Privacy Policy

Last updated: June 16, 2026

1. Who we are

TalentOS ("we", "us") provides an AI-powered career platform. This policy explains how we handle the personal information of candidates, recruiters, and visitors.

2. Data we collect

  • Account data: name, email, password hash, OAuth identifiers.
  • Profile data: resume, work history, skills, preferences, photo.
  • Application data: jobs you've applied to, cover letters, match scores.
  • Usage data: device, IP, pages viewed, audit logs of security-relevant events.
  • Payment data: processed by our payment provider; we never store full card numbers.

3. How we use it

  • Provide and improve the service, match you to jobs, generate AI-assisted content.
  • Authenticate you, prevent fraud and abuse, maintain security audit logs.
  • Communicate updates, billing, and account notices.
  • Comply with legal obligations.

4. Legal bases (GDPR)

We process personal data under: (a) contract — to provide the service you signed up for; (b) consent — for optional AI processing, marketing, and analytics cookies; (c) legitimate interests — security, fraud prevention, product improvement; (d) legal obligation.

5. Sharing

We share data with vetted processors: cloud hosting, payments, email delivery, AI providers. We do not sell your data. Recruiters only see candidates who choose to be visible to employers.

6. Security

We encrypt data in transit (TLS) and at rest. Sensitive fields use additional application-level encryption. Resumes are stored in a private bucket with per-user access controls. Security events are written to an immutable audit log.

7. Your rights

You can access, export, correct, or delete your data at any time from Account → Security. EU/UK users have additional rights to object, restrict processing, and lodge a complaint with a supervisory authority.

8. Retention

We retain account data while your account is active and for a limited period after deletion to meet legal and accounting requirements. Audit logs are retained for security investigations.

9. International transfers

Data may be processed in regions where our providers operate. Transfers outside the EEA rely on Standard Contractual Clauses or equivalent safeguards.

10. Contact

Privacy questions or requests: privacy@talentos.app.