Privacy Policy

Effective 1 October 2026 · Last updated 29 September 2026

This policy explains how Talunly (“we”) handles personal data for Talunly. It covers people who visit this website and people who use the product on behalf of a company.

Applying for a job? When you apply through a company’s careers page, that company decides how your application is used, and we handle it for them. See our Candidate Privacy Notice.

Our two roles

What we collect, and why

DataWhyLegal basis (GDPR)
Account details: name, work email, company, role, sign-in identifiersTo create and secure your account, and let your team work togetherContract
How you use the product: actions such as moving candidates, which are recorded in audit logsTo run the service, keep it secure, and keep the hiring decision record your company relies onContract; legitimate interests
Notification settings, and emails we send youTo send the notifications you’ve chosen, and essential emails (invites, interviews)Contract
Whether you asked for product updates and offers from us, and when you askedTo send you those emails, and only if you ticked the box when you signed up or turned them on in Settings → Notifications. Every one has an unsubscribe link, and you can turn them off at any time.Consent
Billing details (handled by our payment provider; we don’t store card numbers)To charge for your planContract; legal obligation
Messages you send usTo reply and give supportLegitimate interests
Basic server logs for this website (IP address, pages requested)Security and keeping the site runningLegitimate interests

This website sets no advertising or analytics cookies. See our Cookie Policy.

Who we share data with

We share data only with the service providers that help us run Talunly, listed on our Subprocessors page, and with authorities where the law requires it. We don’t sell personal data, and we don’t share it for cross-context behavioural advertising.

AI

When a customer uses AI resume screening, the resume text and the job’s requirements are sent to our AI provider, with the candidate’s name, email, phone number and links removed first. The provider may not use them to train its models. You can read more on how our AI works.

Where data is stored

Our production systems run on Fly.io in the United States, with the database hosted by Neon and uploaded files by Cloudflare R2. Our subprocessor list names every provider, and all of them are in the United States — so that is where your data is stored and processed. We don’t currently offer the European Commission’s Standard Contractual Clauses or the UK addendum. If you’re in the EU, UK or Switzerland and need a transfer mechanism in place, email legal@talunly.com before you sign up.

How long we keep it

We keep account data while your company is a customer. When an account ends, we delete its data 30 days later (90 days after a free trial that never became a paid plan), apart from what the law requires us to keep, such as invoices. Each company sets how long its own candidate data is kept.

Security

We protect data with encryption, strict separation between customers, least-privilege access and audit logging. See Security.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California’s CCPA/CPRA), you can ask to access, correct, delete or export your personal data, and to object to or restrict how we use it. Email privacy@talunly.com. We’ll reply within one month, and we won’t treat you differently for using these rights. If you’re a candidate, your request usually goes to the company you applied to, and we’ll help them respond. You can also complain to your local data protection authority.

Children

Talunly isn’t for children, and we don’t knowingly collect data from anyone under 16.

Changes

We’ll post changes here and, if they’re significant, tell customers by email.

Contact

Talunly, New York, NY, USA · privacy@talunly.com