Privacy notice
How Talentria handles information
Effective 2 September 2026 · Last updated 2 September 2026 · Version privacy-v1.0
Operator and scope
Talentria is a private-beta service operated personally by Afroz Ahmed Khan in Finland. This notice covers employer and recruitment-agency users, candidates, invitees and people contacting Talentria. Talentria's legal role can differ by activity and remains subject to legal review.
Information and sources
Talentria processes account and organization details, hiring demands, searches, introductions, workflow decisions, communications, placements, security and audit records. Recruitment agencies may supply candidate identity, contact and professional information; candidates provide availability and introduction decisions through secure links.
Candidate profiles and matching
Employers initially see identity-protected, pseudonymised professional profiles—not anonymous profiles. Matching is a deterministic rules-based comparison of job and profile attributes. It does not make hiring decisions or release identity.
Introductions and identity release
An employer requests an introduction. Candidate Interested or Declined is a decision about that opportunity, not GDPR lawful-basis consent. Identity release requires verified Interested, accepted employer-agency commercial terms and agency approval. Interview, offer, closure and placement events may then be recorded.
Access and sharing
Organizations access their own account and workflow data. Agencies retain their candidate relationships. Employers cannot directly access the private candidate store before authorized release. Supabase provides database and authentication, Vercel hosts the service, and Resend delivers transactional email. Stripe may be used only if paid billing is enabled; Stripe runtime was not observed during verification.
Security, communications and retention
Controls include tenant isolation, restricted private identity, hashed links and codes, server-side workflow checks and audit records. Operational links expire, but expiry is not deletion. Final retention periods and legal bases require legal review; Talentria does not promise a duration that has not been approved.
International processing and rights
Vercel dynamic execution is in Frankfurt and Supabase Frankfurt was previously evidenced. Other vendor locations and transfer safeguards require verification and legal review. You may submit access, correction, deletion, restriction, objection or another privacy inquiry through the Privacy Rights page. Additional verification may be required before sensitive action.
Contact and changes
The public Privacy Rights form is Talentria's configured privacy contact channel. This notice will be updated when practices or verified technologies change.