Last updated: 20 September 2026
TalentArt AI (ABN 57 687 854 128) ("TalentArt AI", "we", "us", "our") is committed to protecting the privacy of personal information we hold. This policy explains what personal information we collect, how we use, store, and disclose it, and how you can access, correct, or complain about our handling of it.
This policy is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to TalentArt AI's website, application, and related services (the "Service"), and to everyone whose personal information passes through the Service — including registered account holders ("Customers"), the interviewers and hiring team members they invite, and the job candidates those Customers interview.
A note on candidates: if you are a job candidate whose interview was recorded, scored, or discussed through TalentArt AI, the organisation that interviewed you (our Customer) is the entity that collected your personal information and is responsible for telling you how it will be used and obtaining any consent required before recording you. TalentArt AI processes that information on our Customer's behalf, as described in Section 4 below. Questions about a specific interview should be directed to the hiring organisation first.
We collect the following categories of personal information:
When you or your organisation sign up, we collect name, work email address, password (stored as a salted hash, not in plain text), organisation name, and role. If you subscribe to a paid plan, billing is handled by our payment processor, Stripe — see Section 5.
Job titles, descriptions, responsibilities, competency frameworks, scoring rubrics, and interview guides that you create or generate using the Service.
TalentArt AI includes a conversational "AI Skills Briefing" feature that helps you define a role. We store the full text of these conversations — every message you and the AI exchange — so that a session can be resumed and the resulting job description or interview guide can be regenerated or refined. These transcripts may contain business context you share about the role, your team, or your hiring strategy.
Where a Customer chooses to record a candidate interview conducted through the Service (audio, video, or both), and where consent to record has been obtained from the candidate, we store the recording, an automated transcript, and related data generated during the interview — including AI coaching prompts, live bias-detection flags, and competency-coverage notes. We also store candidate name and email address where provided by the Customer to schedule or invite the candidate to an interview.
If your organisation uses TalentArt AI's interviewer training features, we store your training progress, module interactions, and assessment results.
We automatically collect limited technical information needed to operate the Service, such as authentication session tokens and the state of your current workflow (stored in your browser's local storage so you don't lose in-progress work). We also use analytics, session-recording, and advertising tracking tools across the Service — see Section 8 (Cookies and tracking).
We use personal information to:
We do not sell personal information, and we do not use candidate personal information to train our own machine learning models.
Several features of the Service — generating job descriptions, competency frameworks, interview questions, feedback summaries, real-time interview coaching, and audio transcription — work by sending relevant text or audio to third-party AI providers (Section 5) and returning their response to you. This means content you or a candidate provide (for example, an interview answer, or the text of an AI briefing conversation) may be transmitted to and processed by those providers for the sole purpose of generating the requested output. We do not permit these providers to use your data to train their general-purpose models, to the extent that is within our control under our agreements with them; you should also refer to each provider's own privacy terms, linked in Section 5.
AI-generated content (questions, summaries, scores, bias flags, coaching prompts) is a decision-support tool. It can be incomplete or inaccurate, and it does not make hiring decisions — a human always remains responsible for the final call. See also our Terms & Conditions.
The Service is built on Supabase, which provides our database, file storage, and authentication infrastructure, hosted in [Supabase project region — check Project Settings → General in your Supabase dashboard]. This determines part of our APP 8 cross-border disclosure position.
Access to personal information within TalentArt AI is restricted using row-level security, so that, as a general rule, a Customer's data (including candidate data, job descriptions, and AI briefing transcripts) is only accessible to members of that Customer's own organisation, plus TalentArt AI personnel and service providers who need it to operate the Service.
We use the following third-party service providers to operate the Service. Each processes personal information only to the extent necessary to perform its function for us, and each is based outside Australia — meaning your use of the Service involves an overseas disclosure of personal information under APP 8. We take reasonable steps to ensure these providers handle personal information consistently with the APPs, including relying on their own contractual and security commitments.
We may also disclose personal information where required by law, to protect our rights, or as part of a business transaction such as a merger or acquisition (in which case we would require the acquiring party to continue to protect it consistently with this policy).
We retain personal information for as long as your organisation's account is active, and for a reasonable period afterwards to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements.
[PLACEHOLDER — please confirm before publishing: our database schema includes an intended auto-deletion field for interview recordings, but as of this policy's last update that deletion is not yet automated. Until an automatic retention/deletion process is implemented and verified, this section should describe your organisation's actual practice for deleting or de-identifying interview recordings, transcripts, and AI briefing conversations (e.g. "on request" or "within X days of account closure") rather than promising automatic deletion that does not yet happen.]
You may request deletion of personal information at any time by contacting us using the details in Section 10, subject to our legal obligations to retain certain records.
Subject to some exceptions permitted by law, you have the right to:
To exercise any of these rights, contact us using the details in Section 10. We will respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).
We use browser local storage for functional purposes — keeping you signed in and preserving in-progress work (such as a partially completed hiring workflow) between visits. This information stays on your device and is not shared with third parties.
We also use the analytics, session-recording, and advertising tracking tools described below to understand how people use the Service, measure the effectiveness of our marketing, and improve the product. These tools load across the Service — including while you are signed in — not only on our public marketing pages, and typically collect information such as your IP address, device and browser type, approximate location, pages viewed, and on-page interactions (such as clicks, mouse movement, and scrolling).
Microsoft Clarity records session replays — playback of mouse movement, clicks, and scrolling on the pages you visit — and generates aggregated heatmaps of how people interact with the Service. This helps us identify confusing or broken parts of the product. See Microsoft Clarity's terms and Microsoft's privacy statement for how Microsoft handles this information.
Google Analytics collects usage and traffic data — such as which pages are visited, how long visitors stay, device and browser information, and how visitors arrived at our site — to help us understand overall traffic patterns and improve the Service. See how Google uses information from sites that use its services.
Google Ads conversion tracking (Google's "gtag.js" tag) sets cookies used to measure whether visits to our site led to a sign-up or other action after someone clicked one of our ads, and may also be used for remarketing (showing you TalentArt AI ads elsewhere) depending on our Google Ads account configuration. You can control or opt out of this via your Google Ads Settings. See Google's advertising privacy policy for how Google handles this information.
Vercel Analytics, provided by our hosting platform, collects aggregated statistics about page views and site performance to help us understand traffic and improve the product.
We use the data generated by these tools for marketing purposes (understanding which channels bring visitors to the Service and whether they lead to sign-ups) and for product improvement (identifying pages, flows, or interactions that aren't working well for users).
Opting out: most browsers let you send a "Do Not Track" signal, but there is no industry-wide standard for how websites should respond to it, and the tools above do not currently change their behaviour based on that signal. Instead, you can: opt out of Google's advertising and analytics tracking using the Google Ads Settings and the Google Analytics Opt-out Browser Add-on; and block cookies and similar tracking generally through your browser's privacy settings, which will also limit Microsoft Clarity and Vercel Analytics. Blocking these tools does not affect your ability to use the Service.
We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure, including access controls, encryption in transit, and restricting internal access on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
For privacy questions, access or correction requests, or complaints, contact:
TalentArt AI
Email: michelle.redbourn@talentartai.com
We may update this policy from time to time to reflect changes to our practices or for legal reasons. We will update the "Last updated" date at the top of this page when we do. Continued use of the Service after a change takes effect means you accept the updated policy.
This policy is governed by the laws of New South Wales, Australia.