making duties you are subject to, New York City Local Law 144 where it applies, and any other jurisdiction-specific rules on AI hiring tools.

Acceptable use

You must not use AuraSync to break the law, infringe others' rights, or discriminate unlawfully against candidates. You must not attempt to breach or probe our security, reverse engineer the platform, resell access without our written agreement, or upload malware. You must not use the platform to send unsolicited bulk email.

Google integration terms

This section applies if you connect a Google account. Connecting is optional and AuraSync works without it.

Google access belongs to the ATS module only. No data obtained from Google APIs is sent to the Assessment module, to any AI provider, or to any other part of the platform.

Why AuraSync accesses Gmail

Recruiting correspondence lives in email. AuraSync reads the connected mailbox so candidate correspondence appears alongside the candidate's profile in the ATS instead of having to be copied across by hand, and sends recruiter mail — interview invitations, offer correspondence, candidate updates — from the recruiter's own address rather than an anonymous no-reply address. Recipients see, and can reply to, a real person.

The permissions requested are exactly these, and no others:

openid, email, profile — identify the account being connected.
gmail.readonly — read the connected mailbox.
gmail.send — send mail as the connected user.
calendar.readonly — check availability and display the interview calendar.
calendar.events — create and update interview events.

What Gmail data is accessed

Messages in the connected mailbox's Inbox and Sent folders. For each message AuraSync reads the subject, body, sender, recipients including Cc and Bcc, the time it was received, the thread identifier, and the folder. No other Gmail folders, labels, settings, drafts, or attachments are accessed.

Each message is classified as hiring-related or not. That classification is deterministic: it matches sender and recipient addresses against candidate records, follows message threads, and looks for recruitment keywords in the subject. No language model or AI system reads your Gmail content, and Gmail data is never used to train, retrain, or evaluate any AI or machine-learning model.

Whether emails are stored

Yes. Synchronised messages are stored in your organisation's own AuraSync database so the ATS can display correspondence without re-fetching it on every page load. They are a cache of your Gmail mailbox, not a separate archive, and they are deleted when the connection ends.

How long data is retained

OAuth tokens — for as long as the integration is connected; deleted on disconnect.
Synchronised Gmail messages — while the mailbox is connected. Disconnecting deletes them from the AuraSync database immediately. The same purge runs automatically if a user switches to a different mailbox without disconnecting first.
Interview records created through Calendar — kept as recruitment records under your organisation's retention schedule, since they document a hiring process rather than a calendar.
Encrypted backups — up to 90 days after deletion from the live system, then they expire.

Who can access the data

The user who connected the mailbox, in their own workspace.
Other authorised users in the same organisation, where a message has been linked to a candidate they work on.
A limited number of authorised Genesis Technologies engineering and support staff, only where needed to operate the service or answer a support request, under access controls and logging.

Each customer's data is held in a separate database resolved by that customer's subdomain, so your Google data is not reachable from any other customer's workspace.

How to disconnect Google

Either route works and either is sufficient:

In AuraSync — Settings → Configurations → Disconnect on the Google integration. Stored tokens are deleted and cached mail is purged immediately.
In your Google Account — remove AuraSync at myaccount.google.com/permissions, which revokes the grant at Google's end.

Disconnecting halts all further access. Records a recruiter has already attached to a candidate file remain until deleted through the request route below.

How to request deletion

Email [email protected] from the address on the account, or disconnect in Settings, which deletes the Google data automatically. Requests are acknowledged within 48 hours and completed within 30 days. Erasure requests covering data beyond the Google integration follow the same route.

How OAuth tokens are protected

Access and refresh tokens are encrypted with AES-256-GCM before being written to the database, with the key held in the platform's secret store rather than the database, so a database copy alone does not yield usable tokens.
Tokens are never sent to the browser, written to logs, or exposed through any API.
The OAuth callback is protected by a signed, time-limited state parameter and is refused over a non-HTTPS connection.
A grant Google refuses — revoked by the user or withdrawn by a workspace administrator — is discarded rather than retried.

Whether Google data is shared with third parties

No. Data obtained through Google APIs is not sold, rented, or traded, and is not shared with advertisers, data brokers, or AI providers. It is not disclosed to any third party for that party's own purposes. The only recipients are infrastructure providers acting purely as processors under contract, and recipients of a valid legal order compelling disclosure.

AuraSync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How Calendar data is used

Calendar access serves interview scheduling and nothing else:

Free/busy lookups for the interviewers being scheduled, to find a workable slot.
Reading events in the window being viewed, so the interview calendar shows real availability rather than an empty grid.
Creating and updating interview events, with the chosen attendees and, where enabled, an online meeting link.

AuraSync does not store the contents of your calendar. Events are fetched from Google when a calendar view is opened and rendered in the browser. The only calendar data retained is what is needed to manage interviews AuraSync created: the event identifier, the meeting link, and the interview date and time.

Assessment module terms

AI-generated output is advisory

The Assessment module uses AI to generate questions, transcribe and score answers, produce behavioural and psychometric indicators, and raise integrity flags. Scores are decision support, not decisions. They are indicators rather than measurements of a candidate's worth or ability, and they are not a medical, psychological or clinical assessment of any kind.

We do not warrant that AI-generated assessments are free from bias or suitable for every jurisdiction's employment law. Results can be affected by audio and video quality, accent, connection quality, device, and by disability or assistive technology.

