Skip to content

trust

Data processing

A summary of how we process data for you. A signed data processing agreement is available on paid plans.

Key terms

Roles
Your company is the controller of candidate and staff data; ArivuGuru processes it on your instructions to run agHire.
Purpose
Recruiting only: receiving applications, assessing, scheduling, deciding and communicating with candidates.
Location
Stored and processed in India (Google Cloud, asia-south1). AI providers outside India receive redacted text only.
Security
Tenant isolation, encryption in transit and at rest, KMS-encrypted secrets, least-privilege access, tamper-evident audit.
Sub-processors
Listed on the sub-processors page; changes are announced before they take effect.
Data subject requests
Export and deletion tools that cover every copy, completed within 30 days.
Retention
Your chosen retention period (24 months by default), then automatic deletion.
Breach notice
We tell you without undue delay after becoming aware of a breach affecting your data.
Free plan
Only aggregated, anonymised product analytics. No identifiable candidate or company data is used, and no AI is trained on identifiable records. Paid plans exclude even this.

Draft pending legal review. For the full agreement, contact us.