GDPR Compliance

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organisations processing personal data of individuals in the European Economic Area (EEA). Huntwise AI B2B is committed to GDPR compliance and provides tools to help your organisation meet its obligations when using our platform to process candidate data.

Huntwise AI processes personal data on the following legal grounds:

• Contract: To deliver the services you have subscribed to
• Legitimate Interest: To improve our platform and prevent fraud
• Consent: Where candidates provide explicit consent via your public apply page
• Legal Obligation: To comply with applicable laws

As a data subject or on behalf of candidates in your pipeline, the following rights apply:

We implement appropriate technical and organisational measures to protect personal data:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Access controls and authentication systems
• Regular security monitoring and audits
• Staff training on data protection responsibilities
• Data minimisation and purpose limitation principles

We retain personal data only as long as necessary to fulfil the purposes for which it was collected. Candidate data is retained for the duration of your active subscription. Upon cancellation, data is available for export for 30 days before permanent deletion. You may request immediate deletion at any time.

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place such as Standard Contractual Clauses (SCCs) adopted by the European Commission. Our primary infrastructure is hosted on Google Cloud (Firebase), which provides GDPR-compliant data processing agreements.

As Huntwise AI acts as a data processor on your behalf, we offer a Data Processing Agreement (DPA) for organisations that require one under GDPR Article 28. To request a DPA, please contact us at dpa@huntwiseai.com.

We use the following sub-processors to deliver our service, all bound by GDPR-compliant data processing agreements:

• Google Firebase — Database and file storage
• OpenAI — AI candidate scoring (data not used for model training)
• Razorpay — Payment processing
• Resend — Transactional email delivery
• Upstash — Rate limiting and caching
• Microsoft Clarity — Anonymous usage analytics

If you believe your GDPR rights have been violated, you have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can resolve your concern directly.

Email: privacy@huntwiseai.com
DPA Requests: dpa@huntwiseai.com
Address: Huntwise AI, Bangalore, India