Data processing terms and scope
This page sets out proposed processing terms for discussion. It is not an executed DPA. We defer a customer agreement until the parties review and accept it.
Agreement status
The current private test has no signed customer DPA. This page does not create one through browsing or a contact submission.
Before production or paid use, the parties need to confirm their legal identities, processing instructions, applicable law, and final terms.
Use this scope to identify questions and data limits before a test. The privacy notice and candidate consent still apply to the activities they describe.
Proposed processing instructions
The organization determines the hiring purpose, permitted users, and records needed for the test. Vikawork processes those records to provide and support the software.
The intended work includes hosting, storing, retrieving, and deleting records; authorized AI assistance; and transactional messages.
The scope can include candidates, interview participants, and staff users. Data can include contact details, profiles, résumés, hiring notes, and interview content.
The test duration and deletion instructions need agreement. Do not add sensitive categories or unrelated data without a separate review.
Proposed responsibilities
The organization would provide lawful instructions, required notices, and permissions for the data it supplies. It would control member access and hiring decisions.
Vikawork would process data for those instructions, limit authorized access, and tell the organization if an instruction cannot proceed safely or lawfully.
The parties would agree how to handle access requests, corrections, deletion, security incidents, and any required evidence of controls.
These proposed duties need final agreement. This page does not state a notification deadline, audit right, liability cap, or transfer mechanism.
Service providers and data regions
This list covers the website, contact handling, and the VikaHire private test. Other product pages describe plans, not the same deployed configuration.
Provider retention and model-training terms depend on the service, account, and settings. We do not promise zero provider retention or India-only processing.
- Google Cloud and Firebase
Website hosting, product infrastructure, and contact records.
Configured product infrastructure and contact storage: Mumbai, India (GCP asia-south1). Firebase Hosting serves website files through a global network.
- Google Gemini
The default AI provider for VikaHire, including text assistance, scoring, and embeddings. Requests contain the data that each feature needs.
AI processing can occur outside India. The product infrastructure region does not fix the AI processing region.
- OpenAI
VikaHire speech transcription and generated interview speech, when those features apply.
Processing can occur outside India. The deployment and provider settings determine the applicable data terms.
- Sentry
Error reports from the VikaHire frontend and backend. This marketing site does not include a Sentry client.
US data region. Error reports can include technical context about a failed request.
- Resend
Transactional email for VikaHire and the contact service when active.
The sender setup uses Tokyo. That setting is not a promise that every mail copy stays in Japan.
- Google Workspace
The company mailbox receives enquiries and replies to them.
This notice makes no India-only storage promise for mailbox copies.
Controls and incident handling
The security overview describes the website and VikaHire controls. Their scope does not extend automatically to every planned product.
Report suspected exposure to hello@vikawork.com. Include enough technical detail to identify the issue without sending additional personal data.
The final agreement needs named incident contacts, notification duties, and a process to investigate and reduce harm.
Return, deletion, and remaining records
The final agreement must define export, deletion, backups, provider copies, and records that must remain after a test ends.
Interview content retention does not cover every hiring record. Contact-service retention does not cover mailbox copies. Read the relevant notice for each activity.
Do not assume that ending access deletes all records. Give the responsible organization a clear request and confirm the outcome.
Discuss your processing requirements
Tell us which product you need, the data involved, and the countries that matter to your organization. Do not send sample personal records.
We can discuss the proposed scope and the open terms before you choose whether to test. Production use requires a separate agreement.