Data Processing Agreement
Last updated: October 9, 2026
Our Data Processing Agreement details how Scoutly handles and protects personal candidate data when acting as a data processor for our users, ensuring strict compliance with global privacy standards.
1.Introduction
This Data Processing Agreement ("DPA") governs the processing of personal data by Scoutly on behalf of our users. This agreement supplements our Privacy Policy and Terms of Service, and outlines our commitment to privacy and data protection standards, including GDPR and DPDP compliance.
2.Roles and Responsibilities
For the purposes of this DPA and applicable data protection laws:
- Data Controller: You, the user and job candidate, are the Data Controller. You determine the purpose and content of the resume, profile, and application materials you upload.
- Data Processor: Scoutly acts as the Data Processor. We only process personal data on your documented instructions to index job opportunities, tailor resumes, generate application answers, and assist your job hunt.
3.Data Security
Scoutly implements and maintains robust technical and organizational measures to protect candidate data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
Our security measures include encryption in transit (TLS 1.3), encryption at rest (AES-256), multi-tenant schema isolation, stateless AI processing without third-party training, and strict role-based access controls.
4.Subprocessors
To provide our AI and cloud services, Scoutly may engage verified third-party subprocessors. We ensure that all subprocessors are bound by strict data protection agreements.
Our core authorized subprocessors include:
- Cloud & Database Hosting: Dedicated VPS and managed database infrastructure in Frankfurt (EU).
- AI Language Models: OpenAI (Zero-Data Retention API) & Google Vertex AI.
- Payment Processing: Stripe for PCI-DSS compliant subscription billing.
- Transactional Email: Resend for security alerts and verification emails.
For our complete list of active subprocessors and server locations, visit our Subprocessors Directory.
5.Data Subject Rights
We provide candidates full control over their personal data. You may export or permanently delete your profile, stored resumes, and application tracking history directly from your account settings at any time, or contact privacy@scoutly.in for automated erasure requests.
Contact Us
If you have any questions, concerns, or feedback, feel free to reach out to us. We are always here to help.