Talentsphere Privacy Policy

Effective Date: [Insert Date]

TalentSphere ("we", "our", or "us") is committed to protecting the privacy and personal data of our clients, users, and assessment participants in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable international standards, including the GDPR.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our platform and services.

1. Types of Personal Data Collected

We may collect and process the following categories of personal data:

1.1 From Organizations (Clients):

  • Organization name, industry, and HR contacts
  • Authorized user information (name, email, role)
  • Role profiles, job descriptions, and hiring preferences

1.2 From Candidates / Employees:

  • Full name, contact details, email address
  • Employment history, resume/CV information
  • Assessment responses and AI-generated results
  • Interview feedback and scoring
  • Behavioral and capability insights

1.3 Automatically Collected Data:

  • Log files, device/browser information, IP address
  • Usage behavior and platform interactions
  • Cookies and similar technologies (see Section 7)

2. Purpose of Data Collection

We collect and process personal data to:

  • Deliver AI-powered recruitment and assessment services
  • Match candidates with suitable roles using capability data
  • Generate performance and development insights
  • Enable organizational users to track and manage hiring workflows
  • Improve our services through analytics and feedback

3. Legal Grounds for Processing

Under the PDPA, we rely on the following lawful bases:

  • Consent: When legally required (e.g. candidate data)
  • Contractual necessity: To perform services for clients
  • Legal obligations: To comply with applicable laws
  • Legitimate interest: For platform improvement, fraud prevention, and user support

4. Data Sharing and Disclosure

We may share your personal data with:

  • Authorized users within your organization
  • Sub-processors (e.g., hosting providers, analytics services) under data processing agreements
  • Government authorities or legal entities when required by law or court order

We do not sell, rent, or disclose personal data to third parties for commercial purposes.

5. Cross-Border Data Transfers

Where personal data is transferred outside of Thailand, we ensure appropriate safeguards in line with PDPA standards, such as:

  • Binding agreements with overseas processors
  • Standard contractual clauses (SCCs) or equivalent protections

6. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes stated above, or as required by law. Upon request or expiration of retention periods, we will securely delete or anonymize the data.

7. Cookies and Tracking Technologies

We use cookies to:

  • Maintain user sessions
  • Analyze usage behavior
  • Improve site functionality and personalization

You may manage cookie preferences through your browser settings.

8. Your Rights Under PDPA

You have the right to:

  • Access and request a copy of your personal data
  • Correct or update inaccurate information
  • Withdraw consent at any time (where applicable)
  • Request data deletion or restriction
  • Object to certain data processing
  • File a complaint with the Personal Data Protection Committee (PDPC)

To exercise any of the above rights, please contact us using the details below.

9. Data Security Measures

We implement robust technical and organizational measures to protect personal data, including:

  • Encryption (in transit and at rest)
  • Role-based access control
  • Activity logs and monitoring
  • Regular security testing and audits

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Privacy Officer – TalentSphere
📧 Email: privacy@talentsphere.ai
📍 Address: [Insert Company Address]
📞 Phone: [Insert contact if required by PDPA]