Privacy Policy

This Privacy Policy explains how VisionTact LLC ("we", "us", or "our"), the operator of TalentSage, collects, uses, stores, and protects your personal data. By using TalentSage, you consent to the practices described in this policy. We are committed to protecting the privacy of all users, including recruiters, hiring managers, administrators, and candidates.

We collect the following categories of information: Account Information: Name, email address, company name, phone number, and billing details provided during registration. Candidate Data: Resumes, CVs, cover letters, contact information, work history, education, skills, and any other data uploaded by recruiters or submitted by candidates through job application portals. Assessment Data: Brain Test answers, Brain Task submissions (including file uploads and GitHub links), scores, and integrity monitoring data (such as tab-switch events). Usage Data: Login timestamps, feature usage patterns, page views, click events, IP addresses, browser type, and device information. Communication Data: Emails sent and received through the platform, notes, call logs, and messaging history. AI-Generated Data: Candidate evaluation scores, match scores, AI-generated job descriptions, candidate submission profiles, and analytics reports.

We use collected information for the following purposes: • To provide, operate, and maintain the TalentSage platform • To process AI evaluations across 7 dimensions (technical skills, relevant experience, education, career trajectory, project evidence, role fit, and risk flags) • To run the Skill Veracity program (Brain Tests and Brain Tasks) and generate assessment scores • To power the AI Matching Engine for candidate-to-job scoring • To automate email sequences, follow-ups, and candidate submissions • To generate analytics dashboards, recruiter scorecards, and performance reports • To process billing and manage subscription plans • To provide customer support and respond to inquiries • To send platform updates, security alerts, and service-related communications • To improve platform features and user experience through aggregated, anonymized analytics

TalentSage enforces mandatory PII anonymization on every AI evaluation, on every plan. Before any AI processing occurs: • Candidate name, gender, address, and nationality are automatically stripped from the data • 8 built-in bias-prevention rules are active by default and cannot be disabled • All AI evaluation scores are backed by verbatim quotes from the candidate's CV, ensuring transparency and auditability • This anonymization applies universally across Freelancer, Growth, and Enterprise plans This process ensures that AI scoring is based solely on skills, experience, and qualifications, not on personal characteristics.

We implement industry-standard security measures to protect your data: • All data is encrypted in transit (TLS 1.2+) and at rest (AES-256) • Infrastructure is hosted on secure, SOC 2-compliant cloud providers • Role-based access control (RBAC) ensures that users only access data they are authorized to view • Enterprise plans support SSO/SAML integration for centralized authentication • Audit logs track every action on the platform for compliance and security monitoring • Regular security assessments and penetration testing are conducted • Candidate data is isolated per tenant organization, meaning one company's data is never accessible to another

We do not sell your personal data. We may share data with: • Payment processors for subscription billing (e.g., Stripe) • Cloud infrastructure providers for hosting and data storage • Email delivery services for automated communications • Job board integrations (50+) when you choose to post jobs externally • Calendar services for interview scheduling integrations • Analytics providers for aggregated, anonymized usage insights All third-party providers are bound by data processing agreements and are required to maintain appropriate security standards. We share only the minimum data necessary for each service.

Recruiters and organizations using TalentSage are responsible for ensuring they have appropriate legal basis (such as consent or legitimate interest) to collect and process candidate data through the platform. Candidates who apply through TalentSage-powered job portals are informed that: • Their application data will be processed by the hiring organization using TalentSage • AI evaluation will be used to assess their application, with PII anonymized • Brain Test and Brain Task assessments include integrity monitoring (auto-submit on tab switch) • They can request access to, correction of, or deletion of their personal data by contacting the hiring organization

We retain your data as follows: • Active account data is retained for the duration of your subscription • Upon account termination, data is retained for 30 days to allow for reactivation or export, then permanently deleted • Assessment data (Brain Test and Brain Task results) is retained as long as the associated candidate record exists • Audit logs are retained for 2 years for compliance purposes • Aggregated, anonymized analytics data may be retained indefinitely for product improvement • You may request a full data export at any time through your account settings

Depending on your jurisdiction, you may have the following rights: • Right to Access: Request a copy of the personal data we hold about you • Right to Rectification: Request correction of inaccurate or incomplete data • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements) • Right to Portability: Request your data in a machine-readable format • Right to Object: Object to the processing of your data for certain purposes • Right to Restrict Processing: Request that we limit how we use your data • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent To exercise any of these rights, contact us at hello@talentsage.io. We will respond within 30 days.

TalentSage uses cookies and similar technologies for: • Authentication and session management • Remembering user preferences and settings • Platform analytics and performance monitoring • Security and fraud prevention You can manage cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled while using TalentSage.

If you access TalentSage from outside the United States, your data may be transferred to and processed in the United States or other jurisdictions where our infrastructure is located. We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses (SCCs) where required by GDPR.

TalentSage is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For questions, concerns, or requests related to this Privacy Policy, contact us at: VisionTact LLC Email: hello@talentsage.io