Effective Date:  [July 2, 2025]
Last Updated: [July 2, 2025]

Gobekli Inc. (“Gobekli,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use TalentPass, including its core features: the Talent Tree, Pythia AI, Passport Pages, and associated services, applications, and websites (collectively, the “Platform”).

By using TalentPass, you agree to the practices described in this Privacy Policy. If you do not agree, you may not use the Platform.

1. Scope and Contact Information

This Privacy Policy applies to all users of TalentPass, including students, job seekers, team members, educators, case managers, and organizational administrators. It also applies to visitors of our website, early Beta testers, and users accessing Pythia’s AI features.

For questions or requests, contact:

Gobekli Inc.
[16 Weld Ave #2, Boston, MA 02119 ]
Email: [privacy@gobekli.io]
Support: [support@gobekli.io]

2. What We Collect

2.1 Personal Information

When you register or interact with TalentPass, we may collect:

• Full name, email address, phone number (optional)
• Date of birth or age group (for compliance or educational eligibility)
• General location (country, region, or IP-inferred)
• Organizational affiliation (if linked to a Passport Page)

2.2 Talent Data

We collect content you create, input, or share through the Platform, including:

• Skills, experiences, reflections, and goals added to the Talent Tree
• Profiles and resumes created with Pythia
• Uploaded media (certificates, projects, badges)
• Journaling, milestones, or achievements tracked via the app

Note: These disclosures go beyond the Data Safety section to ensure full compliance and user transparency.

• As required by law or in the event of safety or misuse concerns
• With secure third-party providers for hosting, analytics, and support
• With user consent: when connected to Passport Pages (e.g., organizations)

How We Share the Data:

• To improve the app’s performance, reliability, and content recommendations
• To help users track growth, goals, and reflections
• To support resume building, Talent Tree generation, and Pythia AI suggestions

How We Use the Data:

• Optional uploads or recordings by the user (e.g., voice notes, videos)
• Automatic tracking during app usage (e.g., crashes, device type)
• User entry via forms and interactions in the app

How We Access the Data:

• Device or Other IDs: anonymized device identifiers used for diagnostics and crash resolution
• Audio Files: voice recordings where enabled (e.g., reflective journaling prompts)
• Photos and Videos: images and videos users submit to represent experiences or credentials
• Files and Docs: files uploaded by users (e.g., certificates, resumes)
• App Info and Performance: crash logs and diagnostics
• App Activity: app interactions and other user-generated content (e.g., resumes, reflections, uploads)
• Personal Info: name, email address, phone number, and internal user IDs (not address)

Categories of User Data Accessed:

To comply with Google Play’s User Data Policy, the following information outlines how TalentPass accesses, collects, uses, and shares user data, beyond what is disclosed in the Data safety section:

2.3 Google Play Data Disclosure Compliance

2.3.1 Technical and Usage Information

Automatically collected data includes:

• Device type, operating system, and browser
• IP address and access time
• Clickstream data, feature usage, and app crash logs
• Referral sources (e.g., links from an email invite or institution)

2.3.2 AI Interaction Data

When you engage with Pythia, we log:

• Your prompts, questions, and responses
• Feedback given on suggestions
• Goals or actions derived from conversations

We may store AI-generated summaries or recommendations to help you track growth and revisit past insights.

3. How We Use Your Data

We use the information we collect to:

• Operate and maintain the TalentPass Platform
• Personalize your experience and provide career/learning recommendations via Pythia
• Generate, structure, and update your Talent Tree
• Help you build resumes, profiles, and shareable portfolios
• Track your progress over time
• Enable optional connections to organizations (via Passport Pages)
• Respond to support inquiries and technical issues
• Improve the Platform through analytics and bug tracking
• Conduct internal research and development using de-identified data

We do not sell your data to any third party. Ever.

4. AI Disclaimers and Limitations

TalentPass includes conversational features powered by Pythia, a role-aware AI assistant that helps you explore goals, reflect on experiences, and plan next steps.

