🇪🇺 GDPR Compliant

We take your
privacy seriously

PrabhaXAi is fully compliant with the EU General Data Protection Regulation. Here's exactly how we protect the rights of every data subject.

Privacy by design

GDPR isn't an afterthought — it's baked into how we build and operate PrabhaXAi.

📍

Data Residency

Your data is stored in EU data centres (Frankfurt, AWS eu-central-1) by default. US and APAC regions available on Enterprise.

📄

Data Processing Agreement

We sign a GDPR-compliant DPA with every customer. Download it below or request a custom version for your legal team.

🗑️

Right to Erasure

One-click data deletion from your dashboard. We guarantee permanent purge within 30 days, with a confirmation email.

📦

Data Portability

Export all your data — candidates, notes, reports — at any time in machine-readable JSON or CSV format.

🔔

Breach Notification

We notify supervisory authorities within 72 hours of a confirmed breach and affected customers as soon as possible.

🧑‍⚖️

DPO Appointed

We have a designated Data Protection Officer. Contact them at dpo@prabhaxai.com for any privacy-related enquiries.

Eight rights. All honoured.

Every data subject whose information is processed through PrabhaXAi is entitled to the following rights.

01

Right to be Informed

We clearly explain what data we collect, why we collect it, and how long we keep it in our Privacy Policy.

02

Right of Access

Request a complete copy of all personal data we hold about you — delivered within 30 days at no charge.

03

Right to Rectification

Correct any inaccurate personal data from your account settings or by contacting our support team.

04

Right to Erasure

Request deletion of your personal data. We will permanently erase it within 30 days unless we have a legal obligation to retain it.

05

Right to Restrict Processing

Ask us to halt processing while you dispute accuracy or object to our use of your data.

06

Right to Data Portability

Receive your data in a structured, machine-readable format (JSON/CSV) to transfer to another provider.

07

Right to Object

Object to processing based on legitimate interests or for direct marketing at any time.

08

Rights re: Automated Decisions

Request human review of any automated decision (including AI screening) that significantly affects you.

Ready to sign a DPA?

Our standard DPA covers all GDPR requirements for data controllers and processors. Download the standard version or contact us to arrange a custom agreement for Enterprise customers.