TalentGrid AI

This Privacy Policy sets out how DEALMIND, S.L. ('TalentGrid', 'we', 'our', 'us'), a company established under Spanish law and headquartered in Barcelona, collects, uses, and manages personal information through its AI-native applicant tracking platform, TalentGrid.ai (the 'Service').

At DEALMIND, S.L., safeguarding your privacy is a core priority. We handle all personal data in accordance with applicable legislation, including the General Data Protection Regulation (EU) 2016/679 ('GDPR'), the Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights ('LOPDGDD'), and any other relevant privacy frameworks.

TalentGrid acts on behalf of its customers in connection with their applicant tracking and hiring workflows. In this context, our customers serve as 'data controllers' under the GDPR, while TalentGrid operates as a 'data processor', handling personal information exclusively according to customer instructions. If you would like to understand how a particular TalentGrid customer uses your personal data, please consult that organisation's own privacy policy.

Accessing or using the Service signifies that you have read and understood this Privacy Policy. If you disagree with any part of it, please refrain from using the Service.

In respect of personal data processed for the purpose of running our platform and promoting our services, the data controller is:

For privacy-related queries or requests, you can reach our Data Protection contact at the email

address above.

For privacy-related queries or requests, you can reach our Data Protection contact at the email

address above.

3.1 Job Candidates

When you submit a job application through our Service or engage with a recruitment process powered by TalentGrid, the personal information we may gather includes:

Identification and contact details: full name, email address, phone number, and postal address.
Professional and background information: CV, cover letter, work history, academic qualifications, references, and links to public professional profiles such as LinkedIn.
Correspondence: emails and messages exchanged via the Service, along with any additional
information you choose to share.
Interview data: recordings of candidate interviews and associated meetings, transcripts
derived from those recordings, and AI-generated content such as session summaries or draft
interview feedback. We also collect limited meeting metadata including date, time, link, and
participant display names.
Usage metadata: records of when and how you interact with the Service, including login times
and feature usage patterns.
Security and integrity data: technical indicators such as IP address characteristics, connection
type, device and browser details, and contact validation signals, which help us identify and
prevent fraudulent behaviour.

When you submit a job application through our Service or engage with a recruitment process powered by TalentGrid, the personal information we may gather includes:

Identification and contact details: full name, email address, phone number, and postal address.
Professional and background information: CV, cover letter, work history, academic qualifications, references, and links to public professional profiles such as LinkedIn.
Correspondence: emails and messages exchanged via the Service, along with any additional
information you choose to share.
Interview data: recordings of candidate interviews and associated meetings, transcripts
derived from those recordings, and AI-generated content such as session summaries or draft
interview feedback. We also collect limited meeting metadata including date, time, link, and
participant display names.
Usage metadata: records of when and how you interact with the Service, including login times
and feature usage patterns.
Security and integrity data: technical indicators such as IP address characteristics, connection
type, device and browser details, and contact validation signals, which help us identify and
prevent fraudulent behaviour.

3.2 Customers and Potential Customers

We gather information from organisations that enquire about our offering, request a product demonstration, or sign up for an account. This may include the contact person's name, their company name and role, email address, phone number, and payment details.

3.3 Third-Party Data

We may obtain personal information about you from external sources, including professional social networks and data enrichment services. Where permitted by law, we may combine this with information already held about you to build a more complete picture.

3.4 Automatic Data Collection

As you browse our website and use the Service, we automatically gather technical information, including: usage records such as traffic data, system logs, and resources accessed; device type, browser, and operating system; internet service provider; language and regional settings; and identifiers such as IP address and browser fingerprint signals. This collection occurs via cookies and similar technologies.

Our processing of personal data rests on the following legal grounds:

Contractual necessity: to deliver and administer our Service for customers and to support recruitment processes on their behalf.
Legitimate interests: to enhance our platform, combat fraud, maintain security, and market our Service to current and potential customers, provided your rights and freedoms are not overridden.
Legal obligation: to meet our obligations under applicable Spanish and EU legislation.
Consent: for specific activities such as optional marketing messages or non-essential cookies, where we obtain your freely given, specific, informed, and unambiguous agreement.

