Privacy Policy

We collect information directly from users, automatically through platform usage, and from candidate submissions managed by account administrators.

Account & Profile Data: Name, business email address, company name, phone number, and user credentials created during registration.

Recruitment & Candidate Data: Information uploaded or submitted during candidate assessments, including resumes, screening responses, voice notes, audio answers, and evaluation scores.

Billing & Subscription Records: Account subscription plan status, billing cycle start/end dates, campaign limits, and manual payment verification records (e.g., transaction notes for transfers via Zain Cash, FIB, SuperQi, or FastPay). We do not collect or process credit card details directly on our servers.

Technical & Usage Data: IP address, browser type, device details, operating system, and log data related to interaction with our platform.

To maintain security, prevent abuse, and protect our trial systems, Vettedkando enforces server-side validation against temporary or disposable email domains during account creation. Registration requires a valid personal or business domain address.

We process personal information for the following operational and legal purposes:

Service Provisioning: Operating candidate evaluation workflows, managing account tiers, and administering candidate quota limits.

Manual Subscription Verification: Verifying local payment transfers, activating subscriptions, and updating period dates in our backend system.

Communication & Support: Responding to sales inquiries (“Contact Us” requests), support requests, account notices, and billing confirmation emails.

Security & System Integrity: Detecting and preventing unauthorized access, abuse, SQL injection, privilege escalation, or fraudulent activity.

Legal Compliance: Complying with applicable laws, regulations, and official requests in Iraq.

We do not sell, rent, or trade personal data to third parties. Personal information is shared only under strict operational necessity:

Infrastructure & Backend Providers: Data is securely stored and processed via cloud infrastructure providers subject to strict access controls and security parameters.

Payment Processors: Transactions are verified directly via local financial transfer services (Zain Cash, FIB, SuperQi, FastPay). No direct financial backend integration grants third-party payment gateways automated access to user databases.

Legal & Regulatory Authorities: Disclosure may occur if required by Iraqi law, court orders, or directives issued by competent authorities (such as the Communications and Media Commission).

We employ multi-layered administrative, technical, and database-level security controls to protect information against unauthorized access, loss, or alteration:

Database Isolation: Row Level Security (RLS) policies enforce strict workspace isolation so that users can only access candidate and campaign data associated with their own company.

Restricted Plan Administration: Subscription tables cannot be modified self-serve from client applications. All plan changes, period extensions, and status toggles are conducted internally via secured backend administrative tools.

Server-Side Privileges: Backend database helper functions are maintained under strict privilege constraints to protect data boundaries.

Active Subscriptions: Account and candidate data remain accessible for the duration of the active subscription or trial period.

Trial & Plan Expiration: Following trial or billing period expiration, account records and uploaded assets are retained for a reasonable period to allow for subscription renewal before standard cleanup procedures apply.

Deletion Requests: Workspace owners may request the deletion of their account or candidate records by contacting us.

Users and organization owners have rights regarding their personal data, including:

Access: Requesting a summary or copy of stored profile and campaign data.

Correction: Rectifying inaccurate account or company details.

Account Cancellation: Requesting account termination or immediate revocation of platform access.

We may update this Privacy Policy from time to time to reflect regulatory developments in Iraq or updates to platform infrastructure. Any changes will be posted on this page with an updated “Effective Date.” Continued use of Vettedkando after changes indicates acceptance of the updated terms.

For questions regarding this Privacy Policy, manual subscription verification, or data privacy requests, please reach out to us through the Contact Us form in the Vettedkando platform or via our designated support email.