Data Processing Addendum
Roles
For personal data in your account (candidates, and your team’s activity), you are the controller and Talunly is your processor (a “service provider” under the CCPA/CPRA).
What we do with it
We process personal data only on your documented instructions: to provide, secure and support Talunly. We don’t sell it or share it for advertising, and we don’t use it to train AI models.
| People | Job candidates; your team members |
|---|---|
| Data | Contact details, resumes, cover letters, application answers, hiring notes, interview feedback, AI screening results. Voluntary self-identification, kept separately and reported only in anonymised totals. |
| Special categories | Only the self-identification answers candidates choose to give (for example race or disability), used only for anonymised fair-hiring reports |
| How long | The retention period you set in Company Settings, and until the account ends |
Our commitments
- Confidentiality: only people who need access to run the service have it, and they’re bound by confidentiality.
- Security: the technical and organisational measures described on our Security page.
- Subprocessors: listed on our Subprocessors page, with 30 days’ notice of changes and a right to object.
- Helping with requests: tools to find, export, correct and delete a candidate’s data, and help with data subject requests and impact assessments.
- Breaches: we’ll tell you without undue delay, and within 48 hours of becoming aware of a personal data breach affecting your data.
- Deletion: when the agreement ends, you can export your data for 30 days, after which we delete it.
- Audits: we’ll give you the information needed to show compliance, and allow reasonable audits.
- Where your data is: Talunly runs in the United States and every subprocessor we use is there, so that is where your data is stored and processed. We don’t currently offer the Standard Contractual Clauses or the UK addendum. If you’re in the EU, UK or Switzerland, email legal@talunly.com before you sign up and we’ll agree a transfer mechanism with you first.
To request a countersigned copy, email legal@talunly.com.