Privacy Notice

1. Scope and roles

This Notice applies to visitors, candidates, recruiters, hiring managers, customer administrators, partners, and people whose information is submitted to TruTalent. For direct candidate accounts, marketplace features, security, billing, support, and platform analytics, TruTalent generally determines purposes and acts as Data Fiduciary/controller. For enterprise-configured workflows where the customer determines the purposes and essential means, TruTalent generally acts as processor under a DPA. Contact the relevant employer first for requests concerning employer-controlled recruitment records.

2. Data collected

TruTalent asks users to avoid unnecessary sensitive data. Where disability accommodation, background-check, biometric, or other high-risk data is needed, a separate notice and enhanced controls apply.

3. Sources

Data may come from you, an authorized employer or recruiter, references or verification partners, connected professional accounts, public professional sources where lawful, customer systems, cookies and logs, and information generated through platform use. The source and confidence of verification signals should be shown where material.

4. Purposes and legal grounds

TruTalent processes data to create accounts; build and verify profiles; enable applications and recruiting; perform assessments; communicate; provide AI-assisted matching and insights; prevent fraud; secure the platform; administer contracts and billing; provide support; improve reliability; comply with law; and establish or defend legal claims.

Depending on jurisdiction and context, grounds may include consent, contract, steps requested before contract, legal obligation, legitimate interests, DPDP legitimate uses, and documented customer instructions. Optional marketing, non-essential cookies, and certain audio/video, biometric, or high-risk processing use consent where required.

5. AI, profiling and consequential decisions

TruTalent may generate recommendations, rankings, summaries, market estimates, and verification signals. These support — not replace — human judgment. Customers must not use a TruTalent AI output as the sole basis for a final consequential employment decision unless law permits it and appropriate notice, validation, human review, contestability, and other safeguards are implemented. Candidates may request correction, explanation of material factors, or human review through the privacy contact.

6. Sharing

Data may be shared with authorized recruiters and employers; workspace administrators; cloud and security providers; communications, analytics, support, assessment, verification, background-check, payment, and integration providers; professional advisers; transaction counterparties; and authorities where legally required. Access is purpose-limited and subject to contracts and controls. A current subprocessor register should be published before enterprise launch.

7. International transfers

Data may be processed in India and other locations used by customers and approved providers. TruTalent uses contractual, technical, organizational, and transfer safeguards required by applicable law, including Standard Contractual Clauses or UK transfer mechanisms where relevant. Customer-specific residency commitments must appear in the order form or DPA.

8. Retention

TruTalent retains data only for the stated purpose, customer instructions, legal obligations, security, fraud prevention, dispute handling, and backup cycles. Default periods are published in the Data Retention Schedule. Verification source documents should be deleted or strongly restricted once the verification purpose is complete unless law, consent, or customer instruction requires longer retention. Backups are deleted through scheduled rotation.

9. Rights and choices

Subject to applicable law, you may request access, a processing summary, correction, completion, update, deletion, consent withdrawal, objection, restriction, portability, opt-out of marketing, nomination, and review of consequential automated processing. Requests may require identity verification and may be refused or limited where an exemption applies. Submit requests to privacy@trutalent.ai. Grievances may be escalated to grievance@trutalent.ai and then to the competent authority.

10. Security

TruTalent uses role-based access, least privilege, encryption in transit and at rest where supported, key management, secure development, logging, monitoring, backups, vulnerability management, incident response, vendor due diligence, and workforce confidentiality. No system is risk-free. Report suspected incidents promptly.

11. Children

The standard Service is for users aged 18 or older. TruTalent will not knowingly enable a minor-facing workflow unless age assurance, verifiable guardian consent where required, child-specific notices, limited processing, and controls against tracking, behavioral monitoring, and targeted advertising are implemented.

12. Cookies and communications

Strictly necessary cookies support authentication and security. Optional analytics or advertising technologies are used only under the Cookie Notice and applicable consent rules. Transactional messages may be required for the Service. Marketing communications include an unsubscribe or opt-out mechanism.

13. Updates

TruTalent may update this Notice when products, vendors, laws, or data practices change. Material changes will be communicated and the effective date updated.