Where TalentGrid functions as a data processor for a customer acting as data controller, the applicable legal basis is determined by that customer in line with their own data protection obligations.

Our processing of personal data rests on the following legal grounds:

Contractual necessity: to deliver and administer our Service for customers and to support recruitment processes on their behalf.
Legitimate interests: to enhance our platform, combat fraud, maintain security, and market our Service to current and potential customers, provided your rights and freedoms are not overridden.
Legal obligation: to meet our obligations under applicable Spanish and EU legislation.
Consent: for specific activities such as optional marketing messages or non-essential cookies, where we obtain your freely given, specific, informed, and unambiguous agreement.

Where TalentGrid functions as a data processor for a customer acting as data controller, the applicable legal basis is determined by that customer in line with their own data protection obligations.

5.1 To Provide Our Service

Personal information we collect may be used for the following purposes in delivering our Service:

To allow organisations to advertise, manage, and close job openings.
To support companies in identifying, assessing, and engaging with candidates.
To coordinate and facilitate interviews between applicants and hiring teams.
To deliver AI-powered capabilities including interview recording, transcription, summarisation, and automated feedback drafting.
To support new hire onboarding processes.
To identify, evaluate, and mitigate fraud risk in job applications, including by flagging suspicious behaviour linked to job postings or interview sessions.
To generate recruitment analytics and reporting for our customers.
To handle customer support requests and respond to questions.
To tailor your experience within the platform.
To evaluate job applications received at DEALMIND, S.L. for roles within our own organisation.

Personal information we collect may be used for the following purposes in delivering our Service:

To allow organisations to advertise, manage, and close job openings.
To support companies in identifying, assessing, and engaging with candidates.
To coordinate and facilitate interviews between applicants and hiring teams.
To deliver AI-powered capabilities including interview recording, transcription, summarisation, and automated feedback drafting.
To support new hire onboarding processes.
To identify, evaluate, and mitigate fraud risk in job applications, including by flagging suspicious behaviour linked to job postings or interview sessions.
To generate recruitment analytics and reporting for our customers.
To handle customer support requests and respond to questions.
To tailor your experience within the platform.
To evaluate job applications received at DEALMIND, S.L. for roles within our own organisation.

5.2 To Market Our Service

Where we have a lawful basis to do so, we may use your contact details (including name, email address, phone number, and company name) to send marketing messages, feature announcements, event invitations, and promotional offers. We may also analyse how you engage with our Service in order to serve you more relevant content.

You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email, or by writing to us at legal@talentgrid.ai.

We may produce aggregated and anonymised data sets from personal information for analytical and marketing purposes. Such data carries no identifying information and may be used internally or shared with third parties to support service development and strategic planning.

5.3 To Monitor and Improve Our Service

Data gathered automatically enables us to measure platform usage, adapt the Service to individual preferences, optimise performance, and recognise returning visitors. We draw on these insights to drive the ongoing development of TalentGrid.ai.

5.4 AI-Powered Features

As an AI-native platform, TalentGrid incorporates machine learning and artificial intelligence across several features, including automated interview transcription, summarisation, candidate scoring suggestions, and feedback drafting. Where automated processing may have a meaningful impact on you, our customers (as data controllers) are responsible for ensuring adequate human oversight before any decisions are taken. TalentGrid does not issue automated recruitment decisions independently on behalf of its customers.

We do. Cookies are small text files that our website or Service places on your device to help recognise your browser and retain certain preferences. We deploy both session-based and persistent cookies for functional, analytical, and marketing purposes.

Your browser settings can be adjusted to block or delete cookies, though this may impair certain features of the Service. Before setting non-essential cookies, we will seek your consent as required under applicable law.

Full details about the cookies we use and the choices available to you can be found in our Cookie Policy on our website.