4.1 How Pythia Works

Pythia generates responses based on your inputs, context from your Talent Tree, and internal models designed to support learning, self-reflection, and growth. It may suggest:

• Learning resources
• Career paths or opportunities
• Skill-building goals or next steps

4.2 AI Limitations

While we strive for accuracy, AI-generated responses may:

• Contain factual inaccuracies or hallucinations
• Be influenced by how a prompt is phrased
• Reflect biases in training data or models

You should not rely solely on Pythia for:

• Legal, financial, or health-related decisions
• Employment or education outcomes
• Emergency advice or crisis response

4.3 Data Used to Improve AI

We may use anonymized, de-identified logs of AI conversations to improve the quality, safety, and relevance of Pythia’s outputs. We do not use private or identifiable information to train models outside your experience without consent.

5. When and How We Share Your Data

We are committed to transparency and minimal data sharing. Your data is never sold, rented, or shared for advertising purposes. We only share data in the following limited ways:

5.1 With Your Explicit Consent

If you choose to connect to a Passport Page (e.g., through a school, employer, or community organization), you consent to sharing relevant parts of your Talent Tree, profile, or progress data with that organization.

You control:

• Whether or not to connect
• What is visible (e.g., roles, goals, credentials)
• When to disconnect and revoke access

5.2 With Authorized Service Providers

We use a limited number of vetted third-party providers for:

• Hosting (e.g., AWS or equivalent)
• Product analytics (e.g., Mixpanel, Amplitude)
• Customer support
• Security and infrastructure

These providers are bound by strict data protection agreements and may only use your data to provide services on our behalf.

5.3 For Legal and Safety Reasons

We may disclose your information if required by law or if we believe it is reasonably necessary to:

• Comply with legal obligations, subpoenas, or lawful requests
• Prevent fraud, abuse, or violations of our Terms
• Respond to emergencies, threats to safety, or platform misuse

6. Your Rights and Controls

TalentPass empowers you to control your data. Depending on your location and applicable laws, you may have the right to:

6.1 Access and Review

You can view your Talent Tree, profiles, and account data at any time through the app or dashboard.

6.2 Correct or Update

You can edit your Talent Tree entries, profile information, and preferences.

6.3 Delete Your Account

You may request full account deletion at any time by contacting [support@gobekli.io]. Deletion is permanent and includes all personal data, Pythia logs, and Talent Tree records.

6.4 Disconnect Passport Pages

If you previously connected to an organization (via a Passport Page), you may revoke that connection at any time. After disconnection:

• The organization may retain a record of prior shared data
• No future updates or AI insights will be shared

6.5 Export Your Data

You may request a downloadable file of your structured Talent Tree and account data.

6.6 Manage Cookies and Trackers

You can manage browser cookies through your browser settings or opt-out of analytics tracking by contacting us directly.

7. Passport Pages and Organizational Connections

Passport Pages are a bridge between your personal TalentPass and an institution or team using TalentSync.

7.1 What Is a Passport Page?

A Passport Page is created by an organization (school, employer, agency, etc.) to represent your role, learning plan, or team membership. It does not automatically share your private data.

7.2 Connection Is Optional

You control whether to:

• Connect the Passport Page to your TalentPass
• Accept data sharing terms
• Use the organization’s features (e.g., coaching, credentials, group goals)

7.3 What Organizations Can See

If connected, an organization may view:

• Your public-facing profile or role
• Verified credentials you’ve claimed
• Goals, milestones, or badges related to the organization

Organizations cannot see:

• Private reflections or journal entries
• Conversations with Pythia unless explicitly shared
• Personal identifiers not provided directly by you

7.4 Revocation and Data Use

When you disconnect:

• Your profile becomes private again
• The organization’s copy of past data may remain archived for compliance or audit purposes
• You may lose access to team tools or coaching features

8. Children and Student Privacy

Gobekli is committed to protecting the privacy of minors and students.

