How we handle your data.
Last updated: 3 July 2026
1. Introduction
Vetta (“we”, “our”, “us”) is a product of nSearch Technologies Pte. Ltd., registered in Singapore. This Privacy Policy explains how we collect, use, and protect personal data when you use the Vetta platform or interact with our website at vetta-ai.com.
We are committed to compliance with Singapore's Personal Data Protection Act 2012 (PDPA), the UAE Federal Personal Data Protection Law (PDPL), and the EU General Data Protection Regulation (GDPR) where applicable.
2. Platform Data Model
Vetta does not come preloaded with any existing candidate database, talent pool, or candidate data of any kind. The platform is a software tool and workflow system, not a marketplace or talent directory.
It is the sole responsibility of each customer to upload, import, sync, or otherwise populate the platform with their own candidate data. Any candidate information present within a customer workspace has been provided by that customer or their authorised users.
Customer workspaces are logically isolated. Data uploaded by one organisation is never visible to, shared with, or accessible by any other organisation using the platform.
3. Data We Collect
We collect the following categories of personal data:
4. How We Use Your Data
We process personal data for the following purposes:
- Providing, operating, and improving the Vetta platform
- Processing AI-assisted candidate scoring as configured and directed by your organisation
- Communicating product updates, security notices, and support responses
- Meeting our legal and regulatory obligations
- Generating anonymised, aggregated analytics to improve platform performance (no individually identifiable data is used)
We do not use your organisation's candidate data to train or improve AI models for other clients. Your data is processed exclusively within your organisation's workspace and is never used to build shared datasets or cross-customer models.
5. AI Model and Processing
Vetta uses a self-hosted AI model. All AI inference and candidate evaluation is performed on infrastructure owned and operated by nSearch Technologies Pte. Ltd. No candidate data is transmitted to, processed by, or shared with any third-party AI provider or external AI service.
Our self-hosted model is used exclusively to assist with tasks you explicitly configure, including candidate scoring against your defined criteria, interview question generation based on the candidate's profile and role requirements, and post-interview summary generation. All AI-assisted outputs are clearly identified within the platform.
Because all AI processing occurs on our own infrastructure, your candidate data never leaves our controlled environment for AI purposes. This architecture is a deliberate design choice to support our data residency commitments and to ensure compliance with PDPA, PDPL, and GDPR requirements.
6. Data Sources and Customer Responsibility
All candidate data within the Vetta platform is sourced directly from our customers. The platform does not independently collect, scrape, purchase, or otherwise acquire candidate information from third-party databases or public sources.
As the data controller, each customer is responsible for ensuring that any personal data uploaded to the platform has been collected lawfully, that appropriate consent or legal basis exists for processing, and that the data is accurate and up to date. Vetta acts as a data processor operating on the customer's documented instructions.
Customers are also responsible for informing their candidates about how their data will be processed, including any AI-assisted evaluation, in accordance with applicable data protection laws.
7. Data Residency and Transfers
Vetta offers data residency options in Singapore and the UAE. By default, your data is stored in the region you select at account setup. We do not transfer personal data outside your selected region without your explicit instruction.
Where cross-border data transfers are necessary (for example, for support or infrastructure purposes), we ensure appropriate safeguards are in place consistent with PDPA, PDPL, and GDPR requirements.
8. Data Retention
We retain personal data for as long as your organisation's account is active, plus any additional period required by applicable law. Candidate data retention is governed by the retention policy configured by your organisation administrator.
Upon account termination, all data associated with your workspace is deleted within 90 days unless a longer retention period is required by law or explicitly requested by the customer.
9. Your Rights
Depending on your jurisdiction, you may have rights including the right to access, correct, delete, or port your personal data, and to object to or restrict its processing.
If you are a candidate whose data has been uploaded by an employer or agency using Vetta, please direct your data rights request to the organisation that uploaded your information. As a data processor, we will assist the data controller in fulfilling such requests in accordance with applicable law.
For direct enquiries, contact us at [email protected].
10. Security
We implement encryption at rest, encryption in transit, role-based access controls, and regular security testing to protect personal data. For full details on our security posture, see our Security & Trust page.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact
For privacy-related queries, contact our Data Protection Officer at [email protected] or write to nSearch Technologies Pte. Ltd., 60 Paya Lebar Road, #08-48 Paya Lebar Square, Singapore 409051.