Talo operates the website talo-2.polsia.app and related services. We are a talent matching platform that connects candidates with employers using AI-powered skill matching. Talo is the data controller for all personal data collected through our platform.
We process data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation).
Job titles, required skills, company info, location, salary ranges
When employers post roles or from our job board partners
Application data
Submitted applications, match scores, employer outreach
When you apply to a job or receive outreach
Technical data
IP address, browser type, device info, pages visited
Automatically on every visit
Consent records
Analytics opt-in, candidate data sharing preference
When you interact with the consent banner
We do not collect special categories of data (e.g., health, political opinions, biometric data) without explicit consent for a specific, lawful purpose.
3. How we use your data
Your data is used for the following purposes:
Talent matching: Generate skill embeddings and compute match scores between your profile and job listings using OpenAI embeddings + pgvector similarity search.
Profile extraction: Process your CV/resume to extract structured skills and experience using OpenAI (data not stored after extraction beyond structured profile fields).
Employer outreach: If you opt in to candidate data sharing, matched employers can view your profile and contact you about relevant roles.
Application tracking: Record and display your job applications and employer responses.
Analytics: Understand site usage patterns — only if you have consented to analytics cookies.
Security: Detect and prevent fraud or abuse of the platform.
We do not sell your personal data to third parties or use it for automated decision-making that significantly affects you.
4. Legal basis for processing
Under GDPR Article 6, our processing is based on:
Contract (Art. 6(1)(b)): Processing your profile and matching you to jobs is necessary to perform our service agreement with you.
Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, and aggregated analytics that do not identify individuals.
Consent (Art. 6(1)(a)): Analytics cookies and candidate data sharing — you can withdraw consent at any time via the consent banner or your account settings.
5. Cookies & tracking
We use cookies to deliver and improve our service:
You can update your cookie preferences at any time by clicking "Cookie settings" in our footer or revisiting the consent banner on any page.
6. Your rights under GDPR
As an EU resident, you have the following rights:
Right of access (Art. 15): Request a copy of all personal data we hold about you.
Right to rectification (Art. 16): Correct inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Right to restriction (Art. 18): Request processing be restricted while disputes are resolved.
Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interests.
Right to withdraw consent: If processing is based on consent, you may withdraw it at any time.
Right to lodge a complaint: File a complaint with your local data protection authority (DPA) at any time.
To exercise any of these rights, contact us at privacy@talo-2.polsia.app. We will respond within 30 days.
7. Candidate data sharing
When you create a profile on Talo, your data is used to match you with relevant roles. By default, your profile is visible to matched employers within our platform.
You have full control over whether your profile data is shared beyond direct matching:
Default (opt-out): Employers can view your profile when you are matched to their job listings within Talo.
Candidate data sharing opt-in: When you explicitly enable this in the consent banner, matched employers may contact you via Talo's outreach feature. This does not export your data to third-party systems.
Opt-out: You can decline data sharing by not enabling it in the consent banner, or by updating your preferences at any time.
Your profile data is never sold, licensed, or transferred to third parties outside of the Talo platform for marketing purposes.
8. Data retention
Profiles: Retained until you delete your account or request removal. We may retain anonymised data for platform improvement.
Applications: Retained for 2 years after the application status becomes final.
Consent records: Retained for 3 years for compliance and audit purposes.
Analytics data: Retained for 12 months (only if you have consented to analytics).
Technical logs: Retained for 90 days maximum.
9. Data security
We implement appropriate technical and organisational measures to protect your data:
All data is transmitted over TLS 1.2+ encryption
Database hosted on Neon (PostgreSQL) with encryption at rest
Access controls and least-privilege principles applied across all systems
Regular security reviews and dependency updates
In the event of a data breach that is likely to result in high risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform you directly if required.
10. Contact us
Data Protection Enquiries
If you have questions about how we handle your data, want to exercise your rights, or raise a concern:
Email: privacy@talo-2.polsia.app
We aim to respond to all data-related enquiries within 30 days.
For general enquiries unrelated to data protection, please use the contact form on our site.
Your privacy choices
We use cookies to improve your experience. You can choose how we use your data below.
Analytics cookiesHelp us understand how visitors use our site
Candidate data sharingAllow employers to view your profile for job matching