Privacy Policy

Last Updated: October 14, 2026

1. Who We Are and Scope of This Policy

This Privacy Policy describes how IKP Global LLC, a New Jersey limited liability company (“IKP Global,” “we,” “us,” or “our”), collects, uses, and shares personal information in connection with TalentMeta AI, our AI-assisted recruitment platform, including our website, application, and related services (collectively, the “Service”). TalentMeta AI is a product of IKP Global LLC.

Geographic scope. The Service is operated by IKP Global LLC, a U.S. company headquartered in New Jersey, and is currently offered to customers in the United States and India. Personal information collected through the Service is processed and stored primarily on infrastructure located in the United States.

Our role. Our role under applicable privacy laws depends on the data:

  • Customer users. For information you (a recruiter, hiring manager, administrator, or other user of our customer) provide about yourself, such as your account, billing, and usage data, we are a “business” (controller).
  • Candidate. For information about candidates that is uploaded by our customers or collected from candidates during an AI interview on a customer’s behalf (resumes, interview recordings, transcripts, scores, and summaries), we act as a “service provider” (processor) on behalf of the customer, who is the business (controller). Candidates with questions about that data should contact the employer or recruiting organization first.
  • Visitors. For visitors to our public marketing pages and people who contact us directly, we are a business (controller).
  • Authorized Partners. When you purchase TalentMeta AI through an Authorized Partner of IKP Global (for example, a regional reseller), the Authorized Partner is the entity you contract with for purchasing and billing. For your account, login, and product use, you also accept this Privacy Policy and our Terms of Service. The Authorized Partner is independently responsible for its own collection of your business contact and billing information.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, company name, job title, phone number.
  • Profile Data: Company size, industry, hiring needs, recruitment preferences.
  • Customer-Uploaded Data: Job descriptions, resumes/CVs, candidate notes, interview content, and other materials uploaded by our customers. We process this on behalf of the customer.
  • Communications: Messages, support requests, and feedback.
  • Payment Information: Billing address and limited card metadata. Full payment card data is collected and processed by Stripe; we do not store full card numbers.

2.2 Information Collected Automatically

  • Device & Connection: Browser type, IP address, operating system, device identifiers.
  • Usage Data: Pages visited, features used, clicks, time spent, error logs.
  • Cookies & Similar Technologies: See Section 9 for details.
  • Interview Data: Where the AI-interview feature is used, audio recordings, transcripts, and AI-generated summaries / scores. This is uploaded by our customers and processed on their behalf.

2.3 Information from Third Parties

  • Single Sign-On: If you sign in with Google or another identity provider, we receive limited profile information (name, email, profile picture) consistent with the permissions you grant.
  • Integrations: If a customer connects an external system (e.g. an applicant tracking system), we receive data from that system as configured by the customer.

2.4 Sensitive Personal Information (CCPA/CPRA)

Resumes and interview content uploaded by our customers may contain "sensitive personal information" as defined under California's CCPA/CPRA (for example, racial or ethnic origin, religious beliefs, citizenship/immigration status, health information, or precise geolocation if disclosed in the document). We do not solicit sensitive personal information directly from individuals through the Service.We process such information only as needed to provide the Service to the customer that uploaded it. Customers should not upload sensitive personal information beyond what is necessary for their lawful hiring purposes, and must not upload government IDs (e.g. Social Security numbers, driver's license numbers, or passport copies) to the Service.

3. How We Use Information

We use information to:

  • Provide, operate, secure, and improve the Service (including resume screening, AI interviews, scoring, and analytics);
  • Manage accounts, authenticate users, and respond to support requests;
  • Process payments and manage subscriptions through our payment processor;
  • Communicate with you about service updates, security alerts, and — with your consent or where permitted by law — marketing;
  • Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
  • Comply with legal obligations, respond to lawful requests, and enforce our agreements;
  • Generate aggregated, de-identified usage metrics for product analytics and benchmarking.

We do not use Customer Data — including resumes, candidate information, job descriptions, interview recordings, or transcripts — to train our AI models or any third-party AI models. We send Customer Data to third-party AI providers (such as OpenAI) only to generate outputs for you in real time, under contractual terms that, as of the date of this policy, prohibit those providers from using the data to train their models. We will update this policy if those contractual terms materially change.

