Data Security at TalentProof

Think of our database as a digital vault. Every piece of sensitive Personally Identifiable Information (PII) you provide—like your name, email, and resume content—is scrambled using strong AES-256 encryption *before* it is placed in the vault.

How we protect your data

We encrypt all personally identifiable information before it is written to Firestore. Below are a few friendly examples to help you understand what that means in practice (this is illustrative, not an exhaustive schema dump).

For processes that require verification without needing to see the original data (like verifying a company email address), we use a secure one-way process called hashing. This transforms your email into a unique, irreversible digital fingerprint.

We can confirm a match using this fingerprint without ever storing or exposing your original email in that context, ensuring your privacy during verification steps.

We take extra precautions when interacting with AI models to prevent accidental exposure of your personal data.

• AI-Generated Summaries: When our AI generates a summary of your skills, we instruct it to use a generic placeholder, like `[CANDIDATE_NAME]`, instead of your actual name.
• Secure Storage: The AI-generated text is stored with the placeholder intact. Your name is stored separately and securely encrypted.
• Just-in-Time Rendering: Your name is only inserted into the summary on our secure server right before the final report is sent to your browser for viewing. This ensures your PII is not stored in AI-generated text and is only visible when needed.
• AI Text Analysis: Your written assessment answers are analyzed to detect AI-generated content. This analysis examines linguistic patterns only — no personal information is used or exposed. Results are shown as part of your Session Confidence and are visible to you and authorized reviewers.

• ID and selfie images: When an employer requires ID verification, the ID photo and selfie are stored encrypted. Only the hiring team for that role sees the result and thumbnails. We keep them only as long as reasonably needed for the hiring purpose and our legal obligations.
• Video and audio recordings: Stored encrypted in our cloud storage and visible only to you and the hiring team you submitted to. We may share them with third-party liveness and deepfake-detection providers, who process them only to return results to us, may not train their models on them without our permission, and must delete them after processing. We keep them only as long as reasonably needed for the hiring purpose and our legal obligations.
• Identity checks: When an employer runs one, we send only what you submitted with your application to a third-party identity-verification provider. The result is visible only to that hiring team and is kept only as long as reasonably needed.

You can ask us to delete any of this at any time at privacy@talentproof.ai. Full details, including our biometric notice, are in the Privacy Policy.