Privacy and data boundaries

This site is static files served from GitHub Pages. It sets no cookies, runs no analytics and embeds no third-party scripts. Inter and Instrument Serif are self-hosted from this domain rather than loaded from a font CDN.

One exception, stated plainly rather than buried: the background film on our marketing pages is served from a third-party CDN, so loading one of those pages sends your IP address and browser string to that host. It is fetched only after the page has loaded, only on wide screens, never when your system asks for reduced motion, and never on the demo — which still makes no external requests at all. We would rather self-host it and remove the exception entirely.

There is no form on this site, so it collects nothing you type. The interactive demo runs entirely in your browser and makes no network calls at all.

One thing we do not control: as the host, GitHub processes standard server request data, including your IP address, in order to serve the page. That is inherent to any hosted website, and we would rather state it than imply the site is invisible.

Every company, requirement, number and decision in the demo is invented for the walkthrough. No real personal data appears in it, and by design the research queue points at roles rather than named individuals.

The demo makes no external AI calls. Nothing you click is sent anywhere.

A design-partner pilot processes material your firm supplies — a signed brief, a CRM export, your off-limits and conflict rules — plus public and licensed company information. Some of that is personal data about executives, and it is treated as such.

Before any of it moves, we document the processing role, purpose, legal basis, transparency method, retention rule and rights process for each category, and sign a data-processing agreement. Legitimate interest is not assumed simply because information happens to be public.

• · Your firm is the controller for its own candidate and client data. Talenomix acts as processor under written instructions.
• · Retention and deletion are agreed before the pilot starts, not after it ends.
• · Data stays within the EU/EEA, and any subprocessor is named to you in advance.
• · Your evidence, your exports and the resulting firm-memory dataset belong to your firm and leave with you.
• · We do not scrape authenticated networks, contact candidates, or publish contact datasets.

Where Talenomix processes personal data on a customer’s instruction, requests from data subjects are routed to that customer as controller, and we support them within the agreed timeframe.

Before person-level prospect research or a live service starts, the controller identity, rights channel, Article 14 information and retention terms must be complete. This page states the current website and product boundaries; it is not a substitute for a customer-specific data-processing agreement.