4. AI-Assisted Features

The Service uses artificial intelligence, including third-party large language models, to generate scores, summaries, and recommendations. These are decision-support tools only and may contain errors or biases. Our customers — not us — make hiring, advancement, and rejection decisions. Our Terms of Service require customers to ensure meaningful human review of any adverse employment decisions. If you are a candidate and have questions about a decision made about you, please contact the employer or recruiting organization that evaluated you.

5. How We Share Information

We do not "sell" personal information for money, and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA and similar U.S. state laws. We honor opt-out preference signals such as the Global Privacy Control (GPC) where applicable.

We share information only as described below:

  • Service Providers / Subprocessors: Vendors that help us run the Service. As of the date above, our primary subprocessors are:
    • Vercel — application hosting and edge infrastructure
    • Our managed PostgreSQL provider — database hosting
    • OpenAI — AI inference for scoring, summarization, and interview features
    • Resend — transactional email delivery
    • Stripe — payment processing and subscription billing
    • Google Analytics (GA4) — website analytics. Google Analytics sets cookies (_ga, _ga_*) to measure traffic patterns such as page views, session duration, and referral source. This service is only activated after you accept analytics cookies via the cookie consent banner. If you reject cookies, Google Analytics will not load and no analytics cookies will be set. Data collected by Google Analytics is processed by Google LLC (USA). IP addresses are anonymised before storage. You can opt out at any time by clicking “Reject” in the cookie banner or by installing the Google Analytics Opt-out Browser Add-on.
    These providers are contractually limited to processing personal information on our behalf for the purposes we authorize.
  • Customer's Hiring Team: Information uploaded by a customer is accessible to the authorized users of that customer's tenant. We do not share Customer Data across tenants.
  • Authorized Partners (Resellers): If you purchased through an Authorized Partner, we share the minimum data needed to support billing, account provisioning, and customer support — typically your account administrator's name, email, company name, and subscription/usage status. We do not share Customer Data (resumes, candidate information, interview content) with Authorized Partners unless you explicitly direct us to.
  • Legal & Safety: When we believe disclosure is required by law, court order, or to protect our rights, customers, or the public.
  • Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections and continued application of this Policy.
  • With Your Direction: When you authorize an integration, single sign-on, or specific disclosure.

Cross-border data transfers. The Service is currently offered to customers in the United States and India. If you are located in India, your information will be transferred to and processed in the United States. We rely on contractual protections with our subprocessors to safeguard information transferred across borders.

6. Data Security

  • Encryption in transit: TLS 1.2 or higher for connections to the Service.
  • Encryption at rest: Provided by our infrastructure providers.
  • Access controls: Role-based access; tenant isolation by design.
  • Vulnerability management: Automated dependency scanning; we work to identify and address vulnerabilities in a timely manner.
  • Incident response: If a security incident affects your personal information, we will notify affected users as required by applicable law.

No system is perfectly secure. You are responsible for protecting the confidentiality of your account credentials.

7. Data Retention

  • Interview audio: Audio recordings of AI interviews are automatically deleted within 30 days after the interview is completed or cancelled.
  • Candidate and other Customer Data: Customer Data, including candidate transcripts, scores, summaries, coding submissions, and resumes, is kept in the customer’s account until the customer deletes it. Customers can delete candidates and data through the platform, and are responsible for keeping any records their own legal obligations require. Customers may also ask us in writing to delete their Customer Data at any time, and we will do so within 30 days, unless the law requires us to keep it or we need it to resolve a dispute.
  • Terminated accounts: When a subscription is cancelled or an account is terminated, access ends but Customer Data is preserved until you ask us to delete it. You may ask us in writing to export your Customer Data at any time. You are responsible for exporting any Customer Data you need to keep, including records your own legal obligations require. You may ask us in writing to delete your Customer Data, including candidate data, at any time. We delete it manually within 30 days of your request, unless the law requires us to keep it or we need it to resolve a dispute. We may also delete Customer Data from a terminated account 24 months after termination, after giving the account owner at least 30 days’ written notice, unless the law requires us to keep it longer or we need it for a legal claim or dispute.
  • Inactive accounts: An account with no activity by any authorized user for 12 consecutive months, and no active paid subscription, may be treated as terminated 30 days after we send written notice to the account owner. The terminated-account terms above then apply.
  • Account and billing data: Retained while your account is active, and afterward for as long as needed for tax, accounting, and legal purposes.
  • Backup copies: Overwritten on our providers’ normal backup cycle.
  • Logs and security records: Retained for up to 24 months for security, fraud prevention, and legal-compliance purposes.
  • Aggregated or de-identified data: May be retained indefinitely.