We keep personal data only for as long as needed to fulfil the purposes described in this Privacy Policy, or where a longer period is required or permitted by law. Retention timescales depend on the data category and the reason for processing:

Candidate data collected through the Service is held in accordance with instructions from our customers, who are the relevant data controllers. TalentGrid may provide customers with tools to define their own retention periods within the platform.
Customer account data is kept for the lifetime of the customer relationship and for a reasonable additional period for legal or operational purposes.
Interview recordings and AI-generated transcripts and summaries are stored for the duration specified by the relevant customer.
Technical and security log data is held for a limited window sufficient to support incident detection and investigation.

Once the relevant retention period has elapsed, personal data is either securely deleted or irreversibly anonymised.

We keep personal data only for as long as needed to fulfil the purposes described in this Privacy Policy, or where a longer period is required or permitted by law. Retention timescales depend on the data category and the reason for processing:

Candidate data collected through the Service is held in accordance with instructions from our customers, who are the relevant data controllers. TalentGrid may provide customers with tools to define their own retention periods within the platform.
Customer account data is kept for the lifetime of the customer relationship and for a reasonable additional period for legal or operational purposes.
Interview recordings and AI-generated transcripts and summaries are stored for the duration specified by the relevant customer.
Technical and security log data is held for a limited window sufficient to support incident detection and investigation.

Once the relevant retention period has elapsed, personal data is either securely deleted or irreversibly anonymised.

We may disclose information about you in the following circumstances:

Service Providers: We engage trusted third-party vendors and sub-processors to support our operations, including providers of cloud infrastructure, payment services, analytics tools, email delivery, fraud detection, and customer support. These parties are contractually restricted from using your data for any purpose beyond delivering services to us. An up-to-date list of our sub-processors is published on our website.

Affiliates: We may share data with entities within the DEALMIND, S.L. group for operational, support, marketing, or technical purposes.
Business Partners: Where relevant, we may pass information to partners in the context of co-branded offerings or collaborative marketing activities, consistent with your rights.
Professional Advisors: We may share data with our legal, financial, or insurance advisors when necessary for the professional services they provide.
Corporate Transactions: In the event of a proposed or completed merger, acquisition, asset sale, or business reorganisation, your data may be transferred to the relevant parties, subject to appropriate confidentiality protections.
Legal Requirements and Safety: We may disclose your data when required by law, in response to valid legal processes or public authority requests, or to protect the rights, property, wellbeing, or safety of TalentGrid, our users, or others.
With Your Consent: We may share your data for any purpose that has been disclosed to you and to which you have given your agreement.

Third-Party Integrations: You or your employer may connect external tools (such as HRIS systems, calendaring applications, or candidate assessment platforms) to TalentGrid. Permissions granted to those integrations give the relevant third parties access to associated data. We are not accountable for how those parties handle such information; we encourage you to review their privacy practices before enabling any integration.

We do not sell personal data. We do not pass your information to third parties for their own direct marketing purposes without your explicit consent.

We may disclose information about you in the following circumstances:

Service Providers: We engage trusted third-party vendors and sub-processors to support our operations, including providers of cloud infrastructure, payment services, analytics tools, email delivery, fraud detection, and customer support. These parties are contractually restricted from using your data for any purpose beyond delivering services to us. An up-to-date list of our sub-processors is published on our website.

Affiliates: We may share data with entities within the DEALMIND, S.L. group for operational, support, marketing, or technical purposes.
Business Partners: Where relevant, we may pass information to partners in the context of co-branded offerings or collaborative marketing activities, consistent with your rights.
Professional Advisors: We may share data with our legal, financial, or insurance advisors when necessary for the professional services they provide.
Corporate Transactions: In the event of a proposed or completed merger, acquisition, asset sale, or business reorganisation, your data may be transferred to the relevant parties, subject to appropriate confidentiality protections.
Legal Requirements and Safety: We may disclose your data when required by law, in response to valid legal processes or public authority requests, or to protect the rights, property, wellbeing, or safety of TalentGrid, our users, or others.
With Your Consent: We may share your data for any purpose that has been disclosed to you and to which you have given your agreement.

