🔒 Legal Document

Privacy Policy

Your privacy is fundamental to everything we do at VettedRx. This policy explains how we collect, use, and protect your personal data.

📅 Effective: July 1, 2026 📄 Version: 2.0 🌎 Applicable: India, UAE, Saudi Arabia, Europe
✅ DPDP Act 2023 (India)
✅ GDPR (European Union)
✅ PDPL (Saudi Arabia)
✅ UAE Data Protection Law
✅ Qatar PDPPL
📄 Table of Contents
🏠
Section 01
Who We Are

VettedRx is an AI-powered healthcare recruitment platform operated by VettedRx Technologies, headquartered in Hyderabad, India. We specialize in connecting healthcare RCM and Medical Coding professionals with leading employers.

🏠
Company
VettedRx Technologies, Hyderabad, Telangana, India
Data Controller
privacy@vettedrx.online
🌎
Operations
India, UAE, Saudi Arabia, Qatar, Europe
📞
DPO Contact
+91 7997038355
📋
Section 02
Data We Collect

We collect only the minimum data necessary to provide our recruitment services. Here is a complete breakdown of what we collect and why:

👤
Identity Data
Name, email, phone number, professional qualifications, work experience
🎥
Interview Data
Video recording, audio, transcript, AI performance scores, proctoring metrics
💻
Technical Data
IP address (hashed), browser type, device info, session timestamps
📋
Consent Records
Consent ID, timestamp, version accepted, withdrawal records
🔒 What We Never Collect
  • Biometric data (fingerprints, facial recognition for ID)
  • Financial information (bank details, salary history without consent)
  • Religious, political, or personal beliefs
  • Health or medical records
  • Social media passwords or private profiles
🎯
Section 03
How We Use Your Data
PurposeLegal BasisWho Sees It
Conducting AI interview and evaluationConsentHR Personnel only
Generating candidate performance reportConsentHiring company HR
Matching candidates to job positionsLegitimate InterestVettedRx internal
Sending interview invitations and resultsConsentCandidate only
Platform security and fraud preventionLegitimate InterestSecurity team
Compliance and legal obligationsLegal ObligationLegal team
⚠ We Never Do This
  • We never sell your personal data to third parties
  • We never use your data for advertising purposes
  • We never share your interview video without your consent
  • We never use AI to make final hiring decisions — humans always decide
🎥
Section 04
Interview Recording Policy

VettedRx uses AI-conducted video interviews as part of our recruitment process. This section explains exactly how your interview recording is handled.

Explicit Consent Required
Recording only begins after you provide explicit written consent through our consent form
🔒
Access Restricted
Only authorized HR personnel of the hiring company can access your interview recording
30-Day Deletion
All interview recordings are automatically and permanently deleted after 30 days
🛡
Unlisted Storage
Videos stored as YouTube Unlisted — invisible to public search, accessible only via direct link
🌟 AI Analysis Transparency

Our AI system analyzes your interview responses to generate a performance score. The AI evaluates: subject knowledge, communication skills, language fluency, confidence, answer relevance, problem-solving ability, professionalism, and enthusiasm. These scores assist HR in their evaluation — final hiring decisions are always made by qualified human HR professionals.

📅
Section 05
Data Retention
Data TypeRetention PeriodDeletion Method
Interview Video Recording30 days from interview dateAutomatic deletion from YouTube
Interview Transcript90 daysAutomated system deletion
Performance Scores6 monthsDatabase purge
Consent Records3 years (legal requirement)Secure archival then deletion
Account InformationUntil account deletionOn request within 30 days
Application Data1 year from last activityAutomated purge
Section 06
Your Rights

Under DPDP Act 2023, GDPR, and other applicable laws, you have the following rights regarding your personal data:

RightWhat It MeansHow to Exercise
AccessRequest a copy of all data we hold about youEmail privacy@vettedrx.online
CorrectionRequest correction of inaccurate personal dataEmail or account settings
DeletionRequest deletion of your data (Right to be Forgotten)Email within 30 days response
PortabilityReceive your data in a machine-readable formatEmail privacy@vettedrx.online
Withdraw ConsentWithdraw consent for recording at any timeEmail or in-platform settings
ObjectObject to automated decision-makingEmail privacy@vettedrx.online
GrievanceFile a complaint with Data Protection Board (India)dpboard.gov.in
🕒 Response Timeline

We respond to all data rights requests within 30 days as required by DPDP Act 2023. For urgent requests (e.g., interview video deletion), we aim to respond within 48 hours.

🛡
Section 07
Data Security
🔐
Encryption
All data encrypted in transit (TLS 1.3) and at rest (AES-256)
🏗
Infrastructure
Hosted on DigitalOcean with enterprise-grade security and monitoring
👁
Access Control
Role-based access — only authorized HR can view candidate data
📊
Audit Logs
All data access logged and monitored for unauthorized activity
🌎
Section 08
International Data Transfers

VettedRx operates globally. When your data is transferred internationally, we ensure appropriate safeguards are in place:

RegionApplicable LawSafeguard
IndiaDPDP Act 2023Data localization compliant
European UnionGDPRStandard Contractual Clauses (SCCs)
Saudi ArabiaPDPL 2021Adequacy assessment compliant
UAEPDPL 2021Data Processing Agreement
QatarPDPPL 2016Contractual safeguards
🍪
Section 09
Cookies Policy

VettedRx uses minimal, essential cookies only. We do not use advertising or tracking cookies.

Cookie TypePurposeDuration
Session CookieMaintain your login session securelySession only
Consent CookieRemember your interview recording consent30 days
Preference CookieRemember your language and display preferences1 year
✅ No Advertising Cookies

VettedRx does not use Google Analytics, Facebook Pixel, or any advertising tracking cookies. Your browsing behavior on our platform is never tracked for advertising purposes.

Section 10
Contact Us

For any privacy-related concerns, data requests, or questions about this policy, please contact our Data Protection Officer:

🔒 Data Protection Officer

We are committed to resolving all privacy concerns promptly and transparently.

Response time: Within 30 days (DPDP) | Urgent requests: Within 48 hours