8. Your Privacy Rights

8.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know / Access: Request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
  • Delete: Request deletion of your personal information, subject to legal exceptions.
  • Correct: Request correction of inaccurate personal information.
  • Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information to what is necessary to provide the Service.
  • Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals.
  • Opt Out of Automated Decision-Making: Where required by California regulations, you may opt out of solely automated decision-making. As described in Section 4, our customers — not us — make hiring decisions, and our Terms require meaningful human review of adverse decisions.
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  • Authorized Agent: You may use an authorized agent to submit requests on your behalf, with appropriate verification.

How to exercise California rights: Email connect@talentmeta.ai with the subject line "California Privacy Request". We will respond within 45 days (extendable by an additional 45 days where permitted). We may need to verify your identity before responding.

Note for job applicants: If your information was uploaded to TalentMeta AI by a prospective employer, that employer is the "business" under California law for your data. Please contact that employer first. We will assist the employer in responding to verified requests.

8.2 Other U.S. State Privacy Laws

Residents of certain other U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, New Jersey, Iowa, Tennessee, Indiana, New Hampshire, Delaware, Kentucky, Maryland, Minnesota, and Rhode Island — may have similar rights under their state privacy laws, including rights to access, delete, correct, and opt out of certain processing. Specific rights and timelines vary by state. To exercise any of these rights, email connect@talentmeta.ai with your state of residence and the right you wish to exercise.

8.3 Universal Rights for All Users

  • Update your account information directly in the application;
  • Unsubscribe from marketing emails using the link in any marketing message;
  • Close your account (this triggers the retention timeline in Section 7).

8.4 India (Digital Personal Data Protection Act, 2023)

If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), which may include the right to access a summary of your personal data, the right to correction and erasure, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of your death or incapacity. To exercise these rights, contact our Grievance Officer at grievance@talentmeta.ai. We will acknowledge your request on a reasonable-efforts basis (generally within a few business days) and aim to respond within 30 days, subject to the complexity of the matter and any verification reasonably required. If you are unsatisfied with our response, you may approach the Data Protection Board of India.

Note for job applicants in India: If your information was uploaded to TalentMeta AI by a prospective employer, that employer is the Data Fiduciary under the DPDP Act for your data. Please contact that employer first. We will assist the employer in responding to verified requests.

9. Cookies and Similar Technologies

We use cookies and similar technologies for the following purposes:

  • Strictly necessary: Authentication, session management, security, and load balancing. These cannot be disabled without breaking the Service.
  • Functional: Remembering preferences (e.g. theme, language).
  • Analytics (consent required): We use Google Analytics 4 to understand how visitors use our public website (page views, session duration, referral source). Google Analytics is only loaded after you accept analytics cookies via the cookie consent banner displayed on your first visit. If you reject, no analytics cookies are set and Google Analytics does not load. You may change your preference at any time by clearing your browser’s localStorage for this site.

You can control cookies through your browser settings. We honor Global Privacy Control (GPC) signals where applicable. We do not currently respond to “Do Not Track” browser signals because there is no industry standard for them.

10. Children's Privacy

The Service is intended for business use by adults. It is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, please email connect@talentmeta.ai and we will take appropriate steps to delete it.

11. Marketing Communications

If you opt in to receive marketing emails from us, every such email will include an unsubscribe link and our postal address as required by the U.S. CAN-SPAM Act. Opting out of marketing emails will not affect transactional or service-related emails (such as billing notices, security alerts, or password resets).

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the Service before the changes take effect. The "Last Updated" date at the top reflects when the Policy was most recently revised. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions or wish to exercise a privacy right:

  • Entity: IKP Global LLC, operator of TalentMeta AI
  • Mailing Address: 155 Willowbrook Blvd, Ste 110, Wayne, New Jersey 07470, USA
  • Email: connect@talentmeta.ai
  • For Indian residents (DPDP Act inquiries): grievance@talentmeta.ai
  • Response Time: Up to 45 days (extendable as permitted by law); 30 days for DPDP Act requests under Indian law