Privacy Policy

We collect information that you provide directly, data generated through your use of the Services, and information from third-party integrations. The categories of personal information we collect include:

• Account information — When you register, we collect your name, email address, phone number, and a securely hashed password. If you use social login (e.g., Google), we collect your OAuth profile identifier and basic profile details.
• Resume uploads — We collect resumes, CVs, cover letters, portfolios, and any other documents you upload for analysis, optimization, or job application purposes.
• Profile information — Work history, education, skills, certifications, job preferences, salary expectations, location, and career goals that you add to your profile.
• Subscription information — Billing address, payment method tokens (processed by Stripe), plan type, and transaction history. We do not store full credit card numbers.
• Usage analytics — Device information, IP address, browser type, pages visited, features used, clickstream data, and error logs. This helps us improve performance and user experience.
• Communications — Emails, support tickets, and feedback you send to us.

We use the information we collect to provide, maintain, and improve the Services, and to communicate with you. Specific purposes include:

• Career recommendations — Analyzing your profile and preferences to suggest relevant career paths, skill development opportunities, and professional growth strategies.
• Resume optimization — Parsing and analyzing your resume to provide tailored suggestions for improvement, keyword optimization, and formatting enhancements.
• Job matching — Comparing your profile against job listings to identify strong matches and ranking them based on relevance, skills alignment, and your stated preferences.
• Platform improvements — Aggregating and analyzing usage patterns to identify bugs, optimize features, develop new tools, and enhance overall service quality.
• Customer support — Responding to your inquiries, troubleshooting issues, and providing personalized assistance.
• Security and fraud prevention — Detecting suspicious activity, verifying accounts, and protecting against unauthorized access.
• Legal compliance — Fulfilling legal obligations, responding to lawful requests, and enforcing our Terms of Service.

For users in the European Economic Area (EEA), our legal bases for processing are: (a) performance of a contract; (b) your consent; (c) legitimate interests; and (d) legal obligation.

TalentOS uses artificial intelligence and machine learning models to power features such as resume analysis, job matching, interview coaching, and career recommendations. By using these features, you acknowledge that:

• Your resume, profile data, and related content may be processed by AI models to generate personalized insights, suggestions, and recommendations.
• AI processing may involve transmitting your data to third-party AI providers (e.g., OpenAI, Anthropic) under strict data processing agreements that prohibit training on your data and require confidentiality protections.
• AI-generated outputs are automated and may contain errors or biases. We do not guarantee the accuracy or fairness of any AI-generated recommendation.
• You may opt out of optional AI features at any time in your account settings. Core platform functionality remains available without AI processing.

We do not use your data to train general-purpose AI models without your explicit consent. Any AI training on aggregated, anonymized data is performed only after removing all personally identifiable information.

Protecting your personal information is a top priority. We implement industry-standard technical and organizational security measures, including:

• Encryption in transit — All data transmitted between your browser and our servers is protected using TLS 1.2 or higher.
• Encryption at rest — Sensitive data, including resumes and profile information, is encrypted when stored in our databases and cloud storage.
• Access controls — Role-based access restrictions ensure that only authorized personnel can access your data, and only when necessary for operational purposes.
• Regular security audits — We conduct periodic vulnerability assessments, penetration testing, and code reviews to identify and remediate potential weaknesses.
• Incident response — We maintain a documented incident response plan and will notify affected users and regulators promptly in the event of a confirmed data breach, as required by applicable law.

While TalentOS encrypts all data in transit and at rest using modern cryptographic standards, we do not currently offer client-side or end-to-end encryption for resume uploads or profile data. This means that, like most cloud-based SaaS platforms, we have the technical ability to access content you upload in order to provide our Services.

We restrict such access to automated systems and authorized support staff acting under strict confidentiality obligations. We do not review personal content for purposes other than providing support at your request, maintaining the platform, or as required by law.

We support multiple authentication methods to secure your account:

• Password-based login — Passwords are hashed using industry-standard algorithms (bcrypt/Argon2) and never stored in plain text.
• Social login — You may sign in using Google OAuth. We do not receive or store your social account password.
• Two-factor authentication (2FA) — Available for all accounts. We strongly recommend enabling 2FA for additional protection.
• Session management — Sessions expire automatically after periods of inactivity. You can revoke active sessions from your account settings.
• Brute-force protection — We implement rate limiting and anomaly detection to prevent unauthorized login attempts.

All payments on TalentOS are processed by Stripe, Inc., a PCI-DSS compliant payment processor. We do not store your full credit card number, CVV, or bank account details on our servers.

• Stripe collects and processes your payment information in accordance with their Privacy Policy.
• We receive only a payment token, last four digits of your card, expiration date, and billing address for record-keeping and tax purposes.
• Subscription billing is automated. You will receive an email receipt for each charge.

We use cookies and similar technologies to recognize you, remember your preferences, analyze traffic, and personalize content. The types of cookies we use include:

• Essential cookies — Required for the platform to function (e.g., authentication sessions, security tokens). These cannot be disabled.
• Analytics cookies — Help us understand how visitors interact with the platform so we can improve performance and features. These may be disabled.
• Preference cookies — Remember your settings and choices (e.g., language, notification preferences).

You can manage your cookie preferences through the cookie banner displayed on your first visit or at any time via your browser settings. For more details, please see our Cookie Policy.

We integrate with trusted third-party service providers to deliver the platform. These providers process data only on our behalf and under contractual obligations that require confidentiality and security safeguards. Our key subprocessors include:

• Cloud infrastructure — Hosting, storage, and database services for platform operations.
• AI/ML providers — For resume analysis, job matching, interview coaching, and natural language processing features.
• Payment processors — Stripe, Inc. for billing and subscription management.
• Email and communications — For transactional emails, newsletters, and customer support correspondence.
• Analytics — For understanding product usage and improving user experience.

We do not sell your personal information to third parties for marketing or advertising purposes. Recruiters and employers may view candidate profiles only when a candidate has explicitly chosen to be visible or applied to a specific position.

Depending on your location, you have certain rights regarding your personal information:

GDPR Rights (EEA/UK Users)

• Right to access — Request a copy of the personal data we hold about you.
• Right to rectification — Request corrections to inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — Request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing — Request that we limit how we use your data in certain circumstances.
• Right to data portability — Receive your data in a structured, commonly used format and transfer it to another service.
• Right to object — Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — Withdraw consent for optional processing at any time.
• Right to lodge a complaint — File a complaint with your local data protection supervisory authority.

CCPA Rights (California Users)

• Right to know — Request disclosure of the categories and specific pieces of personal information we collect.
• Right to delete — Request deletion of personal information, with certain exceptions.
• Right to opt-out of sale — We do not sell personal information. If this changes, we will provide an opt-out mechanism.
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at privacy@talentos.app. We will respond within 30 days for GDPR requests and 45 days for CCPA requests.

We retain your personal information for as long as your account is active and for a reasonable period thereafter to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data — Retained while your account is active. Deleted within 30 days of account deletion, unless legal obligations require longer retention.
• Resumes and profile data — Retained while your account is active and deleted upon account deletion, unless you have pending applications that require retention.
• Payment records — Retained for 7 years to meet tax and accounting requirements.
• Usage analytics — Anonymized after 12 months; raw logs deleted after 24 months.
• Security audit logs — Retained for 12 months for fraud prevention and security investigations.

TalentOS is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@talentos.app.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information as quickly as possible. Users between the ages of 13 and 16 must have parental consent to use the Services.

TalentOS is operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

For users in the European Economic Area (EEA), Switzerland, and the United Kingdom, we rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms approved by the European Commission to ensure adequate protection for your personal data during international transfers.

By using the Services, you consent to the transfer of your information to countries that may have data protection laws different from those in your country of residence. We take appropriate safeguards to protect your data regardless of where it is processed.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be notified via email or in-app notice at least 30 days before taking effect, where practicable.

The "Last updated" date at the top of this page indicates when the policy was most recently revised. Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@talentos.app
• Website: talentosapplymate.com
• Contact Form: Contact Us

For privacy-related requests, we aim to respond within two business days.