Privacy Policy
Last updated: 1 March 2026
1. Introduction
Vettora Ltd ("we", "us", "our") operates the Vettora platform at https://vettora.co. We are committed to protecting your personal data and complying with the UK GDPR, the Data Protection Act 2018 (DPA 2018), and the EU GDPR where applicable.
2. Data We Collect
- Account data: name, email address, role (talent/employer/mentor/admin)
- Profile data: CV, skills, LinkedIn URL, work history, education, availability
- Assessment data: AI interview responses, coding task results, competency scores
- Usage data: page views, feature interactions, session metadata
- Payment data: subscription status, billing history (card details processed by Stripe)
- Communications: messages, mentor session notes, email logs
3. Legal Basis for Processing
- Contract: account management, platform services, billing
- Legitimate interests: fraud prevention, platform security, analytics
- Consent: marketing emails, cookies, AI processing of CV data
- Legal obligation: tax records, regulatory compliance
4. How We Use Your Data
- Providing and improving the Vettora platform
- AI-powered matching between talent and employers
- Facilitating interviews, assessments and mentor sessions
- Sending transactional and notification emails
- Processing payments and managing subscriptions
- Detecting and preventing abuse or fraud
5. Sub-processors
We share your data only with trusted third-party providers necessary to operate the platform:
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication & identity | USA |
| Neon / PostgreSQL | Database hosting | EU (Frankfurt) |
| Amazon Web Services (S3) | Document & CV storage | EU (London) |
| OpenAI | AI matching, CV parsing, interview intelligence | USA |
| Stripe | Payment processing | USA / EU |
| Resend | Transactional email | USA |
| Daily.co | Video interview infrastructure | USA |
| Vercel | Cloud hosting & analytics | USA / EU |
| PostHog | Product analytics | EU |
6. Data Retention
Account data is retained for the duration of your account and for 7 years thereafter to meet legal obligations. Assessment data is retained for 3 years. You may request deletion at any time (see Your Rights below).
7. International Transfers
Some sub-processors operate in the USA. Transfers are governed by Standard Contractual Clauses (SCCs) or adequacy decisions under UK GDPR.
8. Your Rights (UK/EU GDPR)
- Access (Art. 15): request a copy of your data via Settings → Export My Data
- Rectification (Art. 16): update your profile at any time
- Erasure (Art. 17): email [email protected]
- Portability (Art. 20): download your data as JSON via Settings → Export My Data
- Restriction & Objection (Art. 18–21): contact us at the address below
- Complaints: you may lodge a complaint with the ICO at ico.org.uk
9. Cookies
We use strictly necessary cookies (session management via Clerk) and optional analytics cookies (PostHog, Vercel Analytics). You can manage your cookie preferences through the banner when you first visit, or via browser settings at any time.
10. Contact
Data Controller: Vettora Ltd
Email: [email protected]
Registered in England & Wales.