trust
Data processing
A summary of how we process data for you. A signed data processing agreement is available on paid plans.
Key terms
- Roles
- Your company is the controller of candidate and staff data; ArivuGuru processes it on your instructions to run HireFlow.
- Purpose
- Recruiting only: receiving applications, assessing, scheduling, deciding and communicating with candidates.
- Location
- Stored and processed in India (Google Cloud, asia-south1). AI providers outside India receive redacted text only.
- Security
- Tenant isolation, encryption in transit and at rest, KMS-encrypted secrets, least-privilege access, tamper-evident audit.
- Sub-processors
- Listed on the sub-processors page; changes are announced before they take effect.
- Data subject requests
- Export and deletion tools that cover every copy, completed within 30 days.
- Retention
- Your chosen retention period (24 months by default), then automatic deletion.
- Breach notice
- We tell you without undue delay after becoming aware of a breach affecting your data.
- Free plan
- On the free plan, redacted application data may be used by ArivuGuru to improve HireFlow; paid plans exclude this.
Draft pending legal review. For the full agreement, contact us.