Privacy Policy
Version 2026-05-06 · Pre-launch draft. The final policy will be published before public launch and will cover DPDP Act 2023 (India), GDPR (EU/UK), and CCPA (California) disclosures.
1. Who we are
TalentGeenie provides AI-assisted interview preparation. References to “we”, “us”, and “our” mean the TalentGeenie operating entity. Contact: privacy@talentgeenie.com.
2. What we collect
- Account data (email, name, hashed password).
- Content you upload (job descriptions, resumes, answers).
- Practice-run history and credit ledger entries.
- Operational logs (IP, user-agent, request IDs) for security and abuse prevention.
3. How we use AI / LLMs
TalentGeenie uses third-party large language models (LLMs) to generate questions, evaluate answers, and assist with help-desk replies. You should know:
- Providers. We currently use OpenAI and OpenRouter (which routes to Google Gemini, Meta Llama, and MiniMax). Anthropic may be enabled for select features. The full list is on our sub-processors page.
- Cross-border processing. LLM inference may occur in the United States or the European Union. Transfers rely on Standard Contractual Clauses and lawful-transfer provisions under the DPDP Act 2023.
- PII redaction. Where feasible, we redact emails, phone numbers, and identifiers from prompts before sending them to third-party models. Resumes and JDs are treated as confidential.
- No training on your data. We contractually require sub-processors not to use your content to train their foundation models. Where a provider does not offer such a commitment, we do not send identifiable data to that provider.
- AI-generated content is labelled. Every artifact we produce is tagged as AI-generated and includes a disclosure that the output may contain mistakes — please verify important details.
- Your rights. You can dispute or request correction of any AI output via support@talentgeenie.com, and you can delete your data at any time from the account settings.
4. Sharing
We share data only with the sub-processors listed on the sub-processors page and where required by law. We do not sell personal information.
5. Retention & deletion
You can delete your account and content at any time. Backups are purged on a documented schedule. Operational logs are retained for the period required for security and audit obligations.
6. Security
Security reports: responsible disclosure policy and /.well-known/security.txt.
See docs/11-Compliance-Pack.md and docs/17-Legal-Pack-Outline.md for the underlying policy sources.