8.1 Minimum Age

TalentPass is not intended for children under 13 years of age. If you are under 18, you must have verifiable parental or guardian consent to use the Platform.

We comply with:

• COPPA (Children’s Online Privacy Protection Act) in the U.S.
• FERPA (Family Educational Rights and Privacy Act) when used in schools
• GDPR parental consent rules for users under 16 in certain countries

8.2 Use in Educational Contexts

If you are using TalentPass through a school or educational organization:

• Your school or teacher may configure your onboarding
• Student data is stored securely and not used for advertising
• Guardians or school officials may request access or deletion

8.3 Parental Rights

Parents or legal guardians may:

• Request access to their child’s data
• Revoke consent or delete accounts
• Review how a school or teacher is using TalentPass

9. Data Retention and Deletion

9.1 Retention Periods

We retain your personal data for as long as your account is active or as necessary to provide you with the Platform. After account closure, we may retain:

• De-identified or anonymized usage data for analytics and research
• Basic metadata for audit or legal compliance (e.g., timestamps of credential issuance)

9.2 User-Initiated Deletion

You may request full deletion of your account and all associated personal data at any time. Once your request is verified, we will:

• Permanently delete identifiable data from production systems
• Deactivate all Passport Page connections
• Remove Pythia interaction logs tied to your identity

Please note: certain deletion actions may take up to 30 days to fully propagate through backup systems.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small data files stored on your device that help us provide and improve the Platform. We use cookies to:

• Keep you signed in
• Track session activity
• Understand feature usage and navigation patterns

10.2 Types of Cookies Used

• Strictly Necessary Cookies (for login, security)
• Performance Cookies (usage analytics)
• Functional Cookies (user preferences)

10.3 Third-Party Analytics

We use third-party analytics providers (e.g., Mixpanel, Amplitude) to analyze usage trends and improve user experience. These providers may set their own cookies under data protection agreements.

10.4 Your Cookie Controls

You can manage cookies via your browser settings or request cookie deactivation by contacting [privacy@gobekli.io]. Some features may not work properly without cookies enabled.

11. Data Security Practices

11.1 Encryption
We use industry-standard encryption to protect your data:

• In transit (e.g., HTTPS, TLS)
• At rest (e.g., encrypted databases and backups)

11.2 Access Controls

Access to your data is limited to authorized personnel who require it to provide support, perform maintenance, or investigate system issues. All access is logged and audited.

11.3 Security Testing

We regularly assess the security of the Platform through code reviews, vulnerability scanning, and third-party audits.

11.4 Data Breach Response

In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, within legally mandated timelines.

12. International Users

12.1 Where We Process Data

TalentPass is hosted in the United States, but may be accessed globally. By using the Platform, you consent to the processing of your data in the U.S. and any other countries in which we operate.

12.2 Legal Bases for Processing (GDPR)

If you are located in the EU, we process your personal data based on:

• Your consent
• The performance of a contract (e.g., providing the service)
• Compliance with legal obligations
• Legitimate interest in improving and securing the Platform

12.3 Cross-Border Transfers

Where data is transferred outside of your country or jurisdiction, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)
• Data Protection Addendums for institutional partners

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in law, technology, or our services. If we make material changes, we will:

• Post the updated policy with a new effective date
• Notify you through email or the Platform when required

Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

14. Contact Us

For questions, requests, or complaints regarding this Privacy Policy, please contact us at:

Gobekli Inc.
[16 Weld Ave #2, Boston, MA 02119]
Email: privacy@gobekli.io
Support: support@gobekli.io

If you reside in a jurisdiction that grants you the right to escalate privacy concerns to a regulator, you may also contact your local data protection authority.

Last Updated: Feb 2, 2025

Gobekli Inc. (“Gobekli,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data we collect. This Privacy Policy explains how we collect, use, store, and protect your information when you visit www.gobekli.io (“Website”) and use our products, services, and programs.

By accessing our Website or participating in any Gobekli services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

A. Information You Provide

We collect personal information when you:

• Sign up for an account or newsletter.
• Make a purchase (e.g., Launch Packages or Early Access Contributions).
• Participate in surveys, research, or field tests.
• Contact us for support or inquiries.

