Privacy Policy

1 Introduction

TalentLane, operated by NEXTCORE AI LLC, a West Virginia limited liability company ("we," "us," or "our"), provides the job platform available at talentlane.biz. This Privacy Policy describes how we collect, use, store, and share information about you when you use our services.

This policy applies to all users of TalentLane, including job seekers, employers, recruiters, and visitors browsing the platform without an account. By using TalentLane, you agree to the practices described in this policy.

If you have questions about how we handle your data, please contact us at privacy@talentlane.biz.

2 Information We Collect

Information You Provide Directly

We collect information you provide when you create an account or use the platform, including:

• Account registration: Your name, email address, and chosen role (job seeker, employer, or recruiter).
• Job seeker profile: Professional headline, location, years of experience, skills, LinkedIn and portfolio URLs, open-to-work status, and job alert preferences.
• Employer and recruiter profile: Company name, description, industry, company size, headquarters location, social media links, company logo, banner image, and gallery images.
• Resume uploads: The resume file you upload is stored securely. We also extract the text content of your resume to power AI features and job matching (see Sections 4 and 6).
• Job listings and applications: Job descriptions, requirements, salary ranges, and all information submitted when applying for a role, including cover letters.
• Messages: Content of in-platform messages sent between job seekers and employers via application threads and candidate messaging.
• Payment information: Billing is handled entirely by Stripe. We store only a Stripe customer identifier linked to your account — we never see or store your credit card number, expiration date, or security code.
• Recruiter page content: Biography, specialties, contact email, and theme settings for published recruiter pages.

Information Generated Automatically

When you use TalentLane, certain information is generated and stored automatically:

• Job view tracking: When a job listing is viewed, we record the job ID, the time of the view, the source of the visit (e.g., search results, saved jobs, direct link), and a one-way hashed version of the viewer's IP address. If you are logged in, we also record your user ID. Raw IP addresses are never stored.
• AI usage logs: Which AI features you use (resume review, job scoring, candidate matching, interview question generation), token counts, estimated cost, timestamp, and whether the request succeeded. These logs are used for billing, rate limiting, and platform analytics.
• Session data: A signed session cookie keeps you logged in across browser sessions (see Section 8).
• Application history: Status changes on your job applications (e.g., submitted, reviewing, shortlisted) and the timestamps of those changes.
• Profile view records: When an employer unlocks and views a job seeker's profile, this is recorded to enable the profile-viewed notification.

Information from Third Parties

When you sign in via a third-party provider, we receive information from that provider:

• Auth0 (Okta): Your email address and display name from your chosen sign-in method (Google OAuth or email-based login). We also receive a stable identifier (your Auth0 subject ID) that links your identity to your TalentLane account.

3 How We Use Your Information

We use the information we collect to:

• Operate the platform: Match job seekers with relevant jobs, process applications, enable messaging between seekers and employers, and display profile and company information.
• Provide AI-powered features: Resume quality review, job listing scoring, candidate matching, and interview question generation (see Section 4 for full details).
• Send email communications: Job alerts, application status updates, new message notifications, profile view notifications, and optional weekly job digests. You can manage notification preferences in your account settings or unsubscribe from non-essential emails.
• Process payments and subscriptions: Manage your subscription tier and billing via Stripe. Enforce subscription-based feature limits.
• Security and fraud prevention: Detect and prevent unauthorized access, fraudulent job listings, spam, and abuse of the platform.
• Legal compliance: Comply with applicable laws, respond to legal requests, and enforce our Terms of Service.
• Internal analytics: Understand how the platform is used so we can improve it. We do not use third-party analytics services — all analysis is performed on our own infrastructure using data you have already provided or that was generated during your use of the platform.

4 AI Processing & Automated Features

TalentLane uses AI to power several optional features. Here is what each feature does and how your data is used:

Resume AI Review (Job Seekers)

When you request an AI review of your resume, the extracted text of your resume is sent to the Anthropic Claude API for analysis. You receive a quality score and structured feedback. This score is advisory only — it does not determine your eligibility for any job and is not shared with employers without your consent.

Job Quality Scoring (Employers)

When you request an AI quality review of a job listing you have posted, the job description is sent to the Anthropic Claude API. You receive a score and improvement suggestions visible only to you. Advisory only.

Candidate Matching (Enterprise Plan)

Enterprise employers may use AI to score how well a candidate's profile matches a job's requirements. The relevant job description and anonymized candidate profile data are processed by the Claude API. Scores are advisory; all hiring decisions are made by the employer.

Interview Question Generation

For active applications, AI can generate suggested interview questions based on the job description and application context. Suggestions are cached temporarily and are advisory. Interviewers are responsible for their own interview process.

