Datenschutzrichtlinie

Talenlio is an AI-powered career platform operated by ILMTEC. We help job seekers build optimised resumes, prepare for interviews, and find matching jobs through AI-driven automation. Our registered address is available at support@talenlio.ai.

We collect only the data necessary to provide you with an effective career acceleration experience:

• Account information: name, email address, password (hashed), profile photo
• Career data: resume, work history, education, skills, career goals
• Usage data: pages visited, features used, session duration, device and browser type
• Payment data: billing name, email, and transaction IDs (card details handled by Stripe; we never store raw card numbers)
• Communication data: emails and chat messages you send to our support team

• To power AI features: resume analysis, job matching, interview coaching, and career strategy
• To send transactional emails: account verification, billing receipts, job application updates
• To improve our platform through anonymised, aggregated analytics
• To respond to your support requests
• To comply with legal obligations

We do not sell your personal data to third parties. Ever.

Our AI agents process your resume and career history to generate personalised recommendations, tailored resumes, and job matches. This processing is automated but is designed to benefit you directly. You can review and edit any AI-generated output before it is used on your behalf.

We share data only with the following trusted service providers under strict data-processing agreements:

• OpenAI: AI-powered content generation
• Stripe: payment processing
• Amazon Web Services: secure cloud hosting
• SendGrid / Resend: transactional email delivery
• Cloudflare: bot and spam protection on our forms (Cloudflare Turnstile)

Our contact, demo, Job Expo, investor and partnership forms use Cloudflare Turnstile to tell people apart from automated spam. Turnstile loads only once you start using a form. To run its check, Turnstile reads technical signals from your browser and may store data on your device that is strictly necessary for this check, and Cloudflare processes your IP address, TLS fingerprint, browser user agent and the site the form is on. It does not read what you type into the form. Cloudflare acts as our processor for this check, and as an independent controller when it uses these signals to improve its bot detection. Cloudflare, Inc. is based in the United States; transfers to it rely on its certification under the EU-U.S. Data Privacy Framework and on the EU Standard Contractual Clauses in the Cloudflare data processing addendum. Our legal basis is our legitimate interest in keeping our forms free of spam and abuse (Art. 6(1)(f) GDPR). See the Cloudflare Turnstile Privacy Addendum.

To stop one sender from flooding our forms, we also count form submissions per IP address for 10 minutes and, for demo and partnership requests, per email address for one day. These counters store only a salted hash, never the address itself, and we delete them after that period ends. The legal basis is the same legitimate interest.

You have the right to:

• Access a copy of all personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Withdraw consent for marketing communications at any time
• Data portability: receive your data in a machine-readable format

To exercise any of these rights, email us at privacy@talenlio.ai. We respond within 30 days.

We retain your account data for as long as your account is active. If you delete your account, we permanently delete all personal data within 30 days, except where we are required to retain certain records for legal compliance (e.g., billing records for 7 years under tax law).

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We implement role-based access controls, regular security audits, and penetration testing. No system is 100% secure, but we take every reasonable measure to protect your data.

We use essential cookies for authentication and session management. Analytics cookies from Google Analytics and Microsoft Clarity are set only after you accept them in our cookie banner. You can change your choice at any time under Cookie settings in the footer, or in your browser settings.

We may update this policy periodically. We will notify you of significant changes via email and display a banner on the platform. Continued use of Talenlio after changes constitutes acceptance of the updated policy.

For privacy questions or concerns, contact our Data Protection Officer at privacy@talenlio.ai.