Last updated: March 21, 2026
We collect information you provide or that is generated through your use of the Service, including:
If you use the Service as a guest (without creating an account), we still collect assessment responses, approximate location, and device data associated with your session.
We use a session cookie to keep you signed in across pages. We also use Google Analytics (via Firebase) to understand how the Service is used, such as page visits and feature adoption. Google Analytics may set its own cookies; see Google's cookie policy for details.
We use Google reCAPTCHA Enterprise on certain pages to protect against automated abuse. reCAPTCHA may collect hardware and software information; see Google's Privacy Policy.
We use data to operate and improve the Service, generate AI-powered scorecards and career recommendations, support recruiter-candidate workflows, track profile views (location-level analytics visible to profile owners), prevent abuse, communicate with you, and comply with law. Recruiters are notified about a recruiter-led assessment only after you explicitly submit your scorecard.
Where enabled, we may request camera access to capture a profile photo and verify presence. Face detection runs entirely on your device using your browser's built-in capabilities—no facial data is sent to our servers or any third party. We may also encourage microphone-based dictation for text answers, but we do not require nor store audio recordings; dictated text is captured as normal text input from your device.
We encrypt personally identifiable information (such as names, emails, resume text, and locations) with AES-256 encryption before storing it. AI-generated outputs use placeholders (e.g., [CANDIDATE_NAME]) instead of real names; actual names are injected server-side only at display time. We use industry-standard controls and reputable cloud providers. No method is 100% secure, but we continuously improve safeguards.
We use third-party AI providers (such as Google Cloud Vertex AI) to generate insights, scorecards, career recommendations, and practice interview conversations. Your data is processed to deliver these features.
Draft recruiter-led assessments may be automatically deleted after a period of inactivity. Practice interview transcripts are retained for your records. Submitted scorecards and application artifacts are retained to support recruiter workflows, unless you delete them or request account deletion, subject to legal obligations.
We share your scorecards with recruiters you choose or submit to, and with service providers (cloud, email, AI, and geocoding) who support the Service under confidentiality and data processing terms. If you make a scorecard or profile public, it is accessible to anyone with the link. We do not sell personal data.
You may create a public profile at a custom handle (e.g., talentproof.ai/p/yourname). Public profiles display your name, verified skills, scores, and professional archetype. Profile view analytics (viewer country, city, and approximate coordinates) are collected and shown to you. You can toggle scorecard visibility between public and private where available.
Candidate-Owned Data. Your personal profile, resume, assessment responses, skill verifications, scorecards, career copilot conversations, and job-match analyses are your data. You own it. No recruiter, company, or third party acquires ownership of your data by virtue of you applying to a job, accepting an invitation, or completing an assessment on the Service.
Company-Owned Data. Recruiters and companies own the job postings, assessment configurations, evaluation criteria, interview feedback, pipeline decisions, and internal notes they create. They do not own candidate data.
Recruiter Access Is a License, Not Ownership. When you submit an assessment to a recruiter-led job, the recruiter's company receives read access to your scorecard and application materials within the Service. This is a limited, revocable license—not a transfer of ownership. Recruiters may not export, copy, or redistribute your data outside the Service without your explicit consent.
Data Portability. You may request a copy of your personal data at any time by contacting privacy@talentproof.ai. We will provide your data in a commonly used, machine-readable format within 30 days.
Right to Deletion. You may delete your account at any time, which triggers deletion of your profile, assessment sessions, scorecards, proctoring data, and associated records. This also revokes any recruiter access to your data. Company-created content (their job postings, their interview feedback) is retained separately as it belongs to the company.
You can control public/private visibility of scorecards and profiles, discard drafts before submitting, and request deletion of certain data. For data access, correction, or deletion requests, email us at privacy@talentproof.ai or use the in-app Contact form (requires sign-in).
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
Your data may be processed in the United States or other locations where we and our providers operate. We maintain protections consistent with this policy regardless of where data is processed.
We may update this Policy and will post the latest version at talentproof.ai/privacy. Material changes will be highlighted within the Service.
Questions or requests? Email privacy@talentproof.ai or use the in-app Contact form.