Data Processing Agreement

This Data Processing Agreement ("DPA") governs the processing of personal data by Scoutly on behalf of our users. This agreement supplements our Privacy Policy and Terms of Service, and outlines our commitment to privacy and data protection standards, including GDPR and DPDP compliance.

For the purposes of this DPA and applicable data protection laws:

• Data Controller: You, the user and job candidate, are the Data Controller. You determine the purpose and content of the resume, profile, and application materials you upload.
• Data Processor: Scoutly acts as the Data Processor. We only process personal data on your documented instructions to index job opportunities, tailor resumes, generate application answers, and assist your job hunt.

Scoutly implements and maintains robust technical and organizational measures to protect candidate data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Our security measures include encryption in transit (TLS 1.3), encryption at rest (AES-256), multi-tenant schema isolation, stateless AI processing without third-party training, and strict role-based access controls.

To provide our AI and cloud services, Scoutly may engage verified third-party subprocessors. We ensure that all subprocessors are bound by strict data protection agreements.

Our core authorized subprocessors include:

• Cloud & Database Hosting: Dedicated VPS and managed database infrastructure in Frankfurt (EU).
• AI Language Models: OpenAI (Zero-Data Retention API) & Google Vertex AI.
• Payment Processing: Stripe for PCI-DSS compliant subscription billing.
• Transactional Email: Resend for security alerts and verification emails.

For our complete list of active subprocessors and server locations, visit our Subprocessors Directory.

We provide candidates full control over their personal data. You may export or permanently delete your profile, stored resumes, and application tracking history directly from your account settings at any time, or contact privacy@scoutly.in for automated erasure requests.