Privacy Notice
Data Controller & Operator: REQUVIA is an individually owned SaaS platform operated from India. As an authenticated user or candidate, you can inspect your personal account data, request data exports, and submit deletion or correction requests directly through our Data Rights Inquiries or by emailing hello@requvia.com.
1. Information We Collect
- Recruiter & User Account Data: Name, work email address, password hash (salted PBKDF2-HMAC-SHA256), assigned organization, and Multi-Factor Authentication state.
- Candidate Data: Sourced applicant names, telephone/WhatsApp numbers, email addresses, Workday application status, and recruiter engagement notes.
- Security Telemetry: Client IP address, user-agent string, session tokens, rate limiting counters, and immutable security audit logs.
2. How We Use Information
Personal information is processed strictly for:
- Delivering automated WhatsApp and Email candidate follow-up cadences.
- Maintaining secure multi-tenant access control and session management.
- Detecting and mitigating unauthorized account access via rate limiting and lockout safeguards.
- Fulfilling legal obligations and processing data privacy requests.
3. Verified Third-Party Subprocessors
Strictly Services Actually UsedREQUVIA engages only verified third-party communication networks strictly required for candidate notification dispatch and multi-channel engagement:
| Provider | Category | Processing Purpose | Data Handled | Status |
|---|---|---|---|---|
| WhatsApp (Meta Platforms, Inc.) | COMMUNICATION_WHATSAPP | Transmission of candidate interview follow-ups, reminder notifications, and receiving candidate replies via direct protocol socket gateway. | Candidate telephone numbers, candidate names, outbound message content, candidate inbound replies, delivery receipts. | ACTIVE |
| Corporate SMTP Mail Relays (Rediffmail Pro / Google Workspace / Microsoft 365) | EMAIL_PROVIDER | Dispatching candidate notification emails, interview confirmations, Workday application guidance, and follow-up emails via the recruiter-configured corporate SMTP mail host. | Candidate names, email addresses, email subjects, notification body contents. | ACTIVE |
| Groq Inc. | OPTIONAL_CLOUD_AI | Optional secondary cloud LLM fallback for Job Description parsing and LinkedIn post generation. Dormant unless operator configures API key. Does not process candidate WhatsApp messages or screening. | Job description specifications and recruiter prompt context. No candidate personal records. | OPTIONAL |
| Microsoft Entra ID (Microsoft Corporation) | OPTIONAL_SSO | Enterprise federated Single Sign-On authentication for corporate client tenants. | Corporate user identity, email, enterprise tenant ID. | OPTIONAL |
REQUVIA's conversational AI reasoning is executed locally on-premises via self-hosted Ollama (llama3.2:3b), and applicant screenshot text verification is performed using local in-memory PaddleOCR. Candidate messages, interview transcripts, and uploaded screenshot files are never transmitted to external cloud LLMs or public foundation models. Google Gemini is not utilized in the REQUVIA runtime.
4. Data Retention & Disposal
Data is retained only as long as necessary for recruitment operations. Configurable retention schedules and absolute Legal Holds are administered by the Organization Owner in accordance with our Retention Framework.
5. Privacy Questions & Grievances
For any privacy inquiries or to file a grievance regarding data handling, please visit our Grievance Redressal Portal or email hello@requvia.com.