Introduction
We explain what personal data we collect and why. For your account and our website, we decide how data is used (we're the controller). When an employer uses Talinty to review candidates, the employer is in charge of that data and we act on their instructions (we're the processor). Our AI scores and summarizes candidates to help employers decide; it does not make the decision, a person does. We don't sell your data. You have rights over your data, and this page explains how to use them.
1. Who we are
This Privacy Policy describes how Talinty ("Talinty", "we", "our", "us") collects, uses, and protects personal data when you use talinty.com and the Talinty platform (together, the "Service"). We respect your privacy and are committed to protecting it.
By using the Service, you acknowledge that you have read this Privacy Policy. Where we rely on your consent for a specific activity, we ask for it separately, and you can withdraw it at any time.
Our entity and contact details:
Email: info@talinty.com
2. The two roles we play
Talinty processes personal data in two distinct roles, and your rights depend on which one applies.
As a controller. For the personal data of our customers' account users (recruiters, hiring managers, and administrators), for website visitors, and for a limited set of our own purposes such as securing and improving the Service, aggregate analytics, and legal compliance, Talinty decides how and why data is processed and acts as the data controller.
As a processor. When a customer (an employer) uses Talinty to source, screen, assess, and evaluate candidates, that employer is the controller of the candidate data and Talinty acts as a processor on the employer's documented instructions. If you are a candidate, please contact us, and for most requests contact the employer you applied to.
3. Personal data we collect and how we collect it
From customer account users and website visitors (as controller). We collect:
Identity and contact data: name, work email, phone number, employer, and job title.
Account and authentication data, including sign-in through Google, Microsoft, or LinkedIn where you choose it.
Usage and device data: pages viewed, actions taken, IP address, browser and device type, and similar technical signals (see our Cookie Policy).
Communications: messages you send us and support requests.
Billing data where applicable: we do not store full card numbers.
From candidates (usually Talinty as processor, on the employer's behalf). We collect:
Application data: CV or resume, contact details, work history, and education.
Assessment data: results of any skill tests taken through the Service.
Interview data: async and live video interviews, and AI-generated transcripts of them.
AI-derived data: match scores, skill-alignment scores, and structured vetting summaries generated to support the employer's review.
Data from third parties. We may receive limited data about you from the sign-in providers you choose (Google, Microsoft, or LinkedIn) and from an employer that adds you to the Service.
Data we collect automatically. As you use the Service, we automatically collect technical data such as IP address, device and browser information, and usage patterns, some of it through cookies and similar technologies.
We do not ask candidates to provide special category data (such as health, religion, or political opinions). Please do not submit it. Where it appears in a CV, it is processed only as part of the employer's handling of the application.
4. Why we use personal data, and our lawful bases
We use personal data only for clear purposes, each with a lawful basis under the GDPR:
Provide, operate, and secure the Service: performance of a contract; legitimate interests.
Authenticate accounts and prevent fraud or abuse: legitimate interests; legal obligation.
Communicate about the Service and provide support: performance of a contract; legitimate interests.
Improve the Service and produce aggregate, de-identified analytics: legitimate interests.
Send marketing to business contacts, where applicable: consent or legitimate interests, as permitted by law.
Comply with legal, tax, and regulatory duties: legal obligation.
Process candidate data to deliver hiring features: on the employer-controller's basis, with Talinty acting as processor.
Where we rely on legitimate interests, we balance those interests against your rights and can share our assessment on request.
5. How our AI works, and your rights around it
Talinty's AI produces candidate match scores, skill-alignment scores, structured vetting summaries, and suggested next steps to help employers evaluate candidates.
These are decision-support outputs. Talinty does not make hiring decisions. A human recruiter or hiring manager at the employer reviews the information and makes the final decision. The scoring is designed to be explainable, so the factors behind a score can be reviewed, and any output can be overridden by the employer.
If a decision affecting you were ever based solely on automated processing with legal or similarly significant effects, you have the right under GDPR Article 22 to obtain human intervention, to express your point of view, and to contest the decision. Because the final decision rests with a human employer, please direct these requests to the employer you applied to, and Talinty will support them in responding.
6. How we share personal data
We share personal data only where needed, and with appropriate protections:
With the relevant employer. For candidate data we process on that employer's behalf.
With service providers (sub-processors). Companies that host, secure, and support the Service, under contract and only on our instructions. A current list can be made available upon request.
With authentication and payment providers. The sign-in and payment services you choose to use.
For legal and safety reasons. Where required by law, regulation, or valid legal process, or to protect the rights, property, and safety of Talinty, our users, or the public.
In a corporate transaction. In connection with a merger, acquisition, or sale of assets, subject to this Policy.
Third-party integrations you enable. You may connect third-party integrations (such as calendar, job boards, or communication tools) to your account. Those third parties act as independent controllers of the data they receive, under their own terms, so please review the permissions you grant.
We do not sell your personal data, and we do not share it with third parties for their own direct marketing.
7. International transfers
Talinty operates across the EU and the GCC, so personal data may move between these regions and to service providers in other countries. Where we transfer personal data out of the EEA, we rely on an adequacy decision or on Standard Contractual Clauses with appropriate safeguards. Transfers involving data of individuals in Saudi Arabia follow the PDPL's transfer conditions (see Section 11). You can request details of the safeguards we use.
8. How long we keep personal data
We keep personal data only as long as needed for the purposes above, then delete or anonymize it:
Account data: for the life of the account and 1 year after it closes.
Candidate data (as processor): for the period set by the employer-controller, subject to their instructions and applicable law.
Billing and legal records: for the period required by law.
9. How we keep personal data secure
We use technical and organizational measures to protect personal data, including encryption in transit, access controls, authentication, and audit logging. Talinty is designed to meet the requirements of [SOC 2 / ISO 27001] and is currently pursuing formal certification; we will update this Policy when it is issued.
The security of your data also depends on you. Please keep your account credentials and any connected sign-in accounts secure. No system can be guaranteed perfectly secure.
10. Your rights
Subject to conditions under applicable law, you have the right to:
Access the personal data we hold about you.
Correct data that is inaccurate or incomplete.
Erase your data in certain circumstances.
Restrict or object to our processing.
Receive your data in a portable, machine-readable format.
Withdraw consent, where processing is based on consent.
To exercise rights over data we control, please contact info@talinty.com. For candidate data we process on an employer's behalf, please contact that employer first; if you cannot reach them, contact us and we will help route your request. We may need to verify your identity before we act.
11. Additional information for the GCC (Saudi PDPL)
Where we process the personal data of individuals in the Kingdom of Saudi Arabia, the Personal Data Protection Law (PDPL), overseen by the Saudi Data & AI Authority (SDAIA), applies. Subject to the PDPL, you have the right to:
Be informed of how your personal data is processed.
Access your personal data.
Request correction of your personal data.
Request destruction of your personal data.
Transfers of personal data outside the Kingdom are made only where permitted under the PDPL and its regulations. For PDPL requests, contact info@talinty.com.
12. Children
The Service is intended for business use and is not directed to children. We do not knowingly collect data from anyone under 16.
13. Changes to this Policy
If we make changes to this Policy, we will post the updated version here and revise the "Last updated" date above. Material changes will be communicated as required by law, and changes apply to data collected after the effective date.
14. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us.
By email: info@talinty.com