Privacy Policy

1What Information Do We Collect?

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Biometric data
• Audio and video recordings
• AI-generated inferences and assessments
• Financial data

Payment Data. We may collect data necessary to process your payment if you choose to make purchases. All payment data is handled and stored by our third-party payment processor. We do not store your full payment card details on our systems.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect certain profile information about you from the social media provider.

Information automatically collected

In Short: Some information is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information.

Like many businesses, we also collect information through cookies and similar technologies. Where required by law, we only activate non-essential analytics after you consent through our cookie banner. You can find out more about this in our Cookie Notice.

The information we collect includes:

• Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services.
• Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise.
• Analytics Data. If you accept analytics cookies, we use Google Analytics 4 to collect pseudonymous information about page views, navigation paths, engagement, approximate location, device/browser details, and referral sources so we can measure and improve the Website. We also use Vercel Web Analytics for aggregated, cookie-free traffic and performance measurement.
• Session Recording and Heatmap Data. If you accept analytics cookies, we use Microsoft Clarity to record anonymized session replays, heatmaps, and scroll/click behavior so we can identify usability issues and improve the Website. Clarity automatically masks password fields, and we additionally mask sensitive form fields (such as names and email addresses) so that personally identifiable information typed into the Website is not recorded in session replays. Clarity may use cookies and similar technologies, and is operated by Microsoft as a data processor on our behalf. See Microsoft's Privacy Statement for further information.
• Scheduling and Meeting Information. When you book a demo or meeting through our embedded Calendly widget, Calendly collects information you provide (such as your name, email address, time-zone, scheduling preferences, and any responses to its intake questions) and may collect technical data (such as IP address, device, and browser information) to deliver the scheduling service on our behalf. Calendly acts as a data processor for this information. See Calendly's Privacy Notice for further information.
• AI-generated inferences and assessments. Scores, ratings, and behavioral assessments derived by AI from candidate resumes, interview audio/video, and application data.

2How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To facilitate account creation and authentication and otherwise manage user accounts.
• To deliver and facilitate delivery of services to the user.
• To respond to user inquiries/offer support to users.
• To send administrative information to you.
• To fulfill and manage your orders, payments, returns, and exchanges.
• To enable user-to-user communications.
• To request feedback and to contact you about your use of our Services.
• To send you marketing and promotional communications (with your consent).
• To protect our Services from fraud and security threats.
• To identify usage trends and improve our Services.
• To save or protect an individual's vital interest, such as to prevent harm.
• To conduct AI-powered interviews and assess candidates.
• To verify same-person interview continuity through biometric liveness checks and face comparison, where consent is provided.
• To process audio recordings, video recordings, and transcripts from interview sessions using AI to evaluate candidate performance.
• To track and meter AI feature usage (such as number of interviews, resume reviews, and autofills) per company account for billing, credit management, and overage calculation purposes.

3What Legal Bases Do We Rely On to Process Your Information?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason to do so.

If you are located in the EU or UK

The GDPR and UK GDPR require us to explain the valid legal bases we rely on. We may rely on the following:

• Consent. We may process your information if you have given us permission for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information when necessary to fulfill our contractual obligations to you.
• Legitimate Interests. We may process your information when it is reasonably necessary to achieve our legitimate business interests.
• Legal Obligations. We may process your information where necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where necessary to protect your vital interests or those of a third party.

If you are located in Canada

We may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent). In some exceptional cases, we may be legally permitted to process your information without your consent as outlined under applicable Canadian law.

4When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations and with specific third parties.

We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. The third parties we may share personal information with include:

We may also share your personal information in connection with business transfers, mergers, or acquisitions, or when other users can view information you share publicly on the platform.

5Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. If you consent, we also use Google Analytics 4 to measure page views, understand traffic sources, and improve the Website, and Microsoft Clarity to record anonymized session replays and heatmaps so we can understand how visitors interact with our pages and identify usability issues. We also embed Calendly on our demo-booking pages to schedule meetings; Calendly may set its own cookies and collect information (such as your name, email address, scheduling preferences, and IP address) when you book a meeting through the embedded widget. Separately, we use Vercel Web Analytics for aggregated, cookie-free traffic measurement.

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6Do We Offer Artificial Intelligence-Based Products?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). We provide the AI Products through third-party service providers, including Google Cloud AI.

How Our AI Evaluates Candidates

In compliance with laws regarding automated employment decision tools (such as NYC Local Law 144 and the Illinois Artificial Intelligence Video Interview Act), we want you to understand how our AI evaluates candidates. Our AI assesses:

• Resume Parsing & Matching: The AI extracts text from your resume to evaluate skills, experience, and context against the specific requirements of the job description.
• Video & Audio Analysis: During AI-driven interviews, the system may analyze your speech patterns, vocal sentiment, and transcript content to assess communication skills and relevant experience.
• Same-Person Continuity: Biometric liveness checks and limited interview frames may be used separately from interview scoring to verify continuity across interview attempts.

Our AI Products are designed for the following functions:

7How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details (like your Facebook or X logins). Where you choose to do this, we will receive certain profile information about you from your social media provider, which will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public.

We will use the information we receive only for the purposes described in this Privacy Notice. We recommend that you review your social media provider's privacy notice to understand how they collect, use, and share your personal information.

8Is Your Information Transferred Internationally?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Regardless of your location, your information may be transferred to, stored by, and processed by us in our facilities and in the facilities of the third parties with whom we may share your personal information, including facilities in the United States and other countries.

If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

9How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

Biometric and AI Video Interview Retention

In specific compliance with the Illinois Artificial Intelligence Video Interview Act (AIVIA) and the Illinois Biometric Information Privacy Act (BIPA) regarding audio/video interviews and associated AI analyses:

• Interview video and audio recordings are automatically deleted after 90 days from the date of the interview. After deletion, only the transcript, review scores, and AI-generated analysis data are retained.
• Videos with active or pending reviews are exempt from auto-deletion until the review is completed.
• Companies may manually delete interview recordings at any time before the 90-day auto-deletion.
• If a candidate requests the deletion of their video interview, we process that request and delete all copies of the video (including from backup systems) within 30 days of receiving the request.
• Employers using Talsense are contractually obligated to also adhere to these deletion timeframes for any data exported or retained locally.
• Unless legally required to retain it longer, we will permanently destroy biometric identifiers or information at the time the initial purpose for collecting it has been satisfied, or within 3 years of your last interaction with the platform, whichever occurs first.

When we have no ongoing legitimate business need to process your general personal information, we will either delete or anonymize such information, or securely store your personal information and isolate it from any further processing until deletion is possible.

10How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. You should only access the Services within a secure environment.

11Do We Collect Information from Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction. By using the Services, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at contact@talsense.com.

12What Are Your Privacy Rights?

In Short: Depending on your location, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws including: (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details provided below or updating your preferences.

Opting out of marketing communications

You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us directly. However, we may still communicate with you for service-related purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, or comply with legal requirements.

For questions or comments about your privacy rights, you may email us at contact@talsense.com.

13Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized.

As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

14Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of certain US states, you may have specific rights regarding your personal information.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you.

Categories of Personal Information We Collect

Your Rights

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising or profiling

How to Exercise Your Rights

To exercise these rights, you can contact us by visiting contact@talsense.com, by emailing us at contact@talsense.com, or by visiting https://www.talsense.com/contact.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.

15Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

16How Can You Contact Us About This Notice?