Third-Party Integrations: You or your employer may connect external tools (such as HRIS systems, calendaring applications, or candidate assessment platforms) to TalentGrid. Permissions granted to those integrations give the relevant third parties access to associated data. We are not accountable for how those parties handle such information; we encourage you to review their privacy practices before enabling any integration.

We do not sell personal data. We do not pass your information to third parties for their own direct marketing purposes without your explicit consent.

DEALMIND, S.L. is domiciled in Spain and conducts its operations within the European Economic Area ('EEA'). That said, certain service providers we engage may be established in countries outside the EEA, including the United States.

Whenever personal data is transferred beyond the EEA, we ensure that adequate protections are in place as required by the GDPR. Applicable safeguards may include:

Transfers to countries the European Commission has deemed to offer an adequate level of data protection;

Execution of the European Commission's Standard Contractual Clauses (SCCs) with the receiving party; or
Any other transfer mechanism recognised as lawful under applicable data protection law.

To find out more about the specific safeguards governing a particular international transfer, please contact us at legal@talentgrid.ai.

DEALMIND, S.L. is domiciled in Spain and conducts its operations within the European Economic Area ('EEA'). That said, certain service providers we engage may be established in countries outside the EEA, including the United States.

Whenever personal data is transferred beyond the EEA, we ensure that adequate protections are in place as required by the GDPR. Applicable safeguards may include:

Transfers to countries the European Commission has deemed to offer an adequate level of data protection;

Execution of the European Commission's Standard Contractual Clauses (SCCs) with the receiving party; or
Any other transfer mechanism recognised as lawful under applicable data protection law.

To find out more about the specific safeguards governing a particular international transfer, please contact us at legal@talentgrid.ai.

We maintain technical and organisational safeguards designed to protect your personal data from loss, unauthorised access, misuse, modification, or disclosure. Our security measures encompass encryption in transit and at rest, role-based access controls, routine security reviews, and rigorous vendor assessment. Our infrastructure is hosted in data centres that uphold recognised industry security standards.

You also play a role in keeping your data secure. If you access the Service using login credentials or an SSO account, you are responsible for maintaining the confidentiality of those details and for alerting us promptly if you suspect any unauthorised access.

Under the GDPR, individuals whose personal data we hold in our capacity as data controller are entitled to the following rights:

Right of access: to obtain a copy of the personal data we hold about you.

Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to request that we delete your personal data where the applicable conditions are satisfied (commonly referred to as the 'right to be forgotten').
Right to restriction: to ask us to suspend processing of your data in defined circumstances.
Right to data portability: to receive your data in a structured, machine-readable format and, where technically feasible, to have it transmitted directly to another controller.
Right to object: to contest processing carried out on the basis of legitimate interests, including objections to direct marketing.
Right to withdraw consent: to revoke any consent you have given at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please write to us at legal@talentgrid.ai. We may need to verify your identity before acting on your request, as required by law, and we will respond within the statutory timeframe (ordinarily one month, extendable for complex cases).

Under the GDPR, individuals whose personal data we hold in our capacity as data controller are entitled to the following rights:

Right of access: to obtain a copy of the personal data we hold about you.

Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to request that we delete your personal data where the applicable conditions are satisfied (commonly referred to as the 'right to be forgotten').
Right to restriction: to ask us to suspend processing of your data in defined circumstances.
Right to data portability: to receive your data in a structured, machine-readable format and, where technically feasible, to have it transmitted directly to another controller.
Right to object: to contest processing carried out on the basis of legitimate interests, including objections to direct marketing.
Right to withdraw consent: to revoke any consent you have given at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please write to us at legal@talentgrid.ai. We may need to verify your identity before acting on your request, as required by law, and we will respond within the statutory timeframe (ordinarily one month, extendable for complex cases).

Requests Relating to Recruitment Processes

Where TalentGrid processes your data on behalf of a customer, such as an employer whose vacancy you applied for, that customer is the data controller. For requests to view, amend, or remove such data, we recommend contacting the relevant organisation directly. TalentGrid will support its customers in addressing data subject requests in line with our contractual commitments.

