Privacy Policy

1. Who we are

N-Tal TalentOS is operated by Nemesys Global Ltd, a company registered in Mauritius. We are the data controller for personal data processed through this platform. Contact us at privacy@ntal.ai.

2. What data we collect

Account information (name, email address, employment history)
CV and resume content you upload or create on the platform
Assessment responses (psychometric, EQ, skills tests)
Interview recordings and transcripts (with your explicit consent)
Identity verification documents (processed by Onfido, not stored by N-Tal)
Usage data (pages visited, features used, session duration)
Device and browser information for security and fraud prevention

3. Legal bases for processing

Contract performance (Art. 6(1)(b)): Processing necessary to provide you with the platform services you have requested.

Legitimate interests (Art. 6(1)(f)): Platform security, fraud prevention, and product improvement using aggregated analytics.

Consent (Art. 6(1)(a)): AI screening, interview recording, marketing communications, and analytics cookies — all require your explicit opt-in.

Legal obligation (Art. 6(1)(c)): Compliance with employment law, anti-money laundering, and identity verification requirements.

4. AI processing and your rights (EU AI Act)

N-Tal uses AI to assist with CV screening and candidate matching. In line with the EU AI Act and GDPR Art. 22:

AI scores are advisory only — no automated decision affects your application without human review
You may request a human explanation of any AI score via our Privacy Centre
AI processing requires your explicit consent which you may withdraw at any time
We do not infer ethnicity, health status, personality traits, or attractiveness from any data
Emotion detection from face or voice is not performed under any circumstances

5. Data retention

Candidate profiles: 3 years from last activity, or until erasure is requested

Interview recordings: 12 months, then permanently deleted

Identity documents: Not retained — processed and discarded by Onfido

Audit logs: 7 years (legal obligation)

Consent records: Duration of relationship + 3 years

6. Your rights

Under GDPR you have the right to:

Access — request a copy of all data we hold about you
Rectification — correct inaccurate personal data
Erasure — request deletion of your data (subject to legal retention obligations)
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interests
Withdraw consent — at any time, without affecting prior processing

Exercise your rights via the Privacy Centre or email privacy@ntal.ai. We will respond within 30 days.

7. Sub-processors

We share your data with the following trusted sub-processors under GDPR-compliant data processing agreements:

Processor	Purpose	Location
Amazon Web Services	Cloud hosting and storage	EU / Ireland
Onfido	Identity verification	UK / EU
PayPal	Payment processing	EU / US (SCCs apply)
Anthropic	AI screening and matching	USA (SCCs apply)
Deepgram	Speech transcription	USA (SCCs apply)
LiveKit	Video interview infrastructure	USA (SCCs apply)
SendGrid	Transactional email	USA (SCCs apply)

8. Contact and complaints

Data Protection contact: privacy@ntal.ai
You have the right to lodge a complaint with your local data protection authority. In the EU, contact your national DPA. In the UK, contact the ICO at ico.org.uk.