1. About this policy
This policy explains how ORGAI SOLUTIONS PRIVATE LIMITED (“we”, “us”) handles personal information in the Striveo mobile and web application (“Striveo”, “the app”).
Striveo is a workplace learning and development platform. It is supplied to organisations for use by their employees. It is not available for individual public sign-up.
Contact: +919650399980
Registered address: 1578, Vasant Kunj, New Delhi, New Delhi - 110070, India (IN)
2. Our role, and your employer's role
Striveo is provided to you by your employer. In data protection terms:
- Your employer is the controller. They decide what data goes into Striveo, who may see it, and how long it is kept.
- We are the processor. We handle that data on your employer's instructions, under a contract with them.
This means that if you want to see, correct or delete your data, you should contact your employer first. We will help them respond, but we generally cannot act on those requests directly. See section 10.
3. Information we collect
3.1 Account information
Provided by your employer when your account is created, or by you at sign-in:
- Username
- Full name
- Email address
- Job title or designation
- Internal user ID
- Password (stored only in hashed form; never in plain text)
- One-time passcodes used to verify sign-in
3.2 Learning and assessment information
Generated as you use the app:
- Courses, modules and lessons assigned to you, and your progress through them
- Assessment questions, your answers, scores and results
- Assessment history over time
- Competency levels and proficiency ratings
- Goals and development plans you create with the AI coach
- Feedback and ratings you submit on courses
- Certificates and reports generated for you
3.3 Audio
Assessments and Chat with Coach are conducted as a live conversation with an AI avatar, either through audio or text. When you choose to interact using audio, only then the app uses your device's microphone.
- We ask for permission before first use. You can decline, and you can revoke the permission in your device settings at any time.
- Audio is streamed in real time to deliver the session.
- User audio is processed using speech-to-text technology to generate the conversation transcript, and AI-generated text responses are converted to audio using text-to-speech technology for chat or assessment sessions.
- User’s Audio from the chat or assessment sessions is recorded and stored in Azure Blob Storage. The conversation/transcript associated with the chat or assessment is stored in the application database.
- The conversation is processed by our AI provider to provide AI Coach responses and, for assessments, to evaluate responses and generate assessment results. See Section 5.
The app does not access your microphone at any other time.
3.4 Calendar information
If you choose to connect your Microsoft Outlook account, we access your calendar in order to show your learning schedule alongside your work schedule. This connection is optional, you initiate it yourself, and you can disconnect it at any time.
The Microsoft Graph permissions requested include Calendars.Read, Calendars.Read.Shared, Calendars.ReadBasic, Calendars.ReadWrite, and Calendars.ReadWrite.Shared, along with certain Microsoft identity, email, and profile permissions required for account authentication and integration.
Calendar information accessed through the integration is stored in the application database and is used to provide the calendar-related functionality within the app.
3.5 Files
Where you choose to download a report, template or certificate, the file is saved to your device's Documents folder. We do not read other files on your device.
3.6 Technical information
- Authentication token and session identifier, stored on your device so you stay signed in. These are cleared when you sign out or your session expires.
- A session expiry timestamp, stored in your device's local storage.
Server application logs generally contain application-level logs generated by the application running in the containers. By default, these logs do not record users' IP addresses, device types, operating system versions, or app versions unless the application is specifically configured to capture this information.
Server logs are maintained on the Kubernetes nodes. The default log retention period is 30 days, subject to the configured log rotation and file-size limits. Once the applicable log size limit is reached, older logs are removed as new logs are generated.
4. How we use your information
| Purpose | Data used |
|---|---|
| Creating and securing your account | Account information |
| Signing you in and keeping you signed in | Account information, technical information |
| Delivering courses and tracking progress | Learning and assessment information |
| Running AI coaching and AI-led assessments | Learning information, audio |
| Producing reports for you and your employer | Learning and assessment information |
| Showing your learning schedule | Calendar information |
| Diagnosing faults and keeping the service secure | Technical information |
We do not use your information for advertising, and we do not sell it.
Customer data, including AI coaching conversations and assessment responses, is not used by us to train, fine-tune or improve AI models, and we do not authorise our AI provider to use this data for model training or fine-tuning. The AI models are used only to provide the required coaching, assessment and speech-processing functionality.
6. Where your information is held
Striveo application services and customer data are hosted on Microsoft Azure in the India region. Application data is stored in Azure Database for PostgreSQL, user audio is stored in Azure Blob Storage, and backups are maintained within the same region in India. Certain AI coaching and assessment conversation data is processed by Groq as an external AI service provider and may be processed outside India in accordance with applicable contractual and data protection requirements.
7. How long we keep it
| Data | Retention |
|---|---|
| Account information | For as long as your employer's subscription is active. |
| Learning and assessment records | Retained as required and deleted when no longer needed. |
| Audio from conversation and assessments | Retained as required and deleted when no longer needed. |
| Server logs | 30 days |
| Session tokens on your device | Until sign-out or session expiry |
When your employer's contract ends, we delete or return their data in line with that contract.
8. Security
- Encryption in transit - All traffic between the app and our servers is protected using HTTPS encryption.
- Password protection - Passwords are stored in hashed form and are never stored in plain text.
- Authentication - Sign-in can require a one-time passcode in addition to the user's password.
- Session security - User sessions expire automatically after a period of inactivity.
- Production access control - Access to production data is restricted to authorised personnel who require it for their role.
- Encryption at rest - Data stored in our databases is encrypted at rest using AES-256 encryption. The data is hosted in the Microsoft Azure Central India region.
- Access logging - IconSole maintains logs of users who sign in to the application.
- Access control and authorization - Users are provisioned through IconSole, which manages authentication and authorization for access to the Striveo application.
No system is completely secure, but we take these measures to protect your information.
9. Legal bases for processing
Where the UK GDPR or EU GDPR applies, your employer, as the data controller, determines the applicable legal basis for processing your personal information. We process that information on your employer's instructions and in accordance with our contract with them.
For optional features such as microphone access for audio interactions and connecting your Outlook calendar, we request the required user permission. You can withdraw these permissions at any time through the app, your device settings, or your connected account settings.
We may also process information where necessary to comply with applicable legal obligations.
Where India's Digital Personal Data Protection Act, 2023 and applicable Digital Personal Data Protection Rules, 2025 apply, personal data is processed in accordance with those requirements.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to the processing of your personal information, and to withdraw consent.
Because your employer controls your Striveo data, please raise these requests with your employer. They will contact us where they need our help. If you contact us directly, we will pass your request to your employer and tell you that we have done so.
If you are unhappy with how a request was handled, you may complain to your local data protection authority.
11. Account deletion
Striveo accounts are created and removed by your employer. To have your account and data removed, contact your employer's HR or L&D team.
12. Children
Striveo is intended for use by employees and is not directed at children. We do not knowingly collect information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. Material changes will be notified to your employer, and the “Last updated” date above will change. Continued use of the app after an update means the revised policy applies.
14. Contact us
Email: contact.us@orgaisolutions.com
Post: 1578, Vasant Kunj, New Delhi, New Delhi - 110070, India (IN)