Legal & Policies

Privacy policy

1. Who we are

Elora IQ is an AI-powered assessment platform built and operated by Elohive, based in India. We provide tools for organisations to create, administer, and mark assessments for hiring, internal promotions, skills certification, and compliance testing.

For any privacy-related queries, contact us at hello@eloraiq.com.

2. Data we collect

We collect the following categories of personal data:

• Account data — name, email address, organisation name, and job title when you sign up or join the waitlist.
• Assessment data (organisations) — assessment configurations, question sets, candidate lists, and results that you create using our platform.
• Candidate data — name, email address, assessment answers, submission time, and integrity event logs (tab switches, copy-paste attempts, time off-tab) collected when a candidate takes an assessment.
• Usage data — browser type, device type, IP address, pages visited, and time spent on the platform — collected automatically via logs and analytics tools.
• Waitlist data — email address and the page you signed up from, if you join our early access waitlist.

3. How we use your data

• To provide and improve the Elora IQ platform and its features.
• To send you assessment reports, notifications, and platform updates.
• To process waitlist signups and send early access communications.
• To monitor platform security and detect fraudulent or abusive activity.
• To comply with legal obligations under Indian law and applicable international regulations.
• To conduct internal analytics to improve product quality and performance.

4. Candidate data — special notice

5. Legal basis for processing (GDPR)

For users in the European Economic Area (EEA) and UK, we process personal data under the following lawful bases:

• Contract performance — processing necessary to deliver the services you've signed up for.
• Legitimate interests — security monitoring, fraud prevention, and platform improvement.
• Consent — where you have explicitly opted in, such as joining our waitlist or receiving marketing communications.
• Legal obligation — where we are required to process data to comply with applicable laws.

6. Data sharing

We do not sell your personal data. We share data only in the following circumstances:

• Service providers — Supabase (database), Resend (email delivery), Anthropic (AI processing), and Vercel (hosting). Each is bound by data processing agreements.
• Legal compliance — where required by Indian law, court order, or regulatory authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

7. Data retention

• Waitlist data is retained until you request deletion or unsubscribe.
• Assessment and candidate data is retained for as long as your account is active, plus 12 months after account closure.
• Usage logs are retained for up to 90 days for security and debugging purposes.

8. Your rights

Under the DPDP Act 2023 (India) and GDPR (EU/UK), you have the right to:

To exercise any of these rights, email us at hello@eloraiq.com. We will respond within 30 days.

9. International data transfers

As a global platform with infrastructure hosted outside India (Vercel, Supabase, Anthropic), your data may be processed in the United States, European Union, or other jurisdictions. Where such transfers occur, we ensure appropriate safeguards are in place including standard contractual clauses and data processing agreements.

10. Children's data

Elora IQ is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us immediately at hello@eloraiq.com.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

Terms of service

1. Acceptance of terms

By accessing eloraiq.com or using the Elora IQ platform in any capacity — as an organisation, administrator, or assessment participant — you agree to be bound by these Terms of Service, our Privacy Policy, and Cookie Policy.

2. Description of service

Elora IQ is a software-as-a-service (SaaS) platform that enables organisations to create AI-powered assessments, share them with participants, monitor assessment integrity in real time, and receive automated AI-marked reports. The platform is currently in an early access phase.

3. Eligibility

• You must be at least 18 years of age to create an account or use the platform as an organisation.
• You must have the authority to bind your organisation to these terms if using Elora IQ on behalf of a company or entity.
• Elora IQ is not available in jurisdictions where its use is prohibited by local law.

4. Accounts and access

• You are responsible for maintaining the confidentiality of your account credentials.
• You are responsible for all activity that occurs under your account.
• You must notify us immediately at hello@eloraiq.com if you suspect unauthorised access to your account.
• We reserve the right to suspend or terminate accounts that violate these terms.

5. Acceptable use

You agree not to use Elora IQ to:

• Create assessments that are discriminatory, unlawful, misleading, or designed to harm participants.
• Collect or process sensitive personal data (health, biometric, caste, religion, political affiliation) through assessments without appropriate legal basis and participant consent.
• Attempt to reverse engineer, decompile, or extract the underlying AI models or platform code.
• Use automated scripts or bots to interact with the platform in an abusive manner.
• Resell, sublicense, or redistribute access to the platform without our written permission.
• Violate any applicable law, regulation, or third-party right.

6. Assessment content and responsibility

Organisations are solely responsible for:

• The legality and appropriateness of assessments created using Elora IQ.
• Obtaining any necessary consent from assessment participants.
• Communicating results to participants in accordance with applicable employment and privacy laws.
• Ensuring that assessments are used fairly and without discrimination.

Elora IQ provides AI-assisted tools but does not review or approve assessment content created by organisations.

7. AI marking and accuracy

8. Subscription and billing

• Elora IQ offers Basic, Pro ($69/month), and Business ($149/month, up to 15 team members) plans, plus custom Enterprise pricing for larger organisations.
• Paid plans are billed monthly or annually, at your choice. Annual billing is discounted and paid upfront for the year. Subscriptions renew automatically unless cancelled.
• Refunds are not provided for partial billing periods. You may cancel at any time and retain access until the end of the current billing period.
• We reserve the right to change pricing with 30 days' notice to existing subscribers.

9. Intellectual property

• Elora IQ retains all intellectual property rights in the platform, including its AI models, UI, and underlying code.
• You retain ownership of assessment content you create on the platform.
• By using the platform, you grant us a limited licence to process your content solely to deliver the service.

10. Limitation of liability

To the fullest extent permitted by applicable law, Elora IQ shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the platform, including but not limited to loss of revenue, data, or business opportunity. Our total liability to you shall not exceed the amount you paid to us in the 12 months preceding the claim.

11. Governing law

These terms are governed by the laws of India. Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts of India. For users in the EU/UK, mandatory consumer protection rights under local law are not affected.

12. Changes to terms

We may update these terms at any time. Material changes will be communicated to registered users by email at least 14 days before taking effect. Continued use of the platform after changes constitutes acceptance of the updated terms.

Cookie policy

This Cookie Policy explains what cookies are, which cookies Elora IQ uses, and how you can control them.

What are cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to website owners.

Cookies we use

Essential cookies

These cookies are necessary for the platform to function and cannot be disabled. They include:

• Session cookies — maintain your logged-in state while you use the platform.
• Security cookies — protect against cross-site request forgery (CSRF) attacks.
• Preference cookies — remember your UI preferences such as theme settings.

Analytics cookies

We use analytics tools to understand how visitors use our website and platform. This helps us improve the product. Analytics data is aggregated and anonymised where possible. These cookies are only placed with your consent.

Third-party cookies

Some features of Elora IQ use third-party services that may set their own cookies:

• Supabase — authentication and session management.
• Vercel — infrastructure analytics and performance monitoring.

How to control cookies

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device.
• Delete all or specific cookies.
• Block cookies from specific websites.
• Block all third-party cookies.

Note that disabling essential cookies may affect the functionality of the Elora IQ platform. For browser-specific instructions, visit your browser's help pages.

Your consent

By continuing to use eloraiq.com, you consent to the use of essential cookies. For non-essential analytics cookies, we will request your consent separately where required by applicable law (including GDPR for EU/UK users).

Security

Infrastructure security

• Hosting — Elora IQ is hosted on Vercel, which provides enterprise-grade infrastructure with DDoS protection, automatic SSL/TLS, and global edge deployment.
• Database — all data is stored in Supabase, which provides encrypted PostgreSQL databases with row-level security (RLS) enabled. Data is encrypted at rest and in transit.
• HTTPS — all connections to eloraiq.com are encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.

Data security

• Encryption at rest — all database data is encrypted at rest using AES-256.
• Encryption in transit — all data transmitted between your browser and our servers is encrypted using TLS.
• Access controls — database access is governed by row-level security policies ensuring organisations can only access their own data.
• API security — all API endpoints are authenticated. Public endpoints are rate-limited to prevent abuse.

Assessment integrity

• Candidate results and integrity reports are visible only to the organisation that administered the assessment.
• Candidates never have access to their results through the platform.
• Each candidate receives a unique assessment link — shared links cannot be used by multiple people.
• All integrity events (tab switches, copy-paste attempts, time off-tab) are logged with timestamps and stored securely.

AI and data processing

Assessment answers are processed by Anthropic's Claude API for AI marking. Data sent to Anthropic is governed by Anthropic's data processing terms. We do not send personally identifiable information to Anthropic beyond what is necessary to mark assessment answers.

Responsible disclosure

We take security vulnerabilities seriously. If you discover a security issue in the Elora IQ platform, please report it responsibly before public disclosure:

Our commitments

Data Processing Agreement

1. Roles of the parties

For personal data relating to your assessment candidates and other individuals you invite to use Elora IQ ("Customer Data"), you act as the Controller and Elohive acts as the Processor. We process Customer Data only on your documented instructions, which are set out in this DPA and given by your use of the platform's features.

2. Subject matter, duration, nature and purpose

• Subject matter — our provision of the Elora IQ assessment platform, including assessment creation, delivery, integrity monitoring, and AI-assisted marking.
• Duration — for as long as your Elora IQ account or subscription is active, plus the retention period described in Section 7 below and in our Privacy Policy.
• Nature of processing — collection, storage, structuring, analysis, and transmission of Customer Data via our hosted infrastructure.
• Purpose — solely to provide, secure, support, and improve the Elora IQ service as instructed by you; we do not process Customer Data for our own independent purposes.

3. Categories of data subjects and personal data

• Data subjects — assessment candidates/participants you invite, and your own organisation's authorised users (admins and team members).
• Personal data — name, email address, assessment responses and scores, integrity/proctoring event logs (tab switches, copy-paste attempts, AI-usage and plagiarism signals), IP address, and browser/device metadata. We do not require or knowingly process special category data (health, biometric, religious, political, or similar) — see Section 5 of our Terms of Service, which places responsibility for avoiding this on you as Controller.

4. Our obligations as Processor

• Process Customer Data only on your documented instructions, including regarding international data transfers, unless required to do otherwise by applicable law.
• Ensure that personnel authorised to process Customer Data are bound by confidentiality obligations.
• Implement appropriate technical and organisational security measures — see our Security section for specifics (encryption in transit and at rest, row-level access controls, authenticated APIs).
• Not engage a sub-processor without your general authorisation (see Section 6) and impose equivalent data protection obligations on any sub-processor we do engage.
• Assist you, insofar as reasonably possible, in responding to data subject requests (access, correction, deletion, portability, objection) relating to Customer Data.
• Notify you without undue delay after becoming aware of a personal data breach affecting Customer Data.
• Assist you with your own security, breach-notification, and data protection impact assessment obligations where they relate to our processing, to the extent reasonably required.
• At your choice, delete or return all Customer Data at the end of the engagement, subject to the retention terms in Section 7, and delete existing copies unless applicable law requires continued storage.
• Make available information reasonably necessary to demonstrate compliance with this DPA, and allow for audits — including inspections — conducted by you or an auditor you appoint, on reasonable prior notice, no more than once per year unless required by a regulator or triggered by a security incident.

5. Your obligations as Controller

• Ensure you have a valid legal basis for collecting and sharing Customer Data with us, and for any assessment you run through the platform.
• Provide any required notices to and obtain any required consents from your candidates and users before assessing them through Elora IQ.
• Give us instructions for processing that comply with applicable data protection law — we are not responsible for verifying the lawfulness of your instructions.

6. Sub-processors

You provide general authorisation for us to engage the following sub-processors, each bound by data protection terms consistent with this DPA:

If we add a new sub-processor with access to Customer Data, we will give notice — by email or by updating this page — at least 14 days beforehand, giving you the opportunity to object on reasonable data protection grounds.

7. Retention and deletion

Customer Data is retained for as long as your account is active, plus 12 months after account closure, consistent with our Privacy Policy. You may request earlier deletion at any time by emailing hello@eloraiq.com.

8. International data transfers

Our infrastructure (Vercel, Supabase, Anthropic) is hosted outside India, so Customer Data may be processed in the United States, European Union, or other jurisdictions. Where a transfer requires a specific legal mechanism under GDPR or similar law, we rely on Standard Contractual Clauses or an equivalent approved mechanism with the relevant sub-processor.

9. Precedence

This DPA is incorporated into and forms part of our Terms of Service. If there is a conflict between this DPA and the Terms of Service regarding the processing of personal data, this DPA governs.

Refund policy

1. Monthly subscriptions

You can cancel a monthly subscription at any time from Settings → Subscription. Cancelling stops future renewals, but does not refund the current billing period — you keep full access to your plan's features until the period you've already paid for ends.

2. Annual subscriptions

Annual plans are billed upfront for the year at a discounted rate. If you cancel partway through an annual term, we don't refund the unused months — you retain access for the remainder of the paid year, and the subscription simply doesn't renew after that. If you'd prefer more flexibility to cancel mid-term, monthly billing may be a better fit than annual.

3. Upgrades and downgrades

• Upgrading (e.g. Pro → Business) takes effect immediately, and you're billed the new plan's rate from that point.
• Downgrading (e.g. Business → Pro, or cancelling to Basic) takes effect at the start of your next billing cycle. You keep your current plan's features until the period you've already paid for ends — we don't issue partial credits or refunds for the remainder of a cycle when you downgrade.

4. Basic (free) plan

The Basic plan is free, so there's no payment involved and nothing to refund. You can upgrade to a paid plan at any time.

5. Billing errors

The one exception to the above: if we make a genuine billing mistake — a duplicate charge, an incorrect amount, or a charge after you'd already cancelled — we will correct it and issue a full refund for the erroneous charge. If you spot something that looks wrong on your invoice, email us and we'll look into it promptly.

6. Enterprise plans

Enterprise pricing and terms are negotiated individually. Where a signed Enterprise agreement includes different cancellation or refund terms, that agreement takes precedence over this page.

7. How refunds are processed

Approved refunds (billing errors only, per Section 5) are issued to your original payment method via Razorpay. Depending on your bank or card issuer, it typically takes 5–7 business days for a refund to appear on your statement after we process it.