Privacy Policy

Privacy

How we handle the data you entrust to us

Account, resume, billing, and AI usage — written for clarity, not obfuscation.

Last updated
July 25, 2026
Controller
TalentSync AI
Scope
Account · content · billing

Commitments

01

No model training on your docs

We do not sell your resume content or use it to train foundation models. Uploads power your features, not a public training corpus.

02

BYOK stays encrypted

Bring-your-own API keys are stored encrypted server-side and used only to call providers you choose. You can remove them anytime.

03

Delete is real

Account deletion from Settings removes your profile, resumes, generations, chat history, and related records we control.

04

Least data, clear purpose

We collect what is needed to run authentication, AI tools, billing, and product reliability — not a shadow dossier.

Overview

TalentSync AI ("TalentSync", "we", "us") provides AI-assisted career and hiring tools — resume analysis, ATS scoring, document generation, interview prep, LinkedIn content, and related workflows. This Privacy Policy explains what information we process when you visit our site, create an account, or use the product.

By using TalentSync you acknowledge this policy. If you do not agree, please do not use the service. We may update this page as the product evolves; the "Last updated" date at the top will change when we do.

What we collect

Depending on how you use TalentSync, we process the following categories of information:

01

Account & identity

  • Name, email address, and profile image (when provided)
  • Password hash for email sign-in (never plain text)
  • OAuth identifiers if you sign in with Google or GitHub
  • Role (job seeker, recruiter, or admin) and verification status
02

Career content you create

  • Resume text, structured resume data, and tailored variants
  • ATS evaluations, improvement suggestions, and analyses
  • Cover letters, cold emails, interview answers, and LinkedIn drafts
  • Career Coach chat threads and coding-profile links you attach
03

Configuration & usage

  • Encrypted LLM provider keys and model preferences (BYOK)
  • Feature usage counters used for plan limits and credits
  • Billing plan, subscription status, and credit ledger entries
  • Payment references from Razorpay (we do not store full card numbers)
04

Technical & product analytics

  • Session cookies required to keep you signed in securely
  • Basic device and browser signals for security and reliability
  • Product analytics via PostHog (EU-hosted UI; events proxied through our domain where configured)
  • Error and operational logs needed to keep the service available

Resume and career documents often contain sensitive personal details (contact info, employment history, education). Treat uploads as confidential material you choose to process with our tools.

How we use data

We use personal data to:

  • Authenticate you, secure sessions, and manage your account
  • Run the features you request (analysis, generation, coaching, exports)
  • Store history so you can revisit resumes, letters, and chats
  • Apply plan limits, credits, and subscription entitlements
  • Process payments and send transactional email (verification, resets)
  • Measure product usage, fix bugs, and improve reliability
  • Detect abuse, enforce terms, and protect the platform

AI processing

When you use AI features, relevant inputs (for example resume text and a job description) are sent to large language model providers so the feature can complete. How that works depends on your setup:

Bring your own key (BYOK)

Requests are sent with credentials you configure. Keys are stored encrypted and are never shown back in full. Your provider's privacy terms also apply to those calls.

Platform-hosted models

On hosted plans, we route work through our configured providers under our agreements with them. We do not use your content to train public foundation models.

AI outputs can be imperfect. You remain responsible for reviewing generated content before sending it to employers or candidates.

When we share information

We do not sell your personal information. We share data only as needed to operate the product:

RecipientPurpose
Infrastructure & database hostsStore accounts, resumes, and app data securely
LLM providersExecute AI features you trigger (BYOK or hosted)
RazorpayProcess subscription and credit-pack payments
Auth providers (Google)Sign-in via Google OAuth
Email deliveryTransactional and product notices when needed
PostHogProduct analytics and experience improvement
Legal / safetyComply with law or protect users and the service

Optional visibility features (for example showing a resume in a recruiter-facing pool) only apply when you explicitly enable them.

Retention and deletion

We keep account and content data while your account is active and as needed to provide history, billing records, and security. Payment and ledger entries may be retained longer where required for accounting or legal compliance.

Delete your account

Signed-in users can permanently delete their account from Account settings. This removes the user record and associated content we store (resumes, analyses, generations, chats, configs), subject to residual backups and legal retention where applicable.

Security

We apply practical safeguards appropriate to a cloud SaaS product:

01

Encrypted transport

HTTPS for traffic between your browser and our services.

02

Credential hygiene

Passwords hashed; BYOK keys encrypted at rest.

03

Access control

API routes authenticate sessions and scope data to your user.

04

Least privilege

Admin tools and recruiter views are role-gated.

No method of transmission or storage is perfectly secure. If you suspect unauthorized access to your account, secure your Google Account and contact us promptly.

Cookies and analytics

We use essential cookies and similar technologies to keep you signed in (session authentication) and to remember basic preferences required for the app to function.

We also use PostHog for product analytics so we can understand feature adoption and improve the experience. Analytics is configured with an EU PostHog host where applicable, and client events may be routed through a first-party proxy path on our domain.

You can control cookies through your browser settings. Blocking essential cookies may prevent sign-in and other core features from working.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to / restrict certain processing. TalentSync supports these in practice through:

  • In-product editing of resumes and account profile fields
  • Removing BYOK keys and generated history from the app
  • Full account deletion from Account settings
  • Email requests for access or assistance at the contact below

We will respond to verified requests within a reasonable period and may need to confirm your identity before releasing or deleting data.

Contact

Questions about this policy or your data can be sent to:

Privacy contact[email protected]

TalentSync AI · Privacy Policy · July 25, 2026