Privacy Policy

1. Introduction

At Talen.to, a service operated by BabyLagoon LLC, a limited liability company organized under the laws of the State of Delaware, United States, we take our users’ privacy very seriously. This Privacy Policy describes how we collect, use, store and protect personal information when you use our talent assessment platform, including our website (app.talen.to) and our Chrome extension for LinkedIn.

By using Talen.to or our Chrome extension, you accept the practices described in this policy. If you do not agree, please do not use our services.

2. Information We Collect

2.1 Company Information

When you register as a company, we collect:

• Company name and contact details (address, phone)
• Administrator and user information (name, email, job title, department)
• Billing information (card details processed by secure third parties)
• Platform usage data (access logs, actions taken, preferences)
• Account configuration and organization preferences

2.2 Candidate Information

To run psychometric assessments and culture fit analysis, we collect:

• Full name and email address
• Answers to psychometric assessments based on the Big Five (OCEAN) model
• Relevant professional information shared voluntarily (CV, experience, skills)
• Assessment results and culture fit analysis
• Assessment metadata (date, duration, device used)

2.3 Technical Information

We automatically collect certain technical information when you use our service:

• IP address and approximate geographic location
• Browser type and operating system
• Pages visited and time spent
• Cookies and similar tracking technologies
• Device identifiers

3. How We Use Your Information

We use the information we collect for the following legitimate purposes:

3.1 Providing the Service

• Providing and improving our psychometric assessment services
• Generating culture fit reports and role analysis
• Processing and storing assessment results
• Managing user accounts and access permissions

3.2 Communication

• Communicating with you about your account, services and updates
• Sending important notices about changes to our terms or policies
• Responding to your questions and support requests
• Sending information about new products or features (with your consent)

3.3 Improving the Service

• Improving our algorithms and predictive models (using anonymized and aggregated data)
• Running statistical and research analysis (anonymized data)
• Developing new functionality and features
• Optimizing the user experience

3.4 Business Operations

• Processing payments and managing subscriptions
• Preventing fraud and abuse of the service
• Complying with legal and regulatory obligations
• Protecting our legal rights and those of our users

4. Data Protection

The security of your data is our top priority. We implement enterprise-grade technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure or destruction:

4.1 Technical Measures

• Encryption: Data in transit protected with SSL/TLS 1.3 and data at rest with AES-256 encryption
• Authentication: Multi-factor authentication (MFA) systems available
• Infrastructure: Servers hosted in certified data centers with strict physical access controls
• Monitoring: 24/7 monitoring and intrusion detection systems
• Backups: Automatic and redundant data backup with disaster recovery

4.2 Organizational Measures

• Access control: Access to personal information restricted to authorized employees on a need-to-know basis
• Training: Regular staff training on data security and privacy
• Audits: Regular security audits and vulnerability assessments
• Policies: Documented policies and procedures for handling personal data
• Compliance: Adherence to industry standards and security best practices

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your data, but we commit to notifying you of any security breach that may affect your personal data as required by applicable law.

5. Sharing Information

We do not sell or rent your personal information to third parties. We only share data in the following limited situations:

5.1 With Your Consent

Candidate assessment results are shared only with the company that requested the assessment and that has a contractual relationship with the candidate. The candidate must give explicit consent before taking the assessment.

5.2 Service Providers

We share information with trusted service providers that help us operate the platform, subject to strict confidentiality agreements. These include:

• Hosting and cloud infrastructure providers
• Payment processors (payment information is not stored on our servers)
• Analytics and monitoring services (aggregated and anonymized data)
• Email and communication service providers

These providers may only use the information for the specific purposes for which they were engaged and are required to maintain confidentiality.

5.3 Legal Requirements

We may disclose personal information when necessary to:

• Comply with laws, regulations, court orders or legal processes
• Protect and defend our legal rights or property
• Prevent or investigate possible fraud, abuse or security breaches
• Protect the safety of our users or the general public

5.4 Business Transfers

In the event of a merger, acquisition, reorganization or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any change in the ownership or use of your personal data.

6. Your Privacy Rights

Depending on your location, you have certain rights regarding your personal information. We commit to respecting and facilitating the exercise of these rights:

6.1 Available Rights

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request the deletion of your personal information (right to be forgotten)
• Right to Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to the processing of your data for certain purposes
• Right to Restriction: Request that the processing of your data be limited
• Right to Withdraw: Withdraw your consent at any time
• Right Not to Be Subject to Automated Decisions: Not be subject to decisions based solely on automated processing

6.2 How to Exercise Your Rights

To exercise any of these rights, you can contact us at:

• Email:legal@talen.to

We will respond to your request within a reasonable time (generally within 30 days) and in accordance with applicable laws. We may request additional information to verify your identity before processing your request.

6.3 Right to Lodge a Complaint

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the data protection authority of your jurisdiction. That said, we encourage you to contact us first so that we can resolve any concern.

7. Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Company account data: While your account is active and up to 2 years after cancellation
• Candidate data: 2 years from the last activity, unless the company requests an extension
• Billing data: As required by tax and accounting laws (generally 7 years)
• Usage data and logs: Up to 12 months for security and analytics purposes
• Anonymized data: May be retained indefinitely for research and service improvement

7.2 Data Deletion

When we no longer need your personal data, we will securely delete it from our active systems. Data may also be kept in backups for additional periods before final deletion, but it will not be actively processed.

8. Cookies and Similar Technologies

We use cookies, tracking pixels and similar technologies to improve your experience, analyze platform usage and personalize content.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the basic operation of the platform (authentication, security)
• Functionality Cookies: Allow us to remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with the platform
• Marketing Cookies: Used to personalize ads and measure campaign effectiveness (with your consent)

8.2 Cookie Control

You can control and manage cookies through:

• The cookie settings on our platform (where available)
• Your web browser settings (block, delete or receive notifications about cookies)
• Third-party tools for managing cookie preferences

Note that disabling certain cookies may affect the functionality of the platform.

9. International Data Transfers

Your personal data may be transferred to and processed in countries other than your own. When we transfer data outside your jurisdiction, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by data protection authorities
• Internationally recognized certifications and transfer frameworks
• Additional technical and organizational security measures

By using our service, you consent to these international data transfers.

10. Children’s Privacy

Talen.to is not directed at people under 18. We do not intentionally collect personal information from people under 18. If we discover that we have collected information from a minor without appropriate consent, we will take steps to delete that information from our systems.

11. Chrome Extension for LinkedIn

Talen.to offers a Chrome extension that integrates LinkedIn with our platform to make candidate management easier. This section describes how we collect and use information when you use our extension.

11.1 Information We Collect Through the Extension

When you use the Chrome extension on LinkedIn, we collect only information that is publicly visible on the LinkedIn profiles you visit. That information includes:

• Full name and LinkedIn profile URL
• Headline or professional title
• Current company
• Geographic location
• Profile photo URL (if publicly available)

Important: The extension only accesses and extracts information that is already publicly visible on LinkedIn. We do not access private information, private messages, or data that requires special LinkedIn permissions. We do not collect LinkedIn access credentials or authentication information.

11.2 Local Storage

The extension temporarily stores certain information in your browser’s local storage (Chrome Storage) to improve performance and the user experience:

• User preferences: ID of the company selected to work with
• Extracted profile data: The most recent data from LinkedIn profiles visited (only temporarily, until you take an action)
• Data cache: Company, role and pipeline stage information (with automatic expiry of 5-30 minutes)

This information is stored locally on your device and is used only for the operation of the extension. You can delete this data at any time by uninstalling the extension or clearing your browser storage.

11.3 Data Transmission to the Backend

Data extracted from LinkedIn profiles is transmitted to our servers only when you take an explicit action, such as:

• Creating a new candidate in Talen.to
• Linking a LinkedIn profile to an existing candidate
• Adding a candidate to a pipeline or role
• Sending an assessment invitation

Once the data is sent to our servers, it is governed by the same privacy, security and retention policies described in the rest of this policy for candidate information (Section 2.2).

11.4 Extension Permissions

The extension requires the following permissions to work correctly:

• Storage: To save preferences and cached data locally
• Active tabs: To access the content of the LinkedIn pages you visit
• Host permissions: Access to linkedin.com (to extract data) and app.talen.to (to communicate with our backend)

The extension does not collect information from tabs or websites other than LinkedIn, and only communicates with our servers when you take explicit actions within the extension.

11.5 Authentication

The extension uses the existing session cookies from your Talen.to account to authenticate. We do not store access credentials, passwords, or authentication tokens in the extension. If you are not signed in to Talen.to, the extension will ask you to sign in on our website.

11.6 Uninstalling

If you decide to uninstall the extension, all data stored locally in your browser will be deleted automatically. Data you have sent to our servers (for example, candidates you created) will remain on our platform according to the retention policies described in Section 7.

12. Links to Third-Party Sites

Our platform may contain links to third-party websites. We are not responsible for the privacy practices or the content of those external sites. We recommend reviewing the privacy policies of any third-party website you visit.

Note about LinkedIn: When you use our Chrome extension, you interact with LinkedIn, which has its own privacy policies and terms of service. Talen.to is not responsible for LinkedIn’s privacy practices. The extension only accesses public information available on LinkedIn and does not modify or interfere with LinkedIn’s functionality.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational or regulatory reasons. We will notify you of significant changes through:

• Email to the address associated with your account
• A prominent notice on the platform
• Updating the "Last updated" date at the top of this document

We recommend reviewing this policy periodically to stay informed about how we protect your information. Continued use of our service after the changes constitutes your acceptance of the revised policy.

14. Contact

If you have questions, comments or concerns about this Privacy Policy or about how we handle your personal data, you can contact BabyLagoon LLC at:

• Privacy:legal@talen.to

• Address:
  BabyLagoon LLC
  919 North Market Street, Ste 950
  Wilmington, DE 19801
  United States