Privacy Policy

1. Data controller

Inkname Studio is the controller of personal data processed through Talenthic. Contact: inknamestudio@gmail.com.

2. What we collect

2.1 Account data

• Email address, display name, avatar URL (when you sign in with an OAuth provider).
• Authentication tokens and session identifiers, stored securely.
• Preferences: saved jobs, saved searches, language, notification settings.

2.2 Usage data

• Pages viewed, searches run, filters used, jobs opened, API endpoints called.
• Approximate location derived from IP (city-level, never precise coordinates).
• Device metadata: browser, OS, screen size — used for responsive rendering and abuse prevention.

2.3 Publicly-sourced employer & job data

We collect job postings and company information from publicly-accessible pages. This may include an occasional individual name where an employer chose to publish a recruiter contact. See our Data Sources page for full detail and opt-out.

3. What we do NOT collect

• We do not sell personal data.
• We do not run cross-site advertising trackers.
• We do not collect health, biometric, precise-location, or payment-card data through the free product.
• We do not read or store the résumé you submit to an employer — you apply on their site, not ours.

4. Why we process data (legal bases)

• Contract — to give you the account and features you signed up for.
• Legitimate interest — to keep the service secure, prevent abuse, improve relevance, and build aggregate market insights (no individual profiling of job seekers for third parties).
• Consent — for non-essential cookies and email alerts you can opt into and out of at any time.
• Legal obligation — to respond to lawful takedown, data subject, and law-enforcement requests.

5. AI & automated processing

We use machine-learning models to extract structured fields (salary, skills, seniority) from raw job text, generate short summaries, deduplicate near-identical listings, and rank search results. These systems do not make legally-significant decisions about you. Employer classification (verified / unverified) is rule-based and reviewable on request.

6. Subprocessors

We share data with a small set of infrastructure providers, each bound by a data-processing agreement:

• Cloud hosting & database (Supabase / Cloudflare Workers) — EU/US regions.
• Authentication (Supabase Auth, Google OAuth) — sign-in identity.
• AI inference (Lovable AI Gateway / Google Gemini / Groq) — text extraction only; prompts and outputs are not retained by the vendor beyond the request window.
• Error monitoring & security telemetry — anonymised stack traces.

7. Retention

• Account data — kept while your account is active; deleted within 30 days of account deletion.
• Usage logs — 90 days rolling.
• Public job data — retained while the source posting is live; deactivated after 14 days without a source re-appearance; purged from primary tables after 12 months.
• Backups — up to 35 days.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold on you.
• Correct inaccurate data.
• Delete your account and associated personal data.
• Object to processing based on legitimate interest.
• Port your data to another service (JSON export).
• Withdraw consent for email alerts and optional cookies.
• Lodge a complaint with your local data-protection authority.

To exercise any right, email inknamestudio@gmail.com. We respond within 30 days.

9. Security

We encrypt data in transit (TLS 1.2+) and at rest, isolate tenants with row-level security, rotate secrets regularly, and follow the principle of least privilege for internal access. API keys are stored only as SHA-256 hashes.

10. International transfers

Our infrastructure spans multiple regions. When personal data leaves your region we rely on Standard Contractual Clauses or equivalent safeguards.

11. Children

Talenthic is not directed at children under 16. We do not knowingly collect data from children; if you believe we have, email us and we will delete it.

12. Changes

We will post material changes to this policy on this page and, where required, notify you by email. Continued use after an update constitutes acceptance.