TalentPass Privacy Policy

TalentPass Privacy Policy

Effective Date:  [June 30, 2025]
Last Updated: [June 30, 2025]

Gobekli Inc. (“Gobekli,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use TalentPass, including its core features: the Talent Tree, Pythia AI, Passport Pages, and associated services, applications, and websites (collectively, the “Platform”).

By using TalentPass, you agree to the practices described in this Privacy Policy. If you do not agree, you may not use the Platform.

1. Scope and Contact Information

This Privacy Policy applies to all users of TalentPass, including students, job seekers, team members, educators, case managers, and organizational administrators. It also applies to visitors of our website, early Beta testers, and users accessing Pythia’s AI features.

For questions or requests, contact:

Gobekli Inc.
[16 Weld Ave #2, Boston, MA 02119 ]
Email: [privacy@gobekli.io]
Support: [support@gobekli.io]

2. What We Collect

2.1 Personal Information

When you register or interact with TalentPass, we may collect:

  • Full name, email address, phone number (optional)
  • Date of birth or age group (for compliance or educational eligibility)
  • General location (country, region, or IP-inferred)
  • Organizational affiliation (if linked to a Passport Page)

2.2 Talent Data

We collect content you create, input, or share through the Platform, including:

  • Skills, experiences, reflections, and goals added to the Talent Tree
  • Profiles and resumes created with Pythia
  • Uploaded media (certificates, projects, badges)
  • Journaling, milestones, or achievements tracked via the app

Note: These disclosures go beyond the Data Safety section to ensure full compliance and user transparency.

– As required by law or in the event of safety or misuse concerns

– With secure third-party providers for hosting, analytics, and support

– With user consent: when connected to Passport Pages (e.g., organizations)

How We Share the Data:

– To improve the app’s performance, reliability, and content recommendations

– To help users track growth, goals, and reflections

– To support resume building, Talent Tree generation, and Pythia AI suggestions

How We Use the Data:

– Optional uploads or recordings by the user (e.g., voice notes, videos)

– Automatic tracking during app usage (e.g., crashes, device type)

– User entry via forms and interactions in the app

How We Access the Data:

– Device or Other IDs: anonymized device identifiers used for diagnostics and crash resolution

– Audio Files: voice recordings where enabled (e.g., reflective journaling prompts)

– Photos and Videos: images and videos users submit to represent experiences or credentials

– Files and Docs: files uploaded by users (e.g., certificates, resumes)

– App Info and Performance: crash logs and diagnostics

– App Activity: app interactions and other user-generated content (e.g., resumes, reflections, uploads)

– Personal Info: name, email address, phone number, and internal user IDs (not address)

Categories of User Data Accessed:

To comply with Google Play’s User Data Policy, the following information outlines how TalentPass accesses, collects, uses, and shares user data, beyond what is disclosed in the Data safety section:

2.4 Google Play Data Disclosure Compliance

2.4.1 Technical and Usage Information

Automatically collected data includes:

  • Device type, operating system, and browser
  • IP address and access time
  • Clickstream data, feature usage, and app crash logs
  • Referral sources (e.g., links from an email invite or institution)

2.4.2 AI Interaction Data

When you engage with Pythia, we log:

  • Your prompts, questions, and responses
  • Feedback given on suggestions
  • Goals or actions derived from conversations

We may store AI-generated summaries or recommendations to help you track growth and revisit past insights.

3. How We Use Your Data

We use the information we collect to:

  • Operate and maintain the TalentPass Platform
  • Personalize your experience and provide career/learning recommendations via Pythia
  • Generate, structure, and update your Talent Tree
  • Help you build resumes, profiles, and shareable portfolios
  • Track your progress over time
  • Enable optional connections to organizations (via Passport Pages)
  • Respond to support inquiries and technical issues
  • Improve the Platform through analytics and bug tracking
  • Conduct internal research and development using de-identified data

We do not sell your data to any third party. Ever.

