Privacy Policy

This Privacy Policy explains how Talaboos (“we”, “us”) handles personal data when you visit talaboos.com (the “Site”), read our blog, download materials such as guides, contact us, or apply to a role.

We are a technology company. We do not sell products or personal data through this Site, we do not run advertising, and we do not create user accounts. We use the Site to share our work and to receive inquiries and job applications.

The statement shown beside our forms is an acknowledgement that this notice is available. It is not consent for every processing purpose. Any consent we request for a separate purpose is labelled separately and remains optional.

1. Who is responsible for your data

For any privacy question or request, contact us at hello@talaboos.com.

2. What data we collect and why

a. Information you give us directly

• Job applications. When you apply to a role you may send us your name, email, the position, a resume link or resume file, Telegram username, LinkedIn profile, and a message. We use this to review your application, assess fit for the requested role, communicate with you, and administer the recruitment process.
• Business and press inquiries. When you use a contact form, we receive your name, email address, message, form variant, source, and submission time. We use this only to route your inquiry and reply.

b. Information collected automatically

• Limited analytics events. We use selected events to understand actions such as opening or accepting a form. Form events contain only the form variant, source, outcome, and a coarse error category, not entered form values or upload metadata. See Section 4.
• Technical and anti-abuse data. Hosting and security services may process an IP address, browser or request information, security tokens, pseudonymous rate-limit keys, and operational logs to deliver and secure the Site. We do not use these systems as an archive of submitted form content.

3. Legal bases (for visitors in the EEA/UK)

• Job applications: processing necessary to take steps at your request before entering a possible working relationship, and our legitimate interest in recruiting, assessing applications, and communicating with candidates.
• Future opportunities: if you choose the unchecked option, we use separate, optional consent to consider your application for future opportunities. You can withdraw consent for future opportunities at any time by emailing hello@talaboos.com.
• Business and press inquiries: our legitimate interest in responding to you and managing the relationship you initiated.
• Limited analytics, security, and anti-abuse: our legitimate interest in understanding selected Site actions, preventing misuse, and keeping the Site reliable and secure.

4. Analytics and cookies

We use PostHog for limited product analytics. Our application configuration uses memory persistence and disables autocapture, automatic pageview and pageleave events, and session recording.

• No advertising cookies and no cross-site tracking.
• Selected form events contain only variant, source, open or accepted outcome, and a coarse allowlisted error category.
• We do not send entered names, email addresses, messages, resume data, or upload metadata in those events.

The current application sends events to PostHog's configured EU ingestion host. Account-level project region, event retention, and dashboard overrides have not been confirmed from the public Site, so this notice does not make a broader location or identifiability promise. If our configuration or purpose changes, we will update this notice and request consent where required.

5. Who we share data with

We do not sell your data. We share it only with service providers and recipients that help us run the Site and respond to you, for the purposes described below. International-transfer safeguards are described in Section 6:

• Neon provides PostgreSQL storage for accepted form records, retention dates, and delivery status.
• Vercel hosts the Site. Vercel Blobstores resume files privately, and Vercel Queueshelps start background delivery work.
• Resend sends form notifications to the relevant Talaboos email recipient. Resume files are not attached to email.
• Slack is an internal recipient for inquiry and application notifications. A private resume file may be sent to the restricted recruiting channel for review.
• Cloudflare Turnstile checks whether a submission is likely to be made by a person and helps prevent abuse.
• Upstash provides rate limiting using pseudonymous technical identifiers rather than entered form values.
• Google Workspace is the destination for internal email copies delivered to the relevant Talaboos mailbox. The application has no direct Gmail or Workspace API access.
• Google Vault is a conditional retention boundary only if it is enabled for the relevant Workspace account and an applicable retention rule or hold retains that mail. We do not claim that it is currently enabled.
• PostHog receives the limited events described in Section 4 through the configured EU ingestion host. Form analytics contain only the variant, source, open or accepted outcome, and a coarse error category. They never contain entered values or upload metadata.

We may also disclose data if required by law.

6. International data transfers

Some of our processors or recipients, including Google, Slack, Cloudflare, Resend, Upstash, Neon, and Vercel, may process data outside the EEA, including in the United States. The mechanism can differ by service and processing route. Where Chapter V of the GDPR applies, the transfer must rely on an applicable adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses. To ask which mechanism applies to a particular service or to request available information or a copy of the relevant safeguards, contact hello@talaboos.com.

7. How long we keep your data

• Business and Press records: up to 12 months after acceptance, or earlier when justified by a valid request.
• Careers with future opportunities: up to 12 months after acceptance, unless consent is withdrawn earlier.
• Careers without future opportunities: the earlier of 12 months after acceptance or 6 months after the authorized recruitment cycle closes.
• Private resume files follow the retention period of their application.
• Earlier action: a valid withdrawal or erasure request may require deletion before these maximum periods.

8. Deletion boundary

Our application automatically deletes expired PostgreSQL data and private Blob files according to the periods above. Slack notifications and resume files, plus Google Workspace email copies, are deleted manually by an authorized Talaboos operator. Google Vault is checked only if it is enabled and an applicable retention rule or hold retains the relevant mail. A valid request can require us to delete data earlier; email hello@talaboos.com.

9. Your rights

You can ask us to access, correct, delete, or restrict the personal data we hold about you, to object to certain processing, or to receive a copy of the data you gave us in a portable format where the right to data portability applies. Where processing is based on consent, you can withdraw it at any time.

To exercise any right, email hello@talaboos.com. You also have the right to lodge a complaint with a supervisory authority. For our Cyprus establishment, this is the Office of the Commissioner for Personal Data Protection in Cyprus.

10. Children

The Site is not directed at children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

12. Contact

Questions about this policy or your data? Email us at hello@talaboos.com.