Privacy Policy

1. Who we are

Vayia ("we", "us", "our") is a candidate screening service operated from London, United Kingdom.

2. What data we collect

We collect and process the following personal data:

Recruiters (registered users):

• Email address and password (used for account creation and login)
• Screening forms and questions you create
• Your account activity within the platform

Candidates (people completing a screening form):

• First name, last name, and email address
• Answers to screening questions submitted via a recruiter-shared link

3. How we use your data

We use your data to:

• Provide and operate the Vayia service
• Send transactional emails (account verification, submission confirmations, recruiter notifications)
• Generate AI-powered evaluations of candidate screening responses
• Improve the service over time

We do not sell your data to third parties. We do not use your data for advertising purposes.

4. AI processing

Candidate screening responses are processed by Anthropic's Claude AI to generate evaluation scores and summaries. By submitting a screening form, candidates consent to their responses being processed in this way. Recruiters are responsible for informing candidates that AI evaluation is used as part of the screening process.

5. Data storage and security

Your data is stored securely on Lovable Cloud infrastructure, powered by Supabase (PostgreSQL). Data is hosted in the European Union. We implement industry-standard security measures including row-level security to ensure recruiters can only access their own data.

6. Data retention

• Recruiter account data is retained for as long as your account is active
• Candidate screening data is retained for 12 months from submission, after which it is deleted
• You may request deletion of your data at any time by contacting us at privacy@vayia.app

7. Your rights (UK GDPR)

As a UK resident you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at privacy@vayia.app.

8. Cookies

Vayia uses only essential cookies required for authentication and session management. We do not currently use tracking or analytics cookies.

This section will be updated if we introduce analytics or advertising tools.

9. Third-party services

We use the following third-party services to operate Vayia:

• Supabase: database and authentication
• Anthropic: AI evaluation of candidate responses
• Resend: transactional email delivery

Each service operates under its own privacy policy and data processing terms.

10. Changes to this policy

We may update this policy from time to time. We will notify registered users of any significant changes by email. Continued use of Vayia after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, contact us at privacy@vayia.app.