How we handle your data.

Last updated: 1 January 2025

1. Introduction

Vetta (“we”, “our”, “us”) is a product of nSearch Technologies Pte. Ltd., registered in Singapore. This Privacy Policy explains how we collect, use, and protect personal data when you use the Vetta platform or interact with our website at vetta-ai.com.

We are committed to compliance with Singapore's Personal Data Protection Act 2012 (PDPA), the UAE Federal Personal Data Protection Law (PDPL), and the EU General Data Protection Regulation (GDPR) where applicable.

2. Platform Data Model

Vetta does not come preloaded with any existing candidate database, talent pool, or candidate data of any kind. The platform is a software tool and workflow system, not a marketplace or talent directory.

It is the sole responsibility of each customer to upload, import, sync, or otherwise populate the platform with their own candidate data. Any candidate information present within a customer workspace has been provided by that customer or their authorised users.

Customer workspaces are logically isolated. Data uploaded by one organisation is never visible to, shared with, or accessible by any other organisation using the platform.

3. Data We Collect

We collect the following categories of personal data:

Account data

Name, email address, job title, and organisation name provided during account setup and profile configuration.

Customer-uploaded candidate data

CVs, cover letters, assessment responses, interview recordings, and any other candidate information uploaded or imported by your organisation for hiring purposes. This data originates entirely from you.

Usage data

Platform interactions, feature usage patterns, and access logs collected automatically during your use of the Service.

Communications data

Emails, messages, and support requests sent to our team.

4. How We Use Your Data

We process personal data for the following purposes:

Providing, operating, and improving the Vetta platform
Processing AI-assisted candidate scoring as configured and directed by your organisation
Communicating product updates, security notices, and support responses
Meeting our legal and regulatory obligations
Generating anonymised, aggregated analytics to improve platform performance (no individually identifiable data is used)

We do not use your organisation's candidate data to train or improve AI models for other clients. Your data is processed exclusively within your organisation's workspace and is never used to build shared datasets or cross-customer models.

5. Data Sources and Customer Responsibility

All candidate data within the Vetta platform is sourced directly from our customers. The platform does not independently collect, scrape, purchase, or otherwise acquire candidate information from third-party databases or public sources.

As the data controller, each customer is responsible for ensuring that any personal data uploaded to the platform has been collected lawfully, that appropriate consent or legal basis exists for processing, and that the data is accurate and up to date. Vetta acts as a data processor operating on the customer's documented instructions.

Customers are also responsible for informing their candidates about how their data will be processed, including any AI-assisted evaluation, in accordance with applicable data protection laws.

6. Data Residency and Transfers

Vetta offers data residency options in Singapore and the UAE. By default, your data is stored in the region you select at account setup. We do not transfer personal data outside your selected region without your explicit instruction.

Where cross-border data transfers are necessary (for example, for support or infrastructure purposes), we ensure appropriate safeguards are in place consistent with PDPA, PDPL, and GDPR requirements.

7. Data Retention

We retain personal data for as long as your organisation's account is active, plus any additional period required by applicable law. Candidate data retention is governed by the retention policy configured by your organisation administrator.

Upon account termination, all data associated with your workspace is deleted within 90 days unless a longer retention period is required by law or explicitly requested by the customer.

8. Your Rights

Depending on your jurisdiction, you may have rights including the right to access, correct, delete, or port your personal data, and to object to or restrict its processing.

If you are a candidate whose data has been uploaded by an employer or agency using Vetta, please direct your data rights request to the organisation that uploaded your information. As a data processor, we will assist the data controller in fulfilling such requests in accordance with applicable law.

For direct enquiries, contact us at enquiry@nsearchglobal.com.

9. Security

We implement encryption at rest, encryption in transit, role-based access controls, and regular security testing to protect personal data. For full details on our security posture, see our Security & Trust page.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

For privacy-related queries, contact our Data Protection Officer at enquiry@nsearchglobal.com or write to nSearch Technologies Pte. Ltd., 1 Raffles Place, Singapore.