Privacy

The controller is [CONTROLLER — registered legal entity and address]. Questions about this document, or a request about your own data, go to [PRIVACY CONTACT — email address].

Your account. An email address, a display name if you give one, and a password. The password is stored only as a BCrypt hash — it is never kept in a form anyone can read, including us.

Your CV, if you upload one. The original file exactly as you sent it, plus the structured profile a language model extracts from it: name, contact details, skills, employment history, education and a summary. The extracted text is also indexed so it can be searched.

What you do here. Which roles were matched to you and why, any cover letter generated for you, and the applications you track — each application keeps a snapshot of the job as it was on the day you applied, because the employer may change or remove the posting afterwards.

We do not collect analytics, behavioural profiles, advertising identifiers, or anything about you from other sites. There are no third-party trackers on this product.

Reading a CV, matching it to roles and drafting a cover letter are all done by a language model that runs on infrastructure the operator controls. Your CV is not sent to OpenAI, Anthropic, Google, or any other external model provider, and it is not used to train anyone’s model.

This is a property of how the system is deployed rather than a promise about intentions. If that ever changes, this section has to change with it and you should be told before it does.

Uploaded files — your CV and any generated cover letter — are held in the operator’s own object storage. Everything else lives in a PostgreSQL database. Both run in infrastructure operated by [CONTROLLER], hosted in [HOSTING REGION].

You can see and change your own record, and nothing else. Asking for another candidate’s profile returns “not found” whether or not it exists.

Employers can search candidate profiles and read them. They cannot change or delete anything of yours. If you have uploaded a CV, assume an employer account on this platform can read the profile extracted from it.

Administrators can see everything, because they operate the platform and have to be able to diagnose it.

We do not sell your data, and we do not share it with anyone outside the platform except where the law requires it.

Postings on Talento are collected from employers’ own careers pages — publicly published vacancies, not personal data. Applying to one is currently an action you take on the employer’s own site: Talento records that you applied so you can track it, and sends nothing to the employer on your behalf.

Your account and its contents are kept until you delete them. Deleting your profile removes the extracted data, the uploaded files, and the generated documents.

Retention beyond that point — backups, and anything the operator is legally required to retain — is [RETENTION PERIOD — confirm against backup policy].

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how it is used, take it elsewhere in a portable form, and complain to a supervisory authority.

Access, correction and deletion are available in the product today: your profile page shows what was extracted, and deleting the profile removes it along with the stored files. For anything else, or to have a request handled by a person, write to [PRIVACY CONTACT]. The supervisory authority for [JURISDICTION] is [SUPERVISORY AUTHORITY].

A language model scores how well your profile fits a role and writes a short reason. That ranking is advisory: it orders what you are shown, and it does not decide anything about you. No employment decision is made automatically by this platform — a human at the employer decides, on their own systems.

If this document changes in a way that affects what happens to your data, the date at the top changes and you will be told before the change takes effect.