Privacy Policy

1. The Headlines

Here’s a quick summary of the key points. We recommend reading the full policy, but this gives you the essentials:

2. Who We Are

Legal Entity: Tarlan is currently operated by Abyarth Kumar Behera under the trade name “Tarlan.” Upon incorporation, this policy will be updated to reflect the registered entity and its registered address.

Data Fiduciary / Data Controller: For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary. For the purposes of the General Data Protection Regulation (“GDPR”), we are the Data Controller. This means we determine how and why your personal data is processed.

Grievance Officer: Abyarth Kumar Behera

Contact: hello@tarlan.ai

You may contact our Grievance Officer for any questions, concerns, or complaints regarding your personal data.

3. Who This Policy Applies To

This policy applies to all individuals who access or use the Tarlan platform. Tarlan is designed for working professionals and is intended for users aged 18 and above. During account creation, all users must confirm they are at least 18 years old. If we become aware that we have collected data from someone under 18, we will delete it promptly.

4. What Data We Collect

We collect personal data at different stages of your journey on Tarlan:

4.1 Data You Provide

• Contact and Identity Information: When you sign in via Google or LinkedIn, we receive your name, email address, and profile photo. If you sign in with LinkedIn, we may also receive your LinkedIn profile URL. If you sign in with both providers using the same email, we link them to a single account.
• Resume: You upload your resume (PDF or Word document) which contains your professional history, skills, education, contact details, and achievements. We store the original file.
• Job Preferences: Your target roles, preferred locations, compensation expectations, notice period, and resume length preferences, provided through an onboarding form or during a conversation with our AI.
• Voice and Chat Conversations: If you participate in our onboarding interview or job-specific Q&A sessions (by voice or text), we store the text transcripts of these conversations. We do not store voice recordings on our servers.
• Profile Edits: Any changes you make to your professional profile after our AI has processed your resume.
• Feedback: When you skip a job or rate the quality of an analysis, we store that feedback to improve our recommendations.
• Uploaded Files: Any other documents or files you upload to the platform.

4.2 Data We Generate Using AI

When you use Tarlan, our AI creates new information about you to power the platform’s core features:

• Professional Profile: Our AI reads your resume and extracts a structured professional profile - your work history, achievements, skills, and education - so we can match you effectively with opportunities and share relevant profiles with employers.
• Profile Refinement: As you interact with the platform, through edits, conversations, and Q&A sessions, our AI refines your profile by incorporating new information. It may rewrite achievement descriptions to be more specific and impactful, while preserving your voice and style. You can view all changes and revert any modification at any time.
• Job Matching Data: We generate match scores, fit assessments, and personalized explanations for why a job may or may not be a good fit for you.
• Customized Resume Content: When you choose to apply for a specific job, our AI generates a tailored version of your resume highlighting relevant experience. It will never fabricate experience, inflate metrics, or add skills you do not have.

4.3 Data We Collect Automatically

• Usage Data: Pages visited, features used, time spent, and interaction patterns.
• Device and Browser Data: Browser type, operating system, screen resolution, and device type.
• Session Data: Login timestamps, session duration, and authentication events.
• Cookies: Please see our separate Cookie Policy for details.

5. How We Use Your Data

We use your personal data only as needed to achieve each of the following purposes:

5.1 Providing Our Core Services

• Creating and managing your account, including linking accounts across authentication providers.
• Understanding your professional background by reading and processing your resume.
• Conducting onboarding interviews and job-specific Q&A sessions to understand your goals and preferences.
• Matching you with relevant job opportunities and generating personalized job analyses.
• Creating customized resumes tailored to specific job descriptions.
• Refining your professional profile based on your interactions with the platform.
• Maintaining your application history and enabling resume re-downloads.

5.2 Connecting You with Employers

Tarlan is a recruitment platform. A core part of our service is connecting you with the right employers and opportunities. As part of this:

• We share your professional profile - including your skills, experience, achievements, job preferences, and contact information - with employers and recruiters who are looking for candidates that match your background.
• We may use your contact information to reach out to you directly, or to facilitate introductions between you and prospective employers, for job opportunities that align with your profile.
• We may identify and recommend your profile to employers based on our assessment of fit, whether through automated matching or manual review.

