Privacy policy

The controller of personal data collected via the Talio Platform, accessible in particular at taliotalent.com, is the company publishing the Talio brand, with its registered office in Paris, France. For any question about this policy or your data: [email protected]. Requests to exercise your rights may also be sent to this address (see section 9).

Depending on your capacity and use of the services, we may process in particular:

• Identity and account data: first name, last name, email address, phone number, profile photo, account identifier, language preferences, role (talent, company representative, internal Talio user).
• Professional and application data: CV, experience, skills, availability, rates or salary expectations, messages and exchanges relating to needs or assignments, attachments submitted as part of the process.
• Company needs data: job or assignment descriptions, search criteria, feedback on profiles, interview feedback where the feature is available.
• Matching and process data: file statuses (application, shortlisting, interview, validation), proposed time slots, operational notes needed for follow-up between Talio, talent and clients.
• Questionnaire or learning-path data (Talio Academy, onboarding): answers, progress, and any assessment results where you consent or where they are necessary for training.
• Technical and security data: connection logs, IP address, device and browser type, session identifiers, timestamps, and traces needed to prevent abuse and ensure service continuity.
• Product analytics data (pages viewed, aggregated usage events) within the limits described in section 6 and in our cookie and tracker policy.

We ask you to share only data that is relevant, accurate and strictly necessary for the context. Mandatory fields are indicated at the time of collection.

We process data for the following purposes, on the legal bases indicated:

Talio may offer features based on algorithms and, where applicable, artificial intelligence models (for example to analyse textual content, compute match scores, generate suggestions or assessment questions). These processes aim to facilitate shortlisting, profile orientation or interview organisation; they do not replace a human decision where the law or our commitments require review by an operator.

Where a decision producing legal effects or similarly significantly affecting you is based solely on automated processing, you may request human intervention, express your point of view and contest the decision, under the conditions of Article 22 GDPR where it applies.

Data may be accessed by:

• authorised Talio teams, according to access profiles and a minimisation principle;
• relevant users to the extent necessary for matching (for example, a client only sees a talent’s information in the context of an ongoing process and vice versa, according to the Platform’s business rules);
• our technical processors, who process data on our behalf and according to our instructions, including:
  • Supabase (database hosting, authentication, storage);
  • Vercel (application hosting and delivery);
  • emailing and transactional messaging providers;
  • analytics tools (e.g. Vercel Analytics, PostHog) and performance tools (Speed Insights), described in the cookie policy;
  • where applicable, generative AI or embedding providers (text processing or similarity computation), under contract and with appropriate confidentiality safeguards.

We do not sell your personal data. Any transfer outside the European Economic Area is framed by the European Commission’s standard contractual clauses or another recognised mechanism, unless an adequacy decision applies.

Data is retained for as long as necessary for the purposes pursued, plus any applicable statutory limitation periods. By way of indication:

• Active account: data retained while the account exists.
• Erasure request pending IT approval: retained while the request is reviewed — internal target 72 business hours, legal cap 1 month (GDPR art. 12.3). Processing is restricted (art. 18): account suspended, no matching or outreach.
• After approved purge: no profile, CV, documents or login remain. We keep only the gdpr_erasure_requests log for 5 years (evidence) and the email on a do-not-contact list.
• Unsuccessful candidates: file retained for 4 months after a rejection decision (re-application window, all roles), then automatic deletion of identifying data and files.
• Incomplete registration: reminders at D+7 and D+14; account deletion 24 hours after the final warning if the application is not resumed.
• Matching files: retention linked to the need or assignment cycle and to accounting or evidentiary obligations.
• Placed / assignment / invoicing: no full self-service erasure. Assignment, contract and accounting records are kept for up to 10 years (accounting records, French Commercial Code L123-22); remaining identifying data (CV, video, matching) may be anonymised by IT.
• Technical logs: short to moderate periods depending on security and investigation needs.

Thereafter, data is deleted or anonymised where possible for aggregated statistics.

If you tick the dedicated option at registration (or in your settings), you may receive emails about Talio Academy training and resources. This consent is optional and separate from application processing. Details: Talio Academy communications.

Duration: for as long as your consent remains active; without interaction for 36 months, removal from the Academy list. Withdrawal: link in emails, unsubscribe page, or [email protected].

We implement appropriate technical and organisational measures: encryption in transit (HTTPS), access control, secure authentication, environment segregation, logging, access reviews and team awareness. No system being infallible, we encourage you to use a strong password and not to share your credentials.

Under Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act as amended, you have, subject to conditions and legal exceptions, the following rights:

• right of access to and copy of your data;
• right to rectification of inaccurate data;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to data portability where processing is based on consent or contract and is automated;
• right to object, including to prospecting;
• right to withdraw consent at any time for processing based on it, without affecting the lawfulness of prior processing;
• right to define instructions regarding the fate of your data after your death (in France).

To exercise your rights: [email protected]. Proof of identity may be requested where there is reasonable doubt as to your identity. You may lodge a complaint with the CNIL (www.cnil.fr).

If you have a talent account, you can also exercise access and erasure from My data (authenticated session). After confirmation, the account is suspended (art. 18) and IT reviews the erasure (target 72 business hours, max. 1 month, art. 12.3). Erasure is not absolute: it may be refused or limited where there is a legal obligation, an assignment or litigation (art. 17.3); any refusal is reasoned (art. 12.4).

Talio services are intended for persons with capacity to contract in their jurisdiction. We do not knowingly target minors. If you become aware of processing of a minor’s data without an appropriate legal basis, contact us so we can take appropriate measures.

We may update this policy to reflect changes to our services or to the law. The “last updated” date at the top of the page will be revised. In the event of a material change, we may inform you via a message on the Platform or by email where appropriate.