Last updated July 2026
Privacy Policy
Najaba, operated by Nuvis Solutions LLC (referred to as Najaba, we, us, or our), provides an AI powered behavioral and skills assessment platform. This Privacy Policy explains how we handle information across our website and assessment platform. It should be read together with our Terms of Service and any separate written agreement between Najaba and your organization. By using our website or platform, you acknowledge the practices described here.
Our role: controller and processor
For our website, marketing, and demo or sample requests, Najaba acts as a data controller. When we deliver assessments and reports for an employing organization, we act as a data processor on that organization's documented instructions, and the organization is the controller. The controlling organization is responsible for establishing a lawful basis, providing notices, and obtaining any consents required from its people. Where we act as a processor, requests from individuals are referred to and handled by that organization.
Information we collect
We collect: contact and website data you provide, such as your name, work email, company, role, and message; assessment data, including responses, scores, behavioral and psychometric profiles, and the reports generated from them; account and platform data; and technical and usage data such as device, browser, IP address, log data, and analytics. We also keep records of communications with us.
Sensitive information
Behavioral, psychometric, and personality information can be sensitive. We process it only to provide the assessment services, on the instructions of the employing organization, and under appropriate safeguards. The employing organization is responsible for confirming it has a valid lawful basis and has given any required notice or obtained any required consent from the individual before an assessment is administered.
Proctoring and assessment integrity
Where the commissioning organization enables it, some assessments run integrity checks. Depending on the configuration these may include a one-time identity photo, on-device camera checks for face presence and for phones or similar objects, and activity signals such as leaving the assessment window or pasting answers. Camera analysis for the face and object checks runs entirely on the participant's own device — those camera images are never uploaded to or stored by us; only the resulting integrity flags are recorded. We use proctoring and integrity data solely to support the integrity review of that specific assessment. We never use it to train, develop, evaluate, or improve any artificial-intelligence model, and we never use it for any other training, analysis, or purpose. This data — including any identity photo and the integrity logs — is deleted immediately when the campaign is closed and is not retained afterwards. It is never sold and never shared for advertising.
How we use information
We use information to provide and operate the Service and generate reports; to respond to enquiries; to maintain security and prevent misuse; to improve and develop our assessments and models, using aggregated or de-identified data where practicable; and to comply with legal obligations. We do not sell personal data.
Automated processing and human oversight
Assessments use scoring models and algorithms to produce results, which are provided as decision support only. Najaba does not make decisions that produce legal or similarly significant effects about an individual on a solely automated basis without human involvement. Any hiring, development, or other decision is made by the employing organization, which is responsible for applying qualified human judgment. Individuals may request information about the logic involved and may contest a decision through the controlling organization.
Legal bases for processing
Depending on the context, we rely on: performance of a contract; our legitimate interests in operating, securing, and improving the Service, balanced against your rights; compliance with legal obligations; and, where required, consent, which you may withdraw at any time without affecting prior processing.
How we share information
We share information with the employing organization that commissioned the assessment; with vetted service providers and sub-processors (such as hosting, infrastructure, analytics, and communications) bound by confidentiality and permitted to process data only on our instructions; with authorities, regulators, or professional advisers where required by law or to establish, exercise, or defend legal rights; and in connection with a merger, acquisition, financing, or reorganization, subject to this Policy. We do not sell personal data.
International transfers
We and our providers may process information in countries other than your own. Where personal data is transferred across borders, we apply safeguards intended to provide a level of protection consistent with applicable law.
Data retention
We retain personal data for as long as needed to provide the Service, meet the documented requirements of the employing organization, and comply with legal, accounting, or reporting obligations, after which we delete or de-identify it. Proctoring and assessment-integrity data (including any identity photo and integrity logs) is an exception: it is deleted immediately when the campaign is closed, is never retained afterwards, and is never used for any training.
Security
We apply technical and organizational measures, including encryption in transit, access controls, and monitoring, to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your access credentials confidential.
Your rights
Subject to applicable law and any exemptions, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to portability, and to withdraw consent. To exercise these rights, contact us using the details below. Where your data was provided through your employer, we will refer your request to that organization as the controller. You may also have the right to complain to a competent data protection authority.
Cookies and analytics
Our website uses cookies and similar technologies for essential functionality and to understand usage. You can control cookies through your browser settings. Disabling some cookies may affect how parts of the website work.
Children
The Service is intended for organizations and working adults and is not directed to children. We do not knowingly collect personal data from children.
Third-party links
Our website may link to third-party sites and services that we do not control. We are not responsible for their content or privacy practices, and we encourage you to review their policies.
Applicable law
We aim to comply with applicable data protection laws in the regions we serve, including the data protection law of India, under which Nuvis Solutions LLC operates, and the data protection frameworks of the Gulf region, and, where relevant, other applicable laws. Nothing in this Policy grants rights beyond those available under applicable law.
Changes to this Policy
We may update this Policy from time to time. Material changes will be communicated through the website or directly to your organization. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
Contact
For any privacy question or request, contact us at hello@nuvishr.com.