Privacy Policy

Last updated: October 2, 2026

This Privacy Policy describes how Aztia LLC ("Aztia," "we") — a company domiciled in St. Petersburg, Florida, United States — collects, uses, shares, and protects personal data processed through the HURA platform (the "Service").

HURA is offered to Client companies located in the United States and in various Latin American countries. This policy applies to the data of Account users (recruiters and administrators at the Client company), Candidates invited to take assessments, and visitors to the public pages of the HURA marketing site (www.huraapp.com), regardless of the country from which the Service is accessed.

This policy supplements our Terms of Service and the Data Processing Addendum ("DPA") that Aztia enters into with each Client company. Capitalized terms not defined here have the meaning given to them in the Terms of Service.

1. Data Controller

Aztia LLC is the controller of personal data related to the Account, billing, general use of the Service, and visits to the public pages of the marketing site. With respect to Candidate personal data, Aztia acts as a processor on behalf of and on the instructions of the Client company, which acts as the controller, in accordance with the DPA. Aztia processes Candidate data on its own account only once it has been aggregated or de-identified as described in Section 3.

Controller identification: Aztia LLC, 1101 4th Street South, Suite 300, St. Petersburg, Florida 33701, United States; email info@aztia.co. The area responsible for handling personal data inquiries and complaints is Aztia's Privacy Office.

2. Data We Collect

Account and Client-user data: name, corporate email address, job title, role within the platform, and access and activity logs, including the record of acceptance of the Terms of Service.

Billing data: company name, country of domicile, billing contact information, and payment data processed directly by our payment processor (Aztia does not store full card numbers).

Candidate data: name, email address, responses and deliverables submitted in assessments (code, text, files), interview transcripts where applicable, AI-generated scores and feedback, and technical session metadata (IP address, device type, timestamps) collected for assessment-integrity purposes.

Aztia does not use facial recognition, facial or emotion analysis, or voiceprints, and does not collect biometric identifiers. The Service does not request sensitive data from Candidates, and Client companies must not require it through the Service.

Site technical data: cookies and similar technologies described in Section 9, server logs, and usage analytics from the marketing site and the application. On the public pages of the marketing site, this includes the visitor's IP address, pages visited, visit duration, referring page, browser and device type, and cookie identifiers. These data are used to identify the company or organization from which the visit originates, as described in Sections 5 and 9.

3. Purposes and Legal Basis for Processing

We use personal data to: (i) create and administer Accounts; (ii) generate, deliver, and grade assessments using artificial intelligence; (iii) process payments and billing; (iv) prevent fraud and ensure assessment integrity; (v) provide customer support; (vi) comply with legal, contractual, accounting, and regulatory obligations; (vii) improve the Service; and (viii) learn which companies visit the public pages of the HURA marketing site and contact them with commercial information about the Service. For Candidate data, purpose (vii) is carried out only with aggregated or de-identified data that cannot reasonably be linked to the Client company or any individual. Purpose (viii) is carried out only with marketing-site visitor data, never with Candidate data.

For Account and billing data, where required by applicable law, Aztia processes the data based on the data subject's prior, express, and informed authorization, obtained at registration. For Candidate data, the Client company, as controller, determines the legal basis for processing and is responsible for obtaining the Candidate's consent or authorization where required by law. In other jurisdictions, the legal basis may be: performance of a contract with the Client company or the data subject; the data subject's consent; compliance with a legal obligation; or the legitimate interest of Aztia or the Client company in operating the hiring process, provided that interest does not override the data subject's fundamental rights. For marketing-site visitor data, Aztia processes the data based on its legitimate interest in promoting the Service to other businesses, provided that interest does not override the visitor's rights; visitors may object as described in Sections 8 and 9.

4. Use of Artificial Intelligence

To generate assessment challenges, grade responses, and produce comparative analyses, HURA processes Assessment data through third-party AI providers (currently, Anthropic and OpenAI), under commercial terms that prohibit them from using such information to train their models. Aztia does not use Candidate data to train artificial intelligence models.

AI-generated results are decision-support tools and may contain inaccuracies. Aztia does not make hiring decisions: the Service produces scores and analyses that are reviewed by the Client company's personnel, and the Client company makes the decision, as described in the Terms of Service. If you are a Candidate and wish to request human review, an alternative assessment, or a reasonable accommodation, please contact the company that invited you.

5. How We Share Data

  • With the Client company that invited the Candidate: their responses, scores, and assessment analysis.
  • With cloud infrastructure providers (Google Cloud Platform) that host the platform and databases.
  • With third-party AI providers, as described in Section 4.
  • With our payment processor (Stripe, Inc.) to process subscriptions, Top-Ups, and billing. Stripe does not receive Candidate data.
  • With ZoomInfo Technologies LLC, through its WebSights tool, which loads only on the public pages of the marketing site (the home page, the pricing page, and the legal pages). ZoomInfo receives the browsing data described in Section 2 to identify the visitor's company. ZoomInfo does not receive Account, billing, or Candidate data, and its tool does not load on the login page, inside the application, or on the pages where Candidates take their assessments.
  • With public or judicial authorities when required by applicable law, or to protect the rights, safety, or property of Aztia, its Clients, or third parties.
  • In connection with a merger, acquisition, or sale of Aztia's assets, subject to protections equivalent to those described in this policy.