AI Service Providers

By default, TalentLane uses the Anthropic Claude API to power AI features. When you trigger an AI feature, the relevant content (your resume text or your job description) is transmitted to Anthropic as a data subprocessor under their API terms and privacy policy. Anthropic does not use API data to train their models by default.

When TalentLane is configured to use a local AI model (Ollama), all processing occurs entirely on TalentLane's own servers and no data is transmitted to any external AI service.

To learn how AI features have been applied to your specific account, contact privacy@talentlane.biz.

5 Information Sharing & Third-Party Service Providers

We share data with the following service providers who process it on our behalf. Each is contractually bound to use your data only for the stated purpose and to maintain appropriate security measures.

We do not sell your personal information. We do not share data with advertising networks, behavioral tracking vendors, data brokers, or any party for marketing purposes without your explicit consent.

We may disclose information when required by law, in response to valid legal process (subpoenas, court orders), to protect the safety of users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

6 Resume Data

• Secure storage: Uploaded resume files are stored privately in Amazon S3. They are never publicly accessible — access is only granted via time-limited signed URLs that expire after 15 minutes.
• Text extraction: When you upload a resume, we extract its text content and store it in our database. This extracted text powers AI resume review, job matching recommendations, and profile search features.
• Application snapshots: When you apply for a job, a snapshot of your resume at that moment is attached to your application. Employers always see the version of your resume you submitted — not any updates you make afterward. This ensures a consistent record of what was presented at the time of application.
• Deletion: Resume files and extracted text are deleted when you remove your resume from your profile or delete your account. You may also contact privacy@talentlane.biz to request manual deletion.
• Employer access: Employers can access your resume only for applications you have submitted to their job listings, or if they have explicitly unlocked your profile. Resumes are not searchable in a public resume database.

7 Email Communications

We send the following types of email:

• Transactional emails (tied to your use of the platform): Application status updates, new message notifications, job alerts, profile view notifications, appointment scheduling. These are sent based on your in-app notification preferences and are essential to platform functionality.
• Marketing emails (optional): Weekly job digest summarizing matching opportunities. You may unsubscribe at any time via the link in any email or in your account notification settings.

Suppression list: We maintain a suppression list of email addresses that have permanently bounced or been reported as spam via our email provider. We never email suppressed addresses. Email delivery is handled by Amazon SES, and bounce and complaint data is processed by AWS SNS to maintain this list.

8 Cookies & Session Data

• Session cookie: We use a single first-party session cookie to keep you logged in. This cookie contains a signed, encrypted session token — it does not store personal data in plaintext.
• Security attributes: Session cookies are marked HttpOnly (not accessible to JavaScript), Secure (transmitted over HTTPS only), and SameSite=Lax (protection against cross-site request forgery).
• Expiry: Sessions expire after 14 days of inactivity.
• No tracking cookies: We do not use advertising cookies, third-party analytics cookies, behavioral profiling cookies, or tracking pixels of any kind.
• No consent banner required: Because we use only strictly necessary session cookies with no third-party or tracking components, EU law (ePrivacy Directive) does not require a cookie consent banner for our current cookie usage.

9 Data Retention

We retain different categories of data for different periods, based on operational need and legal obligation:

10 Your Privacy Rights

To exercise any of the above rights, email privacy@talentlane.biz. Include "GDPR Request" or "CCPA Request" in the subject line as applicable. We will respond within 30 days of receipt.

11 Data Security

We implement a range of technical and organizational measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted over HTTPS/TLS.
• Resume files are accessible only via time-limited signed URLs that expire after 15 minutes.
• We do not store passwords — all authentication is handled by Auth0, which maintains its own security certifications.
• Payment card data never reaches our servers — Stripe handles all payment processing and maintains PCI DSS compliance.
• Our database uses parameterized queries to prevent SQL injection.
• Session cookies are HttpOnly and Secure to prevent interception and JavaScript access.

No security system is perfect. In the event of a data breach that affects your personal information, we will notify you and comply with all applicable breach notification laws as quickly as possible.

12 Children's Privacy

TalentLane is not directed to individuals under the age of 16. We do not knowingly collect personal information from minors. If you believe that a person under 16 has provided us with personal information, please contact us at privacy@talentlane.biz and we will promptly delete that information.

13 International Data Transfers

TalentLane operates from and stores data in the United States. If you are located in the European Union, European Economic Area, or United Kingdom, your personal data is transferred to the United States when you use our platform.

We ensure that such transfers are lawful by relying on Standard Contractual Clauses (SCCs) approved by the European Commission with our service providers, including Auth0 (Okta), Amazon Web Services, Stripe, and Anthropic.

14 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by a prominent notice on the TalentLane platform at least 14 days before the change takes effect.

Your continued use of TalentLane after the effective date of an updated policy constitutes your acceptance of the changes. We encourage you to review this page periodically.

15 Contact Us

For any questions about this Privacy Policy, or to exercise your privacy rights, please contact us: