Privacy policy

TalentOS ("we", "us") provides an AI workforce intelligence platform. For account holders we act as a data controller. For employee records that a customer uploads into their workspace, we act as a processor on that customer's instructions — the employer remains the controller.

• Account data: name, work email, password hash (or Google sign-in identifier), workspace membership and role.
• Workforce data you upload: employee name, work email, department, role, location, skills and proficiency levels, and resume documents you choose to upload.
• Derived data: AI-extracted skills, digital twin summaries, readiness and risk scores computed from the above.
• Integration signals: events you send us through webhooks (for example commit or course-completion metadata) used to keep skill data current.
• Technical data: IP address, browser and device type, and timestamps in security and error logs.

• Contract — to provide the platform you signed up for (accounts, workspaces, analytics).
• Legitimate interests — to secure the service, prevent abuse, debug faults, and improve product quality.
• Legal obligation — to meet tax, accounting, and lawful requests.
• Consent — for optional analytics cookies and marketing email, withdrawable at any time.

Resume text and integration event text may be sent to third-party large language model providers to extract skills and generate digital twin summaries. We instruct these providers to process the data only to return a result, and we do not permit the training of general models on your content. AI outputs are decision-support only and are never the sole basis of an employment decision.

We share data with sub-processors that host and power the service: our cloud database and authentication provider, our AI model providers, and error/monitoring tooling. We never sell personal data.

• Workspace and employee records: kept until you delete them or close your workspace, then removed within 30 days.
• Uploaded resumes and extracted analyses: deleted immediately when you delete the resume or the employee.
• Security and error logs: up to 12 months.
• Billing records: as long as tax law requires.

Subject to applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and you may lodge a complaint with your supervisory authority. Employees of a customer should contact their employer first; we will support the employer in fulfilling the request. Email privacy@talentos.app.

Data may be processed outside your country by our sub-processors. Where that happens from the EEA or UK, transfers rely on Standard Contractual Clauses plus additional technical safeguards (encryption in transit and at rest).

Row-level security isolates every workspace at the database layer, access is authenticated per request, and traffic is encrypted with TLS. See our Security overview.

TalentOS is a business product and is not directed to anyone under 16.

We will post material changes on this page and notify workspace owners by email before they take effect.