Privacy Policy

Last updated: March 2026

1. Who we are

Talent Intelligence Platform ("TIP", "we", "us") is an AI-powered recruitment intelligence platform. We act as a data processor on behalf of recruitment agencies and employers (our customers, the "data controllers") who use our platform to manage candidate information.

Contact our Data Protection Officer at [email protected]

2. What data we collect

We process the following categories of data:

  • Account data: email address, name, authentication credentials (via Auth0)
  • Candidate data: CVs/resumes uploaded by our customers, including names, contact details, work history, education, and skills
  • Usage data: IP addresses, browser type, pages visited, feature usage for analytics and security
  • Audit data: immutable logs of all data access and mutations for security compliance

3. How we use data

  • Parse and structure CV/resume content using AI
  • Match candidates to job descriptions
  • Provide analytics and pipeline reporting
  • Enforce security controls and detect anomalies
  • Maintain audit trails for compliance

4. Legal basis (GDPR)

  • Contract performance: processing necessary to provide our recruitment intelligence service
  • Legitimate interest: security monitoring, fraud prevention, service improvement
  • Consent: where required by our customers for processing candidate data

5. Data sharing

We do not sell personal data. We share data only with:

  • Google Cloud Platform: infrastructure hosting (London, UK region)
  • Auth0 (Okta): authentication services
  • AI model providers: for CV parsing and matching (data is not retained by providers)
  • Sentry: error tracking (no PII transmitted)

6. Data retention

Candidate data is retained for the period configured by each customer (data controller). Customers can set retention policies and request data deletion at any time. When a deletion request is received, we hard-delete PII and anonymise the record within 30 days.

7. Your rights (GDPR)

If you are a candidate whose data is processed through our platform, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data ("right to be forgotten")
  • Portability: receive your data in a machine-readable format
  • Objection: object to processing based on legitimate interest

To exercise these rights, contact the recruitment agency that holds your data, or email us directly at [email protected]

8. Security

We implement enterprise-grade security measures including:

  • Encryption at rest (AES-256) and in transit (TLS 1.3)
  • Row-level security for tenant isolation
  • Immutable audit logging
  • Rate limiting and anomaly detection
  • SSRF and injection protection
  • Virus scanning on all uploads

9. Data location

All data is processed and stored within Google Cloud Platform's europe-west2 (London) region. Data does not leave the UK/EU unless explicitly configured by the customer.

10. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email to account holders. Continued use of the platform after changes constitutes acceptance.