1 Who is the controller?
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the controller of your personal data is:
- Vaan Corporation (brand: “GreenHired”)
- Address: Udumalpet, Tiruppur, Tamil Nadu, India 642201
- Email: privacy@greenhired.com
- GreenHired is the controller for job seeker accounts, recruiter accounts, applications submitted through the platform, and marketing activities.
- For data that recruiters enter about candidates inside their own dashboards, GreenHired and the recruiting company may act as joint controllers; recruiter-facing Data Processing/Addendum terms can further describe these roles.
2 Our sub‑processors and data locations
To provide the Service, GreenHired uses carefully selected sub‑processors and infrastructure in multiple regions.
Current key sub‑processors include:
Cloudflare, Inc. – hosting and edge network for the GreenHired application. At present, Cloudflare operates globally, with workloads processed in data centres that may include the United States and the EU. R2 object storage and D1 databases are currently configured to operate in US and EU regions.
Google LLC – OAuth sign‑in (Google Login) and Google Gemini AI for selected AI‑powered features. Data processed by Gemini is transferred to Google’s infrastructure (typically US‑based) under Google’s terms.
Zoho Corporation (including Zoho CRM and ZeptoMail) – used on EU infrastructure for email delivery and collaboration tools. Zoho Corporation is part of a global group with entities in different regions.
Bouncify – used to detect disposable or undeliverable email addresses during signup, with processing in Indian data centres.
These providers process personal data on our behalf under contractual safeguards, including data protection terms and, where applicable, Standard Contractual Clauses (SCCs).
3 International data transfers
Because GreenHired is based in India and uses global infrastructure, your personal data may be transferred to, stored in, or accessed from countries outside the EU/EEA and UK, including the United States and India.
Where GDPR/UK GDPR apply, GreenHired relies on:
- Standard Contractual Clauses (SCCs) or equivalent mechanisms offered by providers like Cloudflare, Google, Zoho and Bouncify for transfers to countries without an adequacy decision.
- Supplementary measures, such as encryption in transit, access controls, and pseudonymisation of AI inputs (for example, not including email, phone, or full names in requests to AI models where technically feasible).
- For AI features, prompts may include free‑text content (like bios or job descriptions) that you choose to provide, which can contain personal data; this is described in the main Privacy Policy and is optional to use.
4 Legal bases for processing
Under GDPR/UK GDPR, GreenHired relies on several legal bases, depending on the context:
- Performance of a contract (Art. 6(1)(b)) – for creating accounts, managing profiles, enabling job applications, recruiter–seeker matching, and sending transactional emails.
- Legitimate interests (Art. 6(1)(f)) – for fraud and abuse prevention, platform security, logging and auditing, performance monitoring, and non-essential but reasonable product improvements that do not override your rights.
Consent (Art. 6(1)(a)) – for email marketing (where you opt in) and, where required, for certain AI features or cookies/analytics if introduced in future. You can withdraw consent at any time via settings (where available) or by contacting us.
Legal obligations (Art. 6(1)(c)) – where we are required to retain or disclose data to comply with law or regulatory requests.
More detail and examples are set out in the main Privacy Policy.
5 Your GDPR and UK GDPR rights
If you are in the EU/EEA or UK, you have the following rights under data protection law:
- Right of access (Art. 15) – to request confirmation whether we process your data and to obtain a copy.
- Right to rectification (Art. 16) – to ask us to correct inaccurate or incomplete information (for example, updating your profile details).
- Right to erasure (Art. 17) – to request deletion of your personal data in certain circumstances (for example, where it is no longer needed or you withdraw consent and there is no other legal basis).
- Right to restriction (Art. 18) – to request that we limit processing in specific cases, such as while a dispute about accuracy or lawfulness is being resolved.
- Right to data portability (Art. 20) – to receive certain data in a structured, commonly used, machine‑readable format and to transmit that data to another controller where technically feasible.
- Right to object (Art. 21) – to object to processing based on legitimate interests, including profiling, and to object at any time to direct marketing.
- Rights related to automated decision‑making (Art. 22) – GreenHired’s AI match scoring is advisory only and does not automatically accept or reject candidates; hiring decisions are made by human recruiters.
- To exercise these rights, contact us at privacy@greenhired.com. We may need to verify your identity before fulfilling a request.
6 EU/UK representative and DPO
At this time, GreenHired has not appointed an EU or UK representative or a Data Protection Officer (DPO).
All GDPR/UK GDPR queries and data subject requests are handled by our global privacy team at privacy@greenhired.com.
As our EU/UK user base grows, we may appoint an Art. 27 representative and/or DPO and will update this page accordingly.
You also have the right to lodge a complaint with your local supervisory authority (for example, your national Data Protection Authority or the UK Information Commissioner’s Office).
7 Security and breach notification
GreenHired implements technical and organisational measures to protect personal data, such as secure authentication, encryption of sensitive credentials, and detailed audit logging.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required, within 72 hours after becoming aware of the breach. If the risk is high, we will also inform the affected individuals without undue delay.
8 Contact for GDPR matters
For any questions, concerns, or requests under GDPR or UK GDPR, you can contact:
- Email: privacy@greenhired.com
- Postal: Vaan Corporation, Udumalpet, Tiruppur, Tamil Nadu, India 642201