Data Processing Agreement

The organization that holds the account, as identified by the organization name and the administrator email address registered in the account. Contact point: that administrator.

Parthumanally, established in Portugal. Contact point for all data protection matters: info@parthumanally.com.

Candidates whose applications or CVs you upload to, or receive through, your organization's account.

Identification and contact details (name, email address, telephone number where provided); CV content as you supply it (professional experience, education, languages, skills, and any other free text the candidate included); application data (the vacancy applied to, status in your pipeline, notes written by your team); and output generated by the service (screening score, written justification, per-criterion results, interview guides).

The service does not ask for, and is not designed to process, special categories of personal data under Article 9. Such data may nevertheless appear incidentally in free text inside a CV you upload. You are instructed not to upload special categories deliberately, and not to define screening criteria that target them. Safeguards applied regardless: strict access separation between organizations, restricted personnel access, and the retention limits below.

Storage; extraction of text from uploaded documents; automated analysis of that text against criteria you define; generation of scores, written justifications, ranked shortlists and interview guides; making all of the above available to users you authorise; and deletion.

Solely to provide you with the recruitment screening service you subscribed to. We do not process this data for our own purposes, we do not use it to train any model, and we do not disclose it to other customers.

For as long as your account exists, subject to automatic deletion: candidate records are deleted 12 months after that candidate's most recent application, or 3 months on the free plan. Audit records and AI usage records are kept for 24 months as evidence of compliance. On termination of the account, we delete your data, unless EU or Member State law requires us to keep it.

Isolation is enforced by the database itself through row-level security policies, and the application connects using a role that cannot bypass them. A query that omits the organization scope returns nothing rather than another customer's data.

All traffic is served over HTTPS with certificates renewed automatically. Passwords are stored only as bcrypt hashes and API keys only as hashes; neither can be read back. Two-factor authentication secrets are encrypted with AES-256-GCM. Two-factor authentication is available to all users and mandatory for platform administrators.

Access within your organization is governed by roles you assign. Administrative access to the production server is limited to the operator of the service, over SSH with key authentication only. Administrative actions are recorded in an audit log.

Every AI run is recorded, so any screening result can be traced and explained after the fact. Administrative and security-relevant actions are recorded in an audit log retained for 24 months.

A scheduled job deletes candidate records and logs once their retention period has expired, without requiring anyone to remember to do it.

The database is backed up daily and restoration is tested. We state plainly that, at the date of this version, those backups are stored on the same host as the database: they protect against accidental deletion and data corruption, but not against the total loss of the host. Moving backups to separate infrastructure is planned. We prefer to describe this accurately rather than claim a level of resilience we have not yet built.

Hosting of the server and database, in region eu-madrid-1, Spain, European Union. Oracle provides the infrastructure; it does not access application data in the course of providing it.

Delivery of transactional email such as account verification, password resets and notifications. Resend processes the recipient's email address and the message content we generate. CV content is never included in those messages.