Aztia does not sell personal data or share it for cross-context behavioral advertising. ZoomInfo processes marketing-site visitor data solely on Aztia's behalf, as its service provider, and does not use it for its own purposes.

6. International Data Transfers

Aztia is headquartered in the United States, and its infrastructure and AI providers may process data in the United States or other countries. Because HURA is offered to Clients in various Latin American countries, use of the Service necessarily involves the international transfer of personal data to the United States and, where applicable, to the countries where our subprocessors operate. We implement reasonable contractual, technical, and organizational measures to protect such data during transfer and processing, consistent with generally recognized data-protection principles.

When Aztia receives personal data as a processor for a Client company, the transmission is governed by the DPA, which includes the terms that applicable law requires for agreements with processors.

7. Data Retention

While the Client company's subscription is active, Aztia retains Account, billing, and Candidate data, unless the Client company deletes it or instructs its deletion earlier.

When the subscription is canceled or terminated, or a free trial ends without a Plan being purchased, the Account becomes inactive and Aztia retains the data for twelve (12) months, so that the Client company can reactivate its Account and recover its information. If the Account is not reactivated within those twelve (12) months, Aztia deletes or anonymizes the Account and Candidate data. Backup copies are deleted in their normal rotation cycle, which does not exceed thirty-five (35) days.

This does not prevent the Client company from requesting earlier deletion of its data, or a data subject from exercising the right to deletion under Section 8. Aztia will retain data for longer only where required by law, such as accounting and billing records.

8. Data Subject Rights

Every data subject whose personal data is processed through the Service, regardless of country, has the right to: access your personal data, request its correction or update, request its deletion, object to certain processing, request data portability, and withdraw consent, without affecting processing already carried out.

If you are a Candidate and wish to exercise these rights, we recommend first contacting the company that invited you to the assessment, as it is the controller of your data. You may also write to us directly at info@aztia.co, and we will coordinate with the relevant Client company as needed.

If you visited the public pages of our marketing site, you may also object to the use of your browsing data for marketing purposes. To do so, you may configure your browser to block marketing cookies or write to us at info@aztia.co, and Aztia will handle your request with ZoomInfo.

Requests must be sent to info@aztia.co and include the data subject's name, a means of identification, a description of the request, a contact address, and any supporting documents. Aztia may verify your identity before responding. Inquiries will be answered within a maximum of ten (10) business days, and claims, including requests for correction, deletion, or objection, within a maximum of fifteen (15) business days, extendable in both cases by half of the initial period, with prior notice to the data subject stating the reasons for the delay. If you are not satisfied with the response, you may contact the data-protection authority of your country.

If the data-protection law of your country grants you rights or safeguards in addition to those described in this policy, Aztia will honor them.

9. Cookies and Similar Technologies

Our marketing site and application use the following types of cookies and similar technologies:

  • Essential cookies: required for the Service to operate, for example, to keep you logged in.
  • Analytics cookies: in some cases, to understand how the site is used.
  • Marketing cookies: only on the public pages of the marketing site (the home page, the pricing page, and the legal pages). We use ZoomInfo WebSights to learn which companies visit the site, which pages they view, and how long they stay, in order to contact them with commercial information about HURA. These cookies are not used on the login page, inside the application, or on the pages where Candidates take their assessments.

You may reject marketing cookies by configuring your browser to block them; this does not affect site functionality. If you block essential cookies, the site may not work properly.

10. Information Security

Aztia implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure, including encryption in transit, role-based access controls, and infrastructure monitoring. No system is completely secure. In the event of a security incident affecting Candidate data, Aztia will notify the affected Client company without undue delay and, in any event, within seventy-two (72) hours after confirming it, and will notify authorities and data subjects as required by applicable law.

11. Children

The Service is not directed at minors, and we do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to Account Administrators by email or an in-app notice and, where required by applicable law, we will request a new authorization. The "Last updated" date at the top of this page indicates the current version.

13. Contact

To exercise your rights or ask questions about the processing of your personal data, write to us at info@aztia.co or contact Aztia's Privacy Office at 1101 4th Street South, Suite 300, St. Petersburg, Florida 33701, United States.

Annex — Candidate Notice

Before you begin: [Company name] has invited you to complete this assessment through HURA, a platform operated by Aztia LLC. Your responses will be scored with the help of artificial intelligence. Scores are a decision-support tool reviewed by [Company name]'s personnel; HURA does not make hiring decisions. [Company name] is responsible for your personal data, and Aztia processes it on its behalf. If you would like to request human review, an alternative assessment, or a reasonable accommodation, or to exercise your data rights, contact [Company name] at [contact]. Learn more in the HURA Privacy Policy www.huraapp.com/privacy. By selecting "Start," you confirm that you have read this notice and authorize the processing of your personal data for this assessment.