Privacy Policy

1. Who We Are

DF Talent is a recruitment technology platform operated by DF Booking Digital Solutions (together with its recruitment services division, DF Booking Recruitment Services). DF Talent provides job discovery, candidate profiles, recruitment workflows, and AI-assisted career tools.

If you have questions about this Privacy Policy or your personal data, contact us at support@dfbooking.com.

2. Personal Data We Collect

We collect the following categories of personal data:

• Account data: name, email address, password (hashed), role (candidate, employer, recruiter, admin), and account creation date.
• Candidate profile data: professional headline, summary, phone, location, country, city, years of experience, education, work history, skills, languages, certifications, job preferences, salary expectations, and availability.
• Resume and document data: resume versions, CVs, cover letters, certificates, and other documents you upload.
• Application data: job applications, cover letters, application status history, and related communications.
• Employer data: company name, description, industry, website, contact information, and verification status.
• Recruitment activity: pipeline entries, interview records, offers, placements, notes, and tasks created by recruiters.
• Subscription and billing data: plan, status, billing period, trial dates, and payment records (card details are handled by our payment provider; we do not store card numbers).
• Communications: messages, notifications, and support requests you send to us.
• Technical usage data: IP address, browser type, device information, and interaction logs collected through platform authentication and hosting infrastructure.

3. Purposes and Lawful Bases for Processing

We process your personal data for the following purposes:

• Providing the service: creating and managing your account, displaying profiles, processing applications, and operating recruitment workflows. Lawful basis: performance of a contract or pre-contractual steps at your request.
• Matching and recommendations: comparing candidate profiles with job listings to generate job matches and candidate suggestions. Lawful basis: legitimate interest in providing a functional recruitment platform.
• AI-assisted tools: processing resume text, job descriptions, and career information to generate resume analyses, cover letters, interview preparation, and tailored content. Lawful basis: your consent and performance of the service.
• Communication: sending notifications about applications, interviews, and account activity. Lawful basis: legitimate interest in operating the platform and, where required, your consent.
• Billing and payments: managing subscriptions, processing payments, and maintaining payment records. Lawful basis: performance of a contract.
• Security and fraud prevention: monitoring for suspicious activity, enforcing acceptable use, and protecting accounts. Lawful basis: legitimate interest in platform security.
• Legal compliance: responding to legal requests and meeting regulatory obligations. Lawful basis: legal obligation.

4. Profile Visibility and Access

Candidates control their profile visibility through three settings: public, recruiters only, and private. When your profile is set to public, employers with an active account can discover your profile. When set to recruiters only, only recruiters and administrators can view your profile. When set to private, only you and administrators can view your profile.

You can change your visibility setting at any time from your candidate profile page.

5. Sharing with Employers and Recruiters

When you apply for a job, your application, including the resume you selected and any cover letter you wrote, is shared with the employer who posted the job. Recruiters with access to the recruitment pipeline can also view your application and profile information as part of the recruitment workflow.

You control whether your profile is discoverable by employers through your visibility setting. Applying to a job is an active choice that shares your information with that specific employer.

6. Employer and Recruiter Responsibilities

Employers and recruiters who access candidate information through DF Talent are responsible for handling that information lawfully and in accordance with applicable data protection laws. They must not sell, scrape, or misuse candidate data. See our Employer and Recruiter Agreement for details.

7. AI Processing

DF Talent uses AI-assisted features including resume analysis, resume building, cover letter generation, resume tailoring, interview preparation, job matching, and job search. When you use these features, the text of your resume, profile information, job descriptions, and related content are sent to third-party AI providers via our platform's integration.

The AI providers may process this information to generate responses. We do not control whether these providers retain or use submitted data for model training. You should not upload information you do not have permission to share or that contains sensitive data you do not want processed by AI services.

AI-generated content may be incomplete, inaccurate, or unsuitable. You are responsible for reviewing and correcting AI-generated documents before submitting them. See our AI Tools Disclaimer for more information.

8. Third-Party Providers

We use the following categories of third-party providers:

• Hosting and database: cloud infrastructure for application hosting and data storage.
• Authentication: platform-managed authentication including email/password and OAuth providers (e.g., Google) for sign-in.
• AI services: third-party language model providers for AI-assisted features.
• Email: email delivery services for notifications and transactional emails.
• Payments: our payment provider (Stripe) handles card processing. Card details are collected and stored by the provider, not by DF Talent.
• Calendar: Google Calendar integration for interview scheduling, when users choose to connect their accounts.

9. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence. By using DF Talent, you acknowledge that your information may be transferred to countries with different data protection laws. We take reasonable steps to ensure appropriate safeguards are in place for such transfers.

10. Data Retention and Deletion

We retain your account data for as long as your account is active. You can request account deletion from your account settings. When you delete your account, we remove or anonymize your personal data in accordance with our retention policy, though some information may be retained where required by law or for legitimate business purposes such as fraud prevention.

Resumes, documents, and uploaded files associated with your account are removed when you delete your account. Some data may remain in backups for a limited period before being permanently deleted.

11. Data Security

We use role-based access control, database-level permissions, encrypted authentication tokens, and private file storage to protect your data. Access to personal data is restricted to authorized personnel and is enforced server-side. We do not claim any specific security certification. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

12. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal exceptions.
• Object to or restrict certain processing of your data.
• Withdraw consent for processing that relies on consent.
• Request data portability.

To exercise any of these rights, contact us at support@dfbooking.com. We will respond within a reasonable time as required by applicable law.

13. Cookies and Similar Technologies

We use essential cookies and local storage for authentication, session management, and site functionality. We do not currently use advertising cookies. For details, see our Cookie Policy.

14. Children's Data

DF Talent is intended for users who are at least 18 years old and legally capable of entering into employment relationships. We do not knowingly collect data from individuals under 18. If you believe a minor has provided personal data, contact us at support@dfbooking.com and we will take steps to delete that information.

15. Data Breaches

If we become aware of a personal data breach that poses a risk to your rights, we will take reasonable steps to investigate, mitigate, and notify affected users and relevant authorities as required by applicable law.

16. Policy Updates

We may update this Privacy Policy from time to time. The effective date above indicates when the policy was last revised. We will notify users of significant changes through the platform or by email where appropriate. Continued use of DF Talent after changes take effect constitutes acceptance of the updated policy.