Veyrag

Data Processing Terms

Version 2026-11-04

  • 1. Parties and roles. Between the organisation registered for the Service ("Customer", controller / data fiduciary) and Sumanth Reddy Anumula, operating Veyrag as an individual ("Veyrag", processor). Part of the Terms; applies to all personal data Customer brings into the Service ("Customer Data").
  • 2. Subject, duration, nature and purpose. For the duration of the account, only to provide the Service described in the Terms: transcription of screening conversations, preparation of evidence records, notes, briefs and submission drafts, storage, export, sharing on Customer's instruction, and deletion. Data subjects: candidates and Customer's staff. Categories: identification and contact details, professional history and qualifications, the content of screening conversations, and other data Customer or the candidate provides.
  • 3. Instructions. Veyrag processes Customer Data only on Customer's documented instructions — the Terms, this Agreement and Customer's actions in the Service — unless the law requires otherwise, in which case Veyrag informs Customer first where permitted. Customer Data is not used to train models or for any purpose of Veyrag's own.
  • 4. Customer's responsibilities. Customer confirms it has a lawful basis for recording and processing each conversation, has given candidates the notice the law requires and obtained consent where required, and will not instruct unlawful processing.
  • 5. Confidentiality. Persons authorised by Veyrag to process Customer Data (today, the founder) are bound by confidentiality and access it only to operate, secure and support the Service.
  • 6. Security. Veyrag maintains the measures described in the Privacy Notice and reviews them as the Service develops. No security certification is held.
  • 7. Sub-processors. Customer authorises Supabase, Vercel, OpenAI, Resend and Cloudflare. Veyrag will notify Customer by email to the account address of any intended addition or replacement at least 14 days in advance, or, where a provider gives Veyrag shorter notice, as soon as Veyrag is notified; Customer may object and, if the objection cannot be resolved, export its data and delete its account. Veyrag remains responsible for its sub-processors.
  • 8. Data subject requests. Veyrag forwards to Customer, without responding itself, any request from a candidate about Customer Data, and assists Customer through the export and deletion functions in the Service.
  • 9. Assistance. Veyrag assists Customer with security, breach notification, impact assessments and consultations with authorities, as far as reasonably possible for a free service.
  • 10. Breach notification. Veyrag notifies Customer without undue delay after becoming aware of a personal-data breach affecting Customer Data, with the information then available, and updates it as more becomes known.
  • 11. Deletion and return. Customer can export and delete Customer Data at any time. Records are deleted 30 days after the recorded consent, or earlier on Customer's deletion; on account deletion as the Privacy Notice describes, except where the law requires retention. Sub-processors delete under their own terms (Privacy Notice section 7).
  • 12. Audit. Veyrag provides the information reasonably necessary to demonstrate compliance and allows audits by Customer or its mandated auditor on reasonable notice, at most once a year unless an authority requires it, at Customer's cost, without access to other customers' data.
  • 13. Transfers and scope. Processing takes place in the United States and India. Customer will not bring into the Service personal data of people in the European Union, the European Economic Area or the United Kingdom (Privacy Notice section 6); no EU or UK transfer agreements are in place.
  • 14. Precedence. Liability is as in the Terms. This Agreement prevails over the Terms for the processing of personal data.

Veyrag organizes interview evidence. Hiring decisions stay with you.