Privacy Policy

Introduction

At Talt AI LLC ("we," "our," or "us"), we care about your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our hiring platform. We believe in being clear and open about how we handle your data.

Information We Collect

Personal Information

• Name and contact details you provide in your profile
• Work experience and education history from your resume
• Skills and qualifications listed in your profile
• Resume or CV files you upload
• Profile photo you choose to display
• Social login details (Google) - only if you choose to use social login

Platform Usage Data

• Job applications and responses
• Assessment results and scores
• Interview feedback and evaluations
• Communication history between candidates and employers
• Platform interaction metrics and user journey data (anonymized)
• Time spent on platform features and engagement patterns
• IP address (used for job view count tracking and security purposes)
• Browser and device information (type, version, OS, unique identifiers) collected by PostHog for error reporting and analytics

Data Security

Data Retention and Deletion

• We delete user data when explicitly requested or through the settings page within 15 days.
• We don't soft delete from database; all deletions are permanent and irreversible
• We automatically delete users accounts that remain inactive for 1 year. An account is considered inactive if the candidate has not signed in or applied to any jobs during that period.
• Deleting a user account will also delete all associated jobs and company data if the user is the company creator in our platform. Non-owner users must contact us to request company deletion.
• You have full access to export your personal data anytime via your account settings
• We never sell your data. It's only used to run and improve our platform.

How We Use Your Information

Main Uses

• Providing, maintaining, and improving our Services
• Processing job applications and conducting assessments
• Conducting AI-based candidate evaluations and matching
• Facilitating secure communication between candidates and employers
• Managing user accounts, authentication, and security
• Detecting, preventing, and addressing technical issues or fraud

AI Scoring and Analysis

• Evaluating candidate qualifications against job requirements
• Generating comprehensive assessment reports and insights
• Improving matching algorithms and recommendation systems
• Training and enhancing AI models to increase accuracy
• Providing actionable insights to employers

Communication

• Sending important notifications and platform updates
• Responding to inquiries and support requests
• Providing personalized customer support and assistance
• Sharing relevant job opportunities with candidates

Third-Party Services

Our platform works with these third-party services:

• OpenAI: GPT for AI-powered services, e.g. profile evaluation, resume parsing, and interview questions generation
• Google Calendar API & Google Meet: For scheduling and conducting video interviews (optional, only if you connect from settings)
• Google sign-in: For social media login and profile information (optional, only if you choose to use it)
• Cloudflare R2: For securely storing resumes, files, profile photos, and audio answers
• PostHog: For platform analytics, and error reporting
• Brevo: For sending emails and notifications

These services have their own privacy policies. We encourage you to review them.

Job Apply Without Signing In

Any candidates can conveniently apply to jobs by uploading a resume without signing in. When a resume is uploaded anonymously:

• A personal account is automatically created using the email address found in the resume
• The candidate can sign in later using the same email address
• Candidates can manage their profile and resume through their account settings
• Uploading a new resume will override any previously uploaded resume
• If a resume is uploaded by someone other than the owner, we notify the email address in the resume to ensure transparency and provide an option to delete the account in email.
• Inactive accounts are subject to automatic deletion

Manual Resume Import by Employers

Our platform allows employers to manually import resumes on behalf of candidates. When an employer uploads a resume for a candidate:

• We automatically create a candidate account using the email address and data found in the resume
• The candidate is not automatically notified when their resume is first uploaded. However, they can sign in and request to delete their profile at any time.
• If a recruiter changes the application stage for a candidate, the candidate is notified of this update.
• Inactive accounts are subject to automatic deletion

Information Sharing and Disclosure

With Employers

• Candidate profiles and application materials
• Assessment results, scores, and evaluation metrics
• Professional qualifications and relevant experience

Legal Requirements

• Compliance with applicable laws and regulations
• Response to valid legal requests and court orders
• Protection of rights, property, and safety of users and others
• Investigation of potential violations of our Terms of Service

Compliance with Privacy Laws

General Data Protection Regulation (GDPR)

For users in the European Union, we comply with GDPR requirements:

• We process your data based on legitimate interests, contractual necessity, or your explicit consent
• You have the right to access, correct, or delete your personal data at any time
• You can request data portability in machine-readable formats
• You have the right to object to processing or withdraw consent without penalty
• We implement appropriate safeguards for all international data transfers
• We maintain detailed records of processing activities and conduct impact assessments

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

For California residents, we comply with CCPA and CPRA requirements:

• We provide complete transparency about data collection and use practices
• You have the right to know what personal information we collect and how it's used
• You have the right to delete your personal information from our systems
• You have the right to opt-out of the sale of personal information (though we do not sell your data)
• We do not discriminate against you for exercising your privacy rights in any way
• You have the right to correct inaccurate personal information in your profile
• You have the right to limit the use of sensitive personal information to essential purposes

Categories of Personal Information We Collect

The CCPA requires us to disclose certain information about the categories of personal information we collect:

• Identifiers: Names, email addresses, phone numbers, IP addresses, account usernames
• Professional Information: Employment history, skills, education, certifications, work experience
• Commercial Information: Services used, interactions with our platform, subscription details
• Audio/Visual Information: Profile photos, recorded assessments
• Employment Information: Current and past employment details, job titles, responsibilities

UK Data Protection Laws

For users in the United Kingdom, we comply with UK data protection laws:

• We process your data in accordance with UK GDPR and Data Protection Act 2018 requirements
• We implement appropriate safeguards for international data transfers post-Brexit
• You have the same comprehensive rights as those provided under EU GDPR

Cookies, scripts and Related Technologies

When you visit our website, we and our third-party service providers may receive personal information. We use the following technologies to enhance your experience and ensure platform functionality:

• JWT Authentication: We store access tokens in cookies/localStorage for session management
• Third-Party Services: Services that we use, for example PostHog (for analytics), Google Sign-In, may use cookies and scripts. Please refer to their respective privacy policies for more information.

These technologies help us understand platform usage patterns and maintain secure authentication. We do not use cookies for advertising.

Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected personal information from a child under 18, we will promptly delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you about significant changes through our platform or by email, and we'll clearly explain what's changing and when.

Contact Information

For privacy questions or concerns, please contact us (we aim to respond within 48 hours):

Email: [email protected]
Address: 30 N Gould St, Sheridan, WY 82801, USA