You can opt out at any time. To stop your profile being shared with or recommended to employers, or to opt out of direct outreach, email hello@tarlan.ai and we will action your request within 30 days. Once you opt out, employers will no longer be able to discover your profile.

5.3 Communications

• Sending you personalized email notifications about new job matches, if you have opted in.
• Sending service-related communications such as security alerts or policy updates.
• Contacting you about job opportunities as described in Section 5.2. You can opt out at any time.

5.4 Improving Our Platform

• Analysing usage patterns to improve our AI, matching quality, and user experience.
• Using your feedback (such as job skips and match ratings) to refine recommendations over time.
• Monitoring platform performance and reliability.

We may also use aggregated, anonymised data for analytics and market insights. This data will never identify you personally.

6. Legal Basis for Processing

6.1 Under the DPDP Act, 2023 (India)

We process your personal data based on your consent, provided when you create an account and agree to this Privacy Policy. By using Tarlan, you consent to the collection, processing, and sharing of your data as described in this policy, including sharing your profile and contact information with employers and recruiters for recruitment purposes.

You may withdraw consent at any time by deleting your account, which will result in the deletion of all your personal data from our systems. You may also opt out of specific processing (such as profile sharing with employers or job-match communications) without deleting your account, by emailing hello@tarlan.ai or, where available, adjusting the relevant setting in your dashboard. Where your profile has already been shared with employers or recruiters prior to withdrawal, we will take reasonable steps to notify them of your withdrawal of consent, though we cannot guarantee or control the deletion of data already in their possession.

For operational communications (such as security alerts or policy changes), we rely on legitimate use as permitted under the DPDP Act.

6.2 Under the GDPR (EU/EEA Users)

When we serve users in the EU/EEA, we will rely on the following legal bases:

• Contractual Necessity: Providing core platform services - including account management, job matching, resume customization, and sharing your profile with employers - is necessary for the performance of the contract between you and Tarlan.
• Consent: For processing your resume, conducting voice conversations, generating AI-derived data, and sending marketing communications. Withdrawable at any time.
• Legitimate Interest: For platform improvement, security, fraud prevention, and analytics, where our interests do not override your rights.

7. How Our AI Works and Your Control

7.1 What AI Does

Tarlan uses AI throughout the platform to deliver a personalized career discovery experience:

• Reads and processes your resume to build a structured professional profile.
• Evaluates how your experience aligns with job opportunities and generates personalized match assessments.
• Refines your profile over time based on your edits, conversations, and Q&A responses.
• Creates customized resume content when you decide to apply for a specific role.
• Generates personalized email notifications about new job matches.

7.2 Recommendations, Not Decisions

Our AI provides recommendations to help you make informed career decisions. It does not make hiring decisions, submit applications on your behalf, or take actions without your knowledge. You decide which jobs to explore, which resume changes to accept or reject, and whether to apply. Any decisions by employers about whether to engage with your profile are made by humans, not by our AI.

7.3 Your Control

• All AI-made changes to your profile are tracked with a full version history. You can revert any change at any time.
• You review and approve every modification to your resume before downloading.
• You can edit, correct, or delete any information the AI has generated about you.
• If you are an EU/EEA user, you may request human review of any AI-generated assessment by contacting our Grievance Officer.

8. Who We Share Your Data With

8.1 Employers and Recruiters

As described in Section 5.2, we share your professional profile and contact information with employers and recruiters to facilitate recruitment matches and introductions. This is a core part of the Tarlan service. You can opt out of having your profile shared with employers at any time by emailing hello@tarlan.ai. If you withdraw consent or delete your account after your profile has already been shared, please see Section 6.1 for how we handle previously disclosed data.

8.2 Service Providers

We work with third-party service providers who process your data on our behalf, under our instructions, and subject to contractual safeguards:

• Cloud Hosting and Infrastructure: Servers and databases that store your data. Our primary database is hosted in India. Some infrastructure services are based in the United States.
• AI and Machine Learning Services: Third-party AI providers that power our resume processing, job matching, analysis, resume customization, and profile refinement. These services may process your profile data, resume content, and conversation transcripts.
• Voice AI Services: A third-party provider that powers voice conversations during interviews and Q&A sessions. While we do not store voice recordings, our voice AI provider may retain audio data on their servers in accordance with their own policies.
• Content Delivery and Security: Services that deliver the platform securely and protect against threats.
• Job Listing Services: Third-party providers from whom we source job listing data. We do not share any individual user data with these providers.
• Analytics: Tools that help us understand how users interact with the platform.
• Email Delivery: Services that send platform emails, including job match notifications.

8.3 Professional Advisors

We may share data with our lawyers, accountants, auditors, and insurers, but only to the minimum extent needed.

8.4 Legal and Regulatory

We may disclose your data where required by law, regulation, legal process, or enforceable government request, or to protect the rights, property, or safety of Tarlan, our users, or the public.

8.5 Aggregated and Anonymised Data

We may compile aggregated, anonymised data sets for market reports and analytics. This data will never identify you personally.

9. Cross-Border Data Transfers

Tarlan is based in India, and our primary database is hosted in India. However, some of our service providers, particularly AI and infrastructure services, are located in the United States. Your personal data may be transferred to and processed in countries outside India.

For users in India, the DPDP Act permits cross-border transfers unless the Central Government restricts transfers to specific countries. As of this policy’s date, no such restrictions have been notified.

For users in the EU/EEA, we ensure cross-border transfers comply with GDPR by implementing Standard Contractual Clauses (SCCs) or relying on other approved transfer mechanisms.

All service providers are contractually required to maintain security standards consistent with this policy and applicable law.

10. Data Retention

We keep your personal data only as long as needed:

Account Deletion: When you request account deletion, all your personal data is deleted from our active systems within 30 days. Residual copies in encrypted backups may persist for up to 90 days before being overwritten, but will not be used for any purpose.

If we are legally or commercially required to retain certain data beyond deletion, we will retain only what is strictly necessary for a maximum of 2 years, with appropriate safeguards.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest.
• Access controls limiting data access to authorised personnel and systems.
• Secure authentication via OAuth providers - we do not store passwords.
• Regular security assessments and monitoring.
• Contractual security obligations on all service providers.

No system is completely secure. If we become aware of a data breach, we will notify you and the relevant authorities as required by applicable law.

12. Your Rights

12.1 Under the DPDP Act (India)

• Right to Access: Request a summary of the personal data we process about you.
• Right to Correction and Erasure: Correct inaccurate data or request deletion of your account and all associated data from our systems, as further described in Section 6.1.
• Right to Grievance Redressal: Raise a complaint with our Grievance Officer. If unsatisfied, escalate to the Data Protection Board of India.
• Right to Nominate: Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

12.2 Additional Rights Under the GDPR (EU/EEA)

If you are located in the EU/EEA, you additionally have:

• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Restriction: Request that we restrict processing in certain circumstances.
• Right to Object: Object to processing based on legitimate interest.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
• Right Regarding AI Processing: Request human review of AI-generated assessments.
• Right to Lodge a Complaint: Lodge a complaint with your local supervisory authority.

12.3 How to Exercise Your Rights

You can exercise several rights directly in the platform:

• View and edit your profile and job preferences in your dashboard.
• Control how often you receive job-match emails in Dashboard → Settings.
• Delete your account, and all associated data, in Dashboard → Settings (Danger Zone).

To exercise any other right - including opting out of profile sharing or direct outreach, requesting a copy of your data, or restricting or objecting to processing - email our Grievance Officer at hello@tarlan.ai. We will action your request within 30 days.

Any request will be balanced against our own obligations. If we can’t carry out a request, we’ll explain why.

13. International Users

If you are using Tarlan from outside India, please ensure your use complies with your local laws.

For EU/EEA users, this policy complies with the GDPR, and you retain your right to lodge complaints with your local supervisory authority.

14. Third-Party Links

The platform may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

15. Changes to This Policy

We may update this policy from time to time. When we make changes:

• We will notify you by email and/or through a notice on the platform.
• The "Last Updated" date will be revised.
• For material changes, we will seek fresh consent where required by law.

By continuing to use the platform after changes are posted, you accept the updated policy.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Any disputes shall be subject to the exclusive jurisdiction of the courts in Bangalore, India.

For EU/EEA users, this policy is additionally governed by the GDPR.

17. Contact Us

If you have questions about this policy or your data, please reach out:

Grievance Officer: Abyarth Kumar Behera

Email: hello@tarlan.ai

We aim to respond within 30 days.