Data Processing Addendum (DPA)

This DPA forms part of the agreement between SmartInterviews.AI ("Processor") and the Employer ("Controller").

1. Purpose

SmartInterviews.AI processes candidate data solely to:

• Conduct interviews
• Generate evaluation insights
• Provide reports and analytics

We do not process data for any other purpose.

2. Processor Obligations

A. Follow Controller Instructions

We only process personal data based on written Employer instructions.

B. Security Measures

We implement:

• Encryption (AES-256, TLS 1.2+)
• Access control
• Anonymization where possible
• PII and interview data separation

C. Confidentiality

All personnel are bound by strict confidentiality agreements.

D. Assistance With Data Rights

We help the Controller respond to:

• Access requests
• Corrections
• Deletion
• Consent withdrawal

E. Breach Notification

3. Sub-Processors

SmartInterviews.AI may use third-party providers for hosting and analytics. All sub-processors must implement equal or stronger privacy protections.

A current list is available upon request.

4. International Data Transfers

If data is transferred outside the user's region, we rely on:

• Standard Contractual Clauses (SCCs), or
• DPDP/GDPR-aligned safeguards

5. Data Retention & Deletion

Upon Employer instruction:

• Data is deleted securely and permanently
• Or returned in a structured format

6. Termination

Upon termination of service:

• All Employer data is deleted or exported
• Access is revoked

7. Liability

The Processor's total liability is limited to fees paid in the preceding 12 months.

← Back to Home