This may include:

• Name, email address, phone number.
• Organization name, job title, and industry.
• Payment details (processed through third-party providers; we do not store full payment information).
• Any feedback or content you submit during product testing.

B. Information Collected Automatically

When you visit our Website, we may collect:

• Usage Data: Pages visited, time spent on pages, and navigation behavior.
• Device Information: IP address, browser type, operating system.
• Cookies & Tracking Data: See Section 7: Cookies & Tracking Technologies for details.

C. Information from Third Parties

We may receive data from:

• Payment processors (transaction confirmations, fraud prevention).
• Analytics providers (Google Analytics, Hotjar).
• Marketing partners (if you interact with our ads or referrals).

2. How We Use Your Information

Gobekli uses collected information to:
✅ Provide and improve our services, including TalentSync and TalentPass.
✅ Process payments and manage transactions.
✅ Communicate with you about updates, offers, and research opportunities.
✅ Analyze user engagement and improve platform functionality.
✅ Enforce our Terms and Conditions and prevent fraud.

We do NOT sell your personal information.

3. Data Sharing & Third-Party Services

We may share your information with:

• Service Providers: Payment processors, cloud storage providers, email marketing platforms.
• Research & Analytics Partners: For product improvement and user experience research.
• Legal Compliance: If required by law, such as responding to subpoenas or government requests.

We only share data necessary for service functionality and require third parties to adhere to strict security standards.

4. How We Store & Protect Your Data

A. Data Security Measures

Gobekli takes reasonable security precautions to protect your data, including:

• Encrypted storage of sensitive data.
• Restricted access to personal data within our organization.
• Regular security audits to detect vulnerabilities.

However, no online service is 100% secure, and we cannot guarantee absolute security.

B. Data Retention

We keep your data only as long as necessary for business and legal purposes:

• Account & Transaction Data: Retained for legal and audit purposes.
• Marketing Data: Retained until you opt out.
• Field Test Data: Anonymized and used for research, unless you request deletion.

If you want us to delete your personal data, see Section 6: Your Rights & Choices.

5. Third-Party Links & Integrations

Our Website may contain links to third-party services (e.g., payment processors, research partners). Gobekli is not responsible for how these third parties collect or use your data. Please review their privacy policies before engaging.

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

A. Access & Correction

✅ Request a copy of your data.
✅ Correct inaccurate information.

B. Data Deletion & Opt-Out

✅ Request deletion of your personal data (except where legally required to retain it).
✅ Unsubscribe from marketing emails at any time.

C. Restrict or Object to Processing

✅ Request limited processing of your data for certain uses.

To exercise your rights, contact us at: privacy@gobekli.io.

7. Cookies & Tracking Technologies

We use cookies and tracking tools to:
🍪 Enhance site functionality (e.g., remembering your login).
📊 Analyze website traffic (e.g., Google Analytics).
🎯 Improve marketing efforts (e.g., tracking ad performance).

Managing Cookies:

You can adjust your browser settings to block cookies, but some Gobekli features may not work properly.

8. Children’s Privacy

Gobekli does not knowingly collect personal data from children under 13 years old. If you believe a child has provided us with personal data, please contact us immediately to have it removed.

9. International Users & Data Transfers

If you access Gobekli from outside the United States, your data may be transferred to and stored in the U.S. By using our services, you consent to this transfer.

10. Changes to This Privacy Policy

Gobekli reserves the right to update this Privacy Policy. Any changes will be posted on this page with a new “Last Updated” date. Significant changes may be communicated via email or website notification.

11. Contact Information

For any privacy-related questions, concerns, or requests, contact us:

📧 Email: privacy@gobekli.io
🌐 Website: www.gobekli.io

By using our Website or purchasing from Gobekli, you acknowledge and agree to this Privacy Policy.

Would you like any refinements or additional legal protections included? 🚀