Home/Privacy Notice
Privacy & Data Protection Notice

Privacy Notice

Effective: September 1, 2026Version: 1.0.0 (Pending Final Legal Review)

Your Data Rights: As an authenticated user, you can inspect your personal account data, request data exports, and submit deletion or correction requests directly through the Data Rights Center.

1. Information We Collect

  • Recruiter & User Account Data: Name, work email address, password hash (salted PBKDF2-HMAC-SHA256), assigned organization, and Multi-Factor Authentication state.
  • Candidate Data: Sourced applicant names, telephone/WhatsApp numbers, email addresses, Workday application status, and recruiter engagement notes.
  • Security Telemetry: Client IP address, user-agent string, session tokens, rate limiting counters, and immutable security audit logs.

2. How We Use Information

Personal information is processed strictly for:

  • Delivering automated WhatsApp and Email candidate follow-up cadences.
  • Maintaining secure multi-tenant access control and session management.
  • Detecting and mitigating unauthorized account access via rate limiting and lockout safeguards.
  • Fulfilling legal obligations and processing data privacy requests.

3. Verified Third-Party Subprocessors

Strictly Services Actually Used

REQUVIA engages only verified third-party communication networks strictly required for candidate notification dispatch and multi-channel engagement:

ProviderCategoryProcessing PurposeData HandledStatus
Loading active subprocessors...

Optional & Customer-Configured Integrations (Dormant by Default)

These integrations are inactive unless the customer or recruiter explicitly provides third-party API credentials. No candidate personal data is sent to these services.

ServiceCategoryConditional PurposeCandidate DataStatus
No optional integrations configured.
Local On-Premises Privacy Architecture (Ollama & PaddleOCR)

REQUVIA's conversational AI reasoning is executed locally on-premises via self-hosted Ollama (llama3.2:3b), and applicant screenshot text verification is performed using local in-memory PaddleOCR. Candidate messages, interview transcripts, and uploaded screenshot files are never transmitted to external cloud LLMs or public foundation models. Google Gemini is not utilized in the REQUVIA runtime.

4. Data Retention & Disposal

Data is retained only as long as necessary for recruitment operations. Configurable retention schedules and absolute Legal Holds are administered by the Organization Owner in accordance with our Retention Framework.

5. Privacy Questions & Grievances

For any privacy inquiries or to file a grievance regarding data handling, please visit our Grievance Redressal Portal or email hello@requvia.com.