Biometric data

Monitored assessments capture facial embeddings and emotion signals to verify identity and check session integrity. As the Data Fiduciary for your candidates you must obtain informed consent before an assessment starts, tell candidates what is collected, comply with applicable biometric privacy law including India's Digital Personal Data Protection Act, 2023, and honour deletion requests.

Facial embeddings are deleted within 90 days of capture by an automated purge, and immediately when a candidate withdraws that consent. Facial verification data is never disclosed to you as the hiring organisation — it exists only to confirm identity during the session.

Candidate conduct

Candidates are asked to complete the assessment themselves, not to record or share the questions, and not to interfere with the platform. Genuine technical problems — a dropped connection, a failed camera, a frozen page — are not misconduct, and a candidate may ask you to resume or retake.

Assessment data

Assessment results belong to you as Customer Data. We do not sell assessment data and we do not use it to train our own AI models.

Fees and payment

Paid plans are billed in advance for the billing cycle shown at purchase. Subscription payments are handled by Stripe under their terms; we do not receive or store card details. Fees are non-refundable except where the law requires otherwise or we have agreed otherwise in writing. Unpaid fees may lead to suspension after notice.

Intellectual property

We retain all rights in the AuraSync platform, its software, models, and documentation. You retain all rights in the data you upload. You grant us a limited licence to process that data solely to provide the service and as described in the Privacy Policy.

Aggregated, de-identified statistics that cannot identify you, your organisation, or any candidate may be used to improve the service.

AI-assisted output

AuraSync generates scores, summaries, and recommendations with AI assistance. These are decision support. They can be wrong, and they must not be the sole basis of a hiring decision. You are responsible for human oversight of any decision affecting a candidate, and for providing human review where a candidate requests it.

Availability

We aim for high availability but do not guarantee uninterrupted service. Planned maintenance is notified in advance where practical. Specific availability commitments, if any, are those in your written order form or service agreement.

Third-party services

Where a third-party provider processes personal data on our behalf — our cloud hosting, AI providers, video infrastructure — it is engaged as a sub-processor under a written contract imposing obligations no less protective than these Terms, and we remain responsible to you for its acts and omissions in that processing as if they were our own. We maintain a current list of sub-processors and give at least 30 days' notice before adding or replacing one, during which you may object on reasonable data-protection grounds.

Where you separately connect AuraSync to a third-party product under your own agreement with that provider — your own Salesforce or ServiceNow instance, or your own mailbox — your use of that product remains subject to that provider's terms, and we are not responsible for its availability, for changes to it, or for its discontinuation.

Warranties and liability

We warrant that the platform will perform materially as described in the documentation and that we maintain industry-standard security measures. Beyond that it is provided "as is" and "as available", and to the maximum extent permitted by law we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. In particular, we do not warrant that AI-generated assessments are free from bias or suitable for every jurisdiction's employment law.

Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for wilful misconduct, or for any other liability that cannot lawfully be excluded.

Subject to that, neither party is liable for indirect or consequential damages, or for lost profits, revenue, goodwill or data; and we are not liable for hiring decisions made on the basis of AI assessment output, for third-party service outages, or for data loss caused by circumstances beyond our control. Our total aggregate liability arising out of or relating to these Terms is limited to the fees you paid or owe in the twelve months before the first event giving rise to the liability.

Where an enterprise agreement is in place between you and Genesis Technologies, the liability provisions of that agreement apply in place of this section.

Indemnity

Our indemnity to you

We will defend you against any third-party claim that AuraSync, as provided by us and used by you in accordance with these Terms and the documentation, infringes that third party's intellectual property rights, and will indemnify you against damages and costs finally awarded or agreed in settlement. This does not apply to claims arising from your own data or content, from a modification not made by us, from combination with anything not supplied by us, from use in breach of these Terms, from any third-party AI service supplied under its own terms, or from your continued use of a version after we have made a non-infringing one available.

Your indemnity to us

You will indemnify us against claims arising from your use of the platform in breach of these Terms, your failure to obtain proper candidate consent for assessment or biometric processing, hiring decisions made using AI assessment output, or your breach of applicable employment or data-protection law.

Confidentiality

Each party will keep the other's non-public business information confidential. This obligation survives termination by three years.

Term and termination

These Terms apply for as long as you use AuraSync. Either party may terminate a subscription in line with the order form; termination takes effect at the end of the current billing period. We may suspend or terminate access immediately for material breach, non-payment, or unlawful use.

You have 30 days from termination to export your Customer Data. After that we stop processing it and delete it in line with the retention periods in the Privacy Policy, except where the law requires us to keep it.

Governing law

These Terms are governed by the laws of India. Disputes are resolved by binding arbitration in Pune, Maharashtra, under the Arbitration and Conciliation Act, 1996. This does not affect any right you have to complain to a regulator, or to bring proceedings where the law entitles you to do so regardless of this clause.

Changes to these Terms

We may update these Terms. Material changes are notified to account administrators by email or in-product notice before they take effect, and the effective date at the top of this page is updated. Continued use after that date means you accept the revised Terms.

Contact

Genesis Technologies Private Limited
General and privacy: [email protected]
Grievances: [email protected]
Website: aurasync.ai
Address: Pune, Maharashtra, India

Terms of Service