Privacy Policy

Talent Tick(“we”, “our”) operates Talent Tick, an AI hiring assistant used by recruiting teams to screen, interview, and evaluate candidates. This policy explains how we collect, use, store, and share personal data across three groups of people: visitors to our marketing site, the recruiters who use Talent Tick (our customers), and the candidates our customers evaluate.

Who controls your data

For visitors and recruiters: we are the data controller. You give us information directly when you sign up, contact us, or subscribe to our newsletter.

For candidates: the recruiting company using Talent Tick is the data controller. We process candidate data on their behalf as a data processor. If you are a candidate and want your data corrected or deleted, contact the company you applied to. We will assist them on request.

What we collect

From marketing site visitors

• Contact form: name, email, message, IP address, reCAPTCHA token.
• Newsletter signups: email address, subscription status, IP address.
• Page analytics: pages visited, referrer, browser type, approximate location from IP.

From recruiters (workspace users)

• Account details: name, email, password (hashed), profile address, optional date of birth.
• Workspace settings: company name, branding (logo, colors), Slack bot token (encrypted at rest), email sender preferences.
• Billing: handled by Stripe — we store the Stripe customer and subscription IDs only. We never see or store your card details.
• Activity: actions taken in the workspace (audit logs), AI processing logs (model used, tokens, latency).

From candidates

Candidate data is supplied either by the recruiter who created the application or by the candidate themselves through a self-interview link. It can include:

• Identity: first / last name, email, phone, current title, current company.
• Resume / CV file and the structured fields parsed from it (skills, experience, education, work history).
• Application metadata: cover letter, applied date, status history.
• Self-interview answers, time-spent metrics, and anti-cheat signals (tab focus blur count, paste-event count) when a candidate completes a self-interview.
• AI-generated outputs: a 0–100 score, category breakdown, written summary, suggested interview questions, and detected fraud / duplicate signals.

How we use it

• Provide the service. Run the workspace, score applications, generate interview questions, send transactional emails, sync Slack notifications.
• Process AI features. Resume content, application context, and job descriptions are sent to our AI provider (currently OpenAI or DeepSeek, depending on your tenant’s configuration) to produce scoring summaries, interview questions, and JD analyses. We do not train models on your data.
• Detect fraud and duplicates. We hash and compare resume fragments and contact details across a single tenant’s records to flag duplicate or AI-generated applications.
• Billing and account management. We share the minimum necessary data with Stripe to operate subscriptions.
• Improve the product. Aggregated, de-identified usage statistics. Never resold.
• Comply with the law. Tax records, court orders, regulator requests.

What we do NOT do

• We do not sell personal data.
• We do not use candidate or recruiter data to train AI models.
• We do not run third-party ad trackers on the workspace.
• We do not share data across tenants. Each customer’s workspace runs in an isolated database.

How we share data

We share personal data only with these categories of recipients:

• Subprocessors that operate parts of the service: our hosting provider, our AI provider (OpenAI or DeepSeek), Stripe (payments), our transactional email provider, Google reCAPTCHA (spam prevention).
• Recruiters on the same tenant workspace, when a candidate is added to that workspace.
• External reviewers only when a recruiter explicitly creates a public scorecard link and shares it.
• Authorities when legally required (subpoena, court order, regulator request).

Where data is stored

Data is stored in the region of our hosting provider. Tenant databases are isolated per customer. Backups are encrypted at rest. Access to production systems is restricted to a small number of operations personnel with named, audited credentials.

Retention

• Recruiter accounts: kept while the workspace is active. After workspace deletion, data is removed within 30 days, except where retention is legally required (e.g., billing records: 7 years).
• Candidate data: retained until the recruiter deletes it from their workspace, or until the workspace is deleted. We do not impose a default retention limit on the recruiter’s behalf.
• Marketing site contact form / newsletter: removed within 30 days of unsubscribe.
• Anti-cheat self-interview metrics: kept alongside the answers until the parent application is deleted.

Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA), you may have the right to:

• Access the personal data we hold about you.
• Have it corrected or deleted.
• Restrict or object to certain processing.
• Receive an export in a portable format.
• Withdraw consent for marketing emails at any time (every newsletter has a one-click unsubscribe).
• Lodge a complaint with your local data protection authority.

Recruiters can exercise these rights through their workspace settings or by emailing contact@talenttick.com. Candidates should contact the recruiting company that handles their application; we will assist that company on request.

Cookies and similar technologies

We use a minimal set of cookies: an authentication cookie for logged-in recruiters, a session cookie for the marketing site, and reCAPTCHA on contact forms (subject to Google’s Privacy Policy). We do not use third-party advertising cookies.

Children

Talent Tick is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

Changes

We may update this policy. Material changes will be announced via email to active workspace admins at least 30 days before they take effect. The effective date at the top of this page always reflects the current version.

Contact

Questions about this policy or about the data we hold? Email contact@talenttick.com.