Talent AI Privacy Policy

1. Data we process in Talent AI

• Account data of recruiters and team members: name, email address, company and settings.
• Candidate data that recruiters upload or import (for example CVs and application details) to evaluate applications.
• Technical data needed to run the service securely, such as logs and IP addresses.

2. Google user data

Connecting Google Calendar is optional. If you connect it under Settings → Calendar, Talent AI requests only these permissions:

• openid and email: to know which Google account you connected and to show it in your settings.
• calendar.freebusy (see your availability): to check when you are busy in your main calendar and in the calendar chosen for interviews, so that candidates can only book interviews in times when you are free. We only see busy/free time ranges, never the titles, descriptions, attendees or other contents of your events.
• calendar.events.owned (create and manage events on calendars you own): to add the interviews that candidates book with you to the calendar you chose (your main calendar unless you pick another one you own), and to update or cancel those interview events. We do not use it to read or change any other event in your calendar.
• calendar.calendarlist.readonly (see the list of your calendars): only to list the calendars you own so that you can choose which one receives the interviews. We do not read anything else from the list and do not store it; we only keep the one calendar you choose.

3. How we store and protect Google user data

• We store your Google account email address, the permissions you granted, an OAuth refresh token and the id of the calendar you chose for interviews. For each booked interview we store the id of the event Talent AI created and of the calendar it is in, so we can move or cancel exactly that event.
• The refresh token is encrypted with AES-256-GCM before it is saved and is only decrypted on our servers when Talent AI needs to call the Google Calendar API for you.
• Free/busy information is requested when it is needed to offer interview times and is not stored.
• All traffic to Google and to Talent AI is encrypted in transit (HTTPS/TLS).

4. Sharing and Limited Use

Talent AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

We do not sell Google user data, do not use it for advertising, and do not use it to develop, improve or train generalized artificial intelligence or machine learning models. We do not share it with third parties, except with the hosting providers that run Talent AI on our behalf, when required by law, or as part of a merger or acquisition with prior notice. No person at Talent AI reads your Google data unless you ask us to for support, it is needed for security reasons, or the law requires it.

5. Retention and deletion

• You can disconnect Google Calendar at any time under Settings → Calendar. We then revoke the access token at Google and delete the stored connection (email address, permissions and refresh token).
• You can also remove Talent AI from your Google account at https://myaccount.google.com/permissions.
• When your Talent AI account is deleted, your calendar connection is deleted with it.

6. Your rights

Under the GDPR you have the right to access, rectify, delete, restrict and port your data and to object to its processing. You can also lodge a complaint with a supervisory authority, such as the Spanish Data Protection Agency (AEPD).

7. Contact

Alfa Blockchain Consulting S.L., Aribau 175, Ppal 1B, 08036 Barcelona, Spain — info@alfabc.io