Privacy Notice
Your Data Rights: As an authenticated user, you can inspect your personal account data, request data exports, and submit deletion or correction requests directly through the Data Rights Center.
1. Information We Collect
- Recruiter & User Account Data: Name, work email address, password hash (salted PBKDF2-HMAC-SHA256), assigned organization, and Multi-Factor Authentication state.
- Candidate Data: Sourced applicant names, telephone/WhatsApp numbers, email addresses, Workday application status, and recruiter engagement notes.
- Security Telemetry: Client IP address, user-agent string, session tokens, rate limiting counters, and immutable security audit logs.
2. How We Use Information
Personal information is processed strictly for:
- Delivering automated WhatsApp and Email candidate follow-up cadences.
- Maintaining secure multi-tenant access control and session management.
- Detecting and mitigating unauthorized account access via rate limiting and lockout safeguards.
- Fulfilling legal obligations and processing data privacy requests.
3. Verified Third-Party Subprocessors
Strictly Services Actually UsedREQUVIA engages only verified third-party communication networks strictly required for candidate notification dispatch and multi-channel engagement:
| Provider | Category | Processing Purpose | Data Handled | Status |
|---|---|---|---|---|
| Loading active subprocessors... | ||||
Optional & Customer-Configured Integrations (Dormant by Default)
These integrations are inactive unless the customer or recruiter explicitly provides third-party API credentials. No candidate personal data is sent to these services.
| Service | Category | Conditional Purpose | Candidate Data | Status |
|---|---|---|---|---|
| No optional integrations configured. | ||||
REQUVIA's conversational AI reasoning is executed locally on-premises via self-hosted Ollama (llama3.2:3b), and applicant screenshot text verification is performed using local in-memory PaddleOCR. Candidate messages, interview transcripts, and uploaded screenshot files are never transmitted to external cloud LLMs or public foundation models. Google Gemini is not utilized in the REQUVIA runtime.
4. Data Retention & Disposal
Data is retained only as long as necessary for recruitment operations. Configurable retention schedules and absolute Legal Holds are administered by the Organization Owner in accordance with our Retention Framework.
5. Privacy Questions & Grievances
For any privacy inquiries or to file a grievance regarding data handling, please visit our Grievance Redressal Portal or email hello@requvia.com.