Right to Lodge a Complaint

If you consider our processing of your personal data to be inconsistent with GDPR requirements and we have not satisfactorily addressed your concerns, you are entitled to raise a complaint with the relevant supervisory authority. In Spain, the competent body is the Agencia Espanola de Proteccion de Datos (AEPD), reachable at www.aepd.es. You may also approach the supervisory authority where you are habitually resident or employed within the EU.

Residents of California benefit from specific rights under the California Consumer Privacy Act, as amended (CCPA), including:

Right to Know: to ask us to disclose the categories and specific items of personal information collected about you, the purposes of that collection, the sources from which it was obtained, and the categories of third parties to whom it has been disclosed.

Right to Delete: to request that we erase personal information we hold about you, subject to legally recognised exceptions.
Right to Correct: to ask us to rectify inaccuracies in the personal information we maintain about you.

California residents may submit requests to legal@talentgrid.ai. We will not treat you differently or penalise you for exercising your CCPA rights.

Residents of California benefit from specific rights under the California Consumer Privacy Act, as amended (CCPA), including:

Right to Know: to ask us to disclose the categories and specific items of personal information collected about you, the purposes of that collection, the sources from which it was obtained, and the categories of third parties to whom it has been disclosed.

Right to Delete: to request that we erase personal information we hold about you, subject to legally recognised exceptions.
Right to Correct: to ask us to rectify inaccuracies in the personal information we maintain about you.

California residents may submit requests to legal@talentgrid.ai. We will not treat you differently or penalise you for exercising your CCPA rights.

TalentGrid.ai is built on artificial intelligence and machine learning. Core features of the platform rely on automated processing of personal data, including transcription of interview sessions, generation of summaries, candidate scoring recommendations, and AI-assisted evaluation notes. In managing these features, we are committed to the following:

AI-generated outputs, such as interview summaries and evaluative suggestions, are designed as decision-support tools for hiring professionals, not as replacements for human judgement.

Our customers, in their role as data controllers, determine how AI-generated content is applied in their hiring workflows and are responsible for ensuring that meaningful human review takes place before consequential decisions are made about candidates.
We actively work to reduce bias in our AI systems and to meet the requirements of applicable data protection law, including the GDPR and the EU AI Act where relevant.

If you have concerns about how AI capabilities were applied to your personal data in a specific hiring process, we encourage you to contact the relevant employer directly.

TalentGrid.ai is built on artificial intelligence and machine learning. Core features of the platform rely on automated processing of personal data, including transcription of interview sessions, generation of summaries, candidate scoring recommendations, and AI-assisted evaluation notes. In managing these features, we are committed to the following:

AI-generated outputs, such as interview summaries and evaluative suggestions, are designed as decision-support tools for hiring professionals, not as replacements for human judgement.

Our customers, in their role as data controllers, determine how AI-generated content is applied in their hiring workflows and are responsible for ensuring that meaningful human review takes place before consequential decisions are made about candidates.
We actively work to reduce bias in our AI systems and to meet the requirements of applicable data protection law, including the GDPR and the EU AI Act where relevant.

If you have concerns about how AI capabilities were applied to your personal data in a specific hiring process, we encourage you to contact the relevant employer directly.

We reserve the right to revise this Privacy Policy at any time, for example to reflect updates to our practices, changes to the Service, or new legal requirements. Material revisions will be accompanied by an updated date at the top of this document and, where warranted, direct notification to affected users by email or via an in-platform announcement.

We recommend checking this page periodically. Your continued use of the Service after any revision is posted will be treated as acceptance of the updated terms.

If you have questions, concerns, or requests relating to this Privacy Policy or to the way we handle personal data, please get in touch:

We aim to respond to all privacy-related enquiries promptly and, in all cases, within the period required by applicable law.

DEALMIND, S.L.

Barcelona, Spain

legal@talentgrid.ai

DEALMIND, S.L.

Barcelona, Spain

legal@talentgrid.ai