Privacy Policy

Talis DOO ("we", "us", "our") operates https://talishr.com (the "Website") and the Talis AI recruiting platform (the "Service"). We are registered in the Republic of Serbia and act as both controller (for marketing-site data) and processor (for candidate data uploaded by our customers).

1. Contact details

Company: Talis DOO
Email for privacy matters: privacy@talishr.com
You can reach us any time with questions or to exercise your rights.

2. Data we collect on talishr.com (marketing website)

When you visit the website we collect:

• IP address, browser type, referring page, time of visit
• Data from cookies and pixels: Google Analytics, LinkedIn Insight Tag, Meta Pixel, Hotjar

We use these only to understand how visitors use our site and to run retargeting campaigns. All analytics data is anonymised where possible (IP anonymisation enabled in Google Analytics).

3. Data processed in the Talis platform (customer accounts)

Our customers (recruiters and companies) upload candidate CVs/resumes and job descriptions. This may contain personal data and sensitive data (ethnic origin, health, etc. that can sometimes be inferred from a CV).

Important facts about this data:

• All CVs are anonymised immediately on upload (names, photos, addresses, emails, phone numbers and any other directly identifying information are automatically removed or masked before any AI processing).
• We never use customer or candidate data to train our AI models.
• We act as a data processor on behalf of our customer (the controller).
• A separate Data Processing Agreement (DPA) is part of every subscription and is available at https://talishr.com/dpa.pdf.

4. How long we keep the data

• Marketing-site analytics: maximum 26 months (Google Analytics default)
• Customer and candidate data: automatically deleted 90 days after the customer account inactivity or upon customer request

5. Sub-processors

We use trusted infrastructure and service providers located in the EU or in countries with an adequacy decision. A current list is available on request.

6. Marketing & newsletters (future)

When we launch a newsletter you will only be added after explicit opt-in. You can unsubscribe with one click at any time.

7. Your rights (GDPR)

You have the right to access, rectify, delete, restrict, port, and object to the processing of your personal data. Contact us at privacy@talishr.com and we will respond within 30 days.

8. Security

We use industry-standard encryption (TLS), EU-located servers, regular backups and access controls to protect all data.

9. Children

Talis is not directed to persons under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. The new version will be published on this page with the updated date.