Version 2026-08-02
Commit is operated by Kunj Hirapara, an individual, as a personal project. There is no company behind it. For anything in this policy, including a request to see or delete your data, write to [email protected].
This policy covers commit.kunjdeveloper.me and nothing else.
Name, email address and profile picture, received from Clerk when you sign up — including when you sign up using Google.
Kept: Until you delete your account.
Interview times, participants, roles, invitations and calendar entries.
Kept: Until deleted by the organiser or with your account.
Interviewer comments, structured scorecards and written feedback about a candidate.
Kept: Retained while the interview record exists, so hiring decisions remain auditable.
Audio and video of interview calls, and recordings where the interviewer has enabled them.
Kept: Held by Stream for the configured window and deleted with the interview.
Source code submitted to the practice sandbox or an interview, and the output of running it.
Kept: Stored with the session it belongs to.
For candidates only: how long the interview window lost focus, how much text was pasted at once, whether more than one display was in use, and the difference between your device clock and the server's.
Kept: Deleted 90 days after the interview.
Audit logs of sensitive actions, notification delivery state, error reports and health metrics.
Kept: Kept for security and incident investigation.
Commit does not sell personal data, does not use it for advertising, and does not use it to train machine-learning models.
When you take part in an interview as a candidate, Commit records signals about how the interview window was used: how long it lost focus, how much text was pasted at once, whether more than one display was connected, and the difference between your device clock and the server's. Interviewers are not monitored.
This is disclosed before you join a call, and joining is how you agree to it. If you would rather not be monitored, do not join the call — tell the interviewer instead.
No score, rating or judgement is produced from these signals. They are shown to the interviewer as individual measurements, and they are not evidence of anything on their own. Because this is behavioural monitoring, accounts are limited to people aged 18 and over.
Recording of audio and video is separate and is described in the recording disclosure.
Signing in with Google gives Commit your name, email address and profile picture. They are used for one thing: creating and authenticating your account, so you appear as a recognisable person to the people you interview with.
That data is not sold, not used for advertising, not used to train models, and not shared with anyone beyond the processors listed below. Commit requests no access to Gmail, Drive, Calendar or contacts, and holds no Google data other than the three fields above.
You can disconnect Commit at any time from your Google account permissions. Doing so stops future sign-ins but does not delete data already stored here — for that, ask for deletion.
Commit is built on third-party services. Each one processes data on the operator's instructions, for the purpose named:
Authentication and account management
Name, email address, profile picture, sign-in metadata
Application database
Interviews, comments, feedback, notifications, audit and monitoring records
Video calls and recording
Audio, video, and recordings of interview sessions
Transactional email
Email address and the contents of notification messages
Running the application and its database backups
All of the above in transit, plus server logs
These providers operate internationally, so your data may be stored or processed outside your country.
You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, withdraw consent, or nominate someone else to exercise these rights for you. Write to [email protected]. Requests are answered within 90 days, and usually far sooner.
Two limits worth stating honestly. Evaluation records and audit logs connected to an interview may be retained where an organisation needs them for its own recordkeeping. And deleting your account does not retract feedback an interviewer already wrote about you, though it is no longer linked to a live account.
If you are in India and are not satisfied with the response, you may complain to the Data Protection Board of India.
Access is role-based and checked on the server for every request. Sensitive actions are logged. Code you submit runs in an isolated container with no network access. Traffic is encrypted in transit.
No system is perfectly secure, and this one is maintained by one person. If a breach affects your data you will be told, and the relevant authority notified where the law requires it. If you find a vulnerability, please report it to [email protected] rather than disclosing it publicly.
Commit sets only what it needs to work: a session cookie from the authentication provider, a theme preference, and a request correlation identifier used to trace errors. There are no advertising or cross-site tracking cookies.
If this policy changes materially, the version date above changes and the change is announced in the app before it takes effect. Continuing to use Commit after that means you accept the revised policy.