4. AI Disclaimers and Limitations

TalentPass includes conversational features powered by Pythia, a role-aware AI assistant that helps you explore goals, reflect on experiences, and plan next steps.

4.1 How Pythia Works

Pythia generates responses based on your inputs, context from your Talent Tree, and internal models designed to support learning, self-reflection, and growth. It may suggest:

  • Learning resources
  • Career paths or opportunities
  • Skill-building goals or next steps

4.2 AI Limitations

While we strive for accuracy, AI-generated responses may:

  • Contain factual inaccuracies or hallucinations
  • Be influenced by how a prompt is phrased
  • Reflect biases in training data or models

You should not rely solely on Pythia for:

  • Legal, financial, or health-related decisions
  • Employment or education outcomes
  • Emergency advice or crisis response

4.3 Data Used to Improve AI

We may use anonymized, de-identified logs of AI conversations to improve the quality, safety, and relevance of Pythia’s outputs. We do not use private or identifiable information to train models outside your experience without consent.

5. When and How We Share Your Data

We are committed to transparency and minimal data sharing. Your data is never sold, rented, or shared for advertising purposes. We only share data in the following limited ways:

5.1 With Your Explicit Consent

If you choose to connect to a Passport Page (e.g., through a school, employer, or community organization), you consent to sharing relevant parts of your Talent Tree, profile, or progress data with that organization.

You control:

  • Whether or not to connect
  • What is visible (e.g., roles, goals, credentials)
  • When to disconnect and revoke access

5.2 With Authorized Service Providers

We use a limited number of vetted third-party providers for:

  • Hosting (e.g., AWS or equivalent)
  • Product analytics (e.g., Mixpanel, Amplitude)
  • Customer support
  • Security and infrastructure

These providers are bound by strict data protection agreements and may only use your data to provide services on our behalf.

5.3 For Legal and Safety Reasons

We may disclose your information if required by law or if we believe it is reasonably necessary to:

  • Comply with legal obligations, subpoenas, or lawful requests
  • Prevent fraud, abuse, or violations of our Terms
  • Respond to emergencies, threats to safety, or platform misuse

6. Your Rights and Controls

TalentPass empowers you to control your data. Depending on your location and applicable laws, you may have the right to:

6.1 Access and Review

You can view your Talent Tree, profiles, and account data at any time through the app or dashboard.

6.2 Correct or Update

You can edit your Talent Tree entries, profile information, and preferences.

6.3 Delete Your Account

You may request full account deletion at any time by contacting [support@gobekli.io]. Deletion is permanent and includes all personal data, Pythia logs, and Talent Tree records.

6.4 Disconnect Passport Pages

If you previously connected to an organization (via a Passport Page), you may revoke that connection at any time. After disconnection:

  • The organization may retain a record of prior shared data
  • No future updates or AI insights will be shared

6.5 Export Your Data

You may request a downloadable file of your structured Talent Tree and account data.

6.6 Manage Cookies and Trackers

You can manage browser cookies through your browser settings or opt-out of analytics tracking by contacting us directly.

7. Passport Pages and Organizational Connections

Passport Pages are a bridge between your personal TalentPass and an institution or team using TalentSync.

7.1 What Is a Passport Page?

A Passport Page is created by an organization (school, employer, agency, etc.) to represent your role, learning plan, or team membership. It does not automatically share your private data.

7.2 Connection Is Optional

You control whether to:

  • Connect the Passport Page to your TalentPass
  • Accept data sharing terms
  • Use the organization’s features (e.g., coaching, credentials, group goals)

7.3 What Organizations Can See

If connected, an organization may view:

  • Your public-facing profile or role
  • Verified credentials you’ve claimed
  • Goals, milestones, or badges related to the organization

Organizations cannot see:

  • Private reflections or journal entries
  • Conversations with Pythia unless explicitly shared
  • Personal identifiers not provided directly by you

7.4 Revocation and Data Use

When you disconnect:

  • Your profile becomes private again
  • The organization’s copy of past data may remain archived for compliance or audit purposes
  • You may lose access to team tools or coaching features

8. Children and Student Privacy

Gobekli is committed to protecting the privacy of minors and students.

8.1 Minimum Age

TalentPass is not intended for children under 13 years of age. If you are under 18, you must have verifiable parental or guardian consent to use the Platform.

We comply with:

  • COPPA (Children’s Online Privacy Protection Act) in the U.S.
  • FERPA (Family Educational Rights and Privacy Act) when used in schools
  • GDPR parental consent rules for users under 16 in certain countries

8.2 Use in Educational Contexts

If you are using TalentPass through a school or educational organization:

  • Your school or teacher may configure your onboarding
  • Student data is stored securely and not used for advertising
  • Guardians or school officials may request access or deletion

8.3 Parental Rights

Parents or legal guardians may:

  • Request access to their child’s data
  • Revoke consent or delete accounts
  • Review how a school or teacher is using TalentPass

Data Retention and Deletion

9.1 Retention Periods
We retain your personal data for as long as your account is active or as necessary to provide you with the Platform. After account closure, we may retain:

  • De-identified or anonymized usage data for analytics and research
  • Basic metadata for audit or legal compliance (e.g., timestamps of credential issuance)

9.2 User-Initiated Deletion
You may request full deletion of your account and all associated personal data at any time. Once your request is verified, we will:

  • Permanently delete identifiable data from production systems
  • Deactivate all Passport Page connections
  • Remove Pythia interaction logs tied to your identity

Please note: certain deletion actions may take up to 30 days to fully propagate through backup systems.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?
Cookies are small data files stored on your device that help us provide and improve the Platform. We use cookies to:

  • Keep you signed in
  • Track session activity
  • Understand feature usage and navigation patterns

10.2 Types of Cookies Used

  • Strictly Necessary Cookies (for login, security)
  • Performance Cookies (usage analytics)
  • Functional Cookies (user preferences)

10.3 Third-Party Analytics
We use third-party analytics providers (e.g., Mixpanel, Amplitude) to analyze usage trends and improve user experience. These providers may set their own cookies under data protection agreements.

10.4 Your Cookie Controls
You can manage cookies via your browser settings or request cookie deactivation by contacting [privacy@gobekli.io]. Some features may not work properly without cookies enabled.

11. Data Security Practices

11.1 Encryption
We use industry-standard encryption to protect your data:

  • In transit (e.g., HTTPS, TLS)
  • At rest (e.g., encrypted databases and backups)

11.2 Access Controls
Access to your data is limited to authorized personnel who require it to provide support, perform maintenance, or investigate system issues. All access is logged and audited.

11.3 Security Testing
We regularly assess the security of the Platform through code reviews, vulnerability scanning, and third-party audits.

11.4 Data Breach Response
In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, within legally mandated timelines.

12. International Users

12.1 Where We Process Data
TalentPass is hosted in the United States, but may be accessed globally. By using the Platform, you consent to the processing of your data in the U.S. and any other countries in which we operate.

12.2 Legal Bases for Processing (GDPR)
If you are located in the EU, we process your personal data based on:

  • Your consent
  • The performance of a contract (e.g., providing the service)
  • Compliance with legal obligations
  • Legitimate interest in improving and securing the Platform

12.3 Cross-Border Transfers
Where data is transferred outside of your country or jurisdiction, we implement safeguards such as:

  • Standard Contractual Clauses (SCCs)
  • Data Protection Addendums for institutional partners

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in law, technology, or our services. If we make material changes, we will:

  • Post the updated policy with a new effective date
  • Notify you through email or the Platform when required

Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

14. Contact Us

For questions, requests, or complaints regarding this Privacy Policy, please contact us at:

Gobekli Inc.
[16 Weld Ave, Boston, MA 02119]
Email: privacy@gobekli.io
Support: support@gobekli.io

If you reside in a jurisdiction that grants you the right to escalate privacy concerns to a regulator, you may also contact your local data protection authority.