Privacy Policy

We collect information you provide directly (such as when you request a demo, create an account, or contact support), information automatically collected through your use of the platform, and information provided by our enterprise customers about their authorized users.

Account data may include your name, work email, employer, role, phone number, authentication credentials, communication preferences, workspace configuration, and activity logs required to operate the service securely.

Payments are processed by PCI-DSS compliant payment providers. mytalentmetrics does not store full payment card details on its own infrastructure. We retain limited billing metadata (invoice