Privacy

Data Protection Policy

At Talqo, we place the protection of your privacy at the heart of our technology and our team.

Legal Notice

Publisher and hosting information

Roles under GDPR

Talqo

Data Processor

We process data according to our clients' instructions.

Client company

Data Controller

They define why and how data is used.

Candidates

Data subjects

Have rights over their personal data.

Personal Data Processed

  • IdentityName, first name, email, phone
  • ProfessionalCV, experience, qualifications
  • AI AnalysisMatching scores, recommendations
  • Internal HR notesComments, evaluations, feedback
  • TechnicalConnection logs, IP addresses

Processing Purposes

Application management and monitoring of the recruitment process
Candidate evaluation and selection by client companies
Profile assessment assistance via artificial intelligence tools
Recruitment process optimization and improvement of user experience
Communication between client companies and candidates
Generation of statistics and analyses for client companies

Data Retention

The personal data retention period is determined by the client company (data controller), in accordance with its legal obligations and operational needs.

Talqo does not set a default retention period. Data is retained as long as necessary for the purposes for which it was collected, or in accordance with applicable legal obligations.

At the request of the client company, Talqo proceeds with the deletion or anonymization of personal data upon termination of the contract.

Subprocessors

Talqo uses subprocessors to provide the service. These subprocessors are subject to strict contractual obligations regarding personal data protection.

Database
Supabase
West EU (Paris, eu-west-3)
Data in EU only
Site hosting
AWS
West EU (Paris, eu-west-3)
Data in EU only
Artificial Intelligence
OpenAI or Mistral
EU contractual clauses

Security Measures

End-to-end encryption

All your data is encrypted via TLS 1.3 in transit and at rest (AES-256). We use Supabase infrastructure in West EU (Paris, eu-west-3) πŸ‡«πŸ‡· and AWS in Europe.

Restricted access
Role-based access control, strong authentication
Logs and monitoring
Access logging, security surveillance
Data isolation
Logical isolation per client company
Backups
Regular and secure backups
Training
Staff training on best practices

Rights of Data Subjects

In accordance with GDPR, candidates (data subjects) have the following rights:

Right of access
Obtain a copy of personal data
Right of rectification
Correct or complete inaccurate data
Right to erasure
Request data deletion
Right to restriction
Temporarily limit processing
Right to portability
Retrieve data in a structured format
Right to object
Object to processing for legitimate reasons
Important

Requests to exercise rights must be addressed directly to the client company that is recruiting (data controller). Talqo, as a data processor, will handle these requests according to the client company's instructions.

Candidates may also file a complaint with the French Data Protection Authority (CNIL) if they believe their rights are not being respected.

Cookies

Marketing site

No analytics or advertising tracking cookies. No third-party cookies are placed.

ATS Application

Strictly technical cookies (authentication, session, preferences). No tracking.

Technical cookies are necessary for the proper functioning of the platform and do not require prior consent in accordance with applicable regulations.

Contact

For any question regarding personal data protection or to exercise your rights, you can contact:

Talqo
Email : talqo.contact@gmail.com
Address: [To be completed]

For requests relating to data processed by a client company, please contact that company directly as they are the data controller.

Last updated: 23 mars 2026