Privacy, consent and how long data is kept
Your agency decides about candidates; HrThroo processes their data for you under India's DPDP Act. Consent first, at most 12 months' retention.
Last updated
For candidates, your workspace is the data fiduciary and Brandstac processes their data on your behalf. Data is stored in Mumbai.
Consent
The apply page asks for AI screening and for AI calls and interviews separately, with unticked boxes. Candidates you upload or import are asked by email before any call or interview. Every candidate email has an opt-out link, and an opt-out cancels everything queued for them.
How long data is kept
Under Settings → Workspace → Keep candidate data for, choose up to 12 months, counted from when a candidate's last application closes. Then their CVs, transcripts and recordings are deleted.
Requests, export and deletion
- Anyone can ask to access, correct or erase their data at hrthroo.com/privacy/request — no account needed.
- In Settings → Privacy, an owner or admin can Export everything (the file is kept for 7 days) or Delete this workspace: everything is deleted after 7 days, during which it can be cancelled.
Candidate data is never used to train AI models, for evaluations or for marketing. Recordings are private and reach a client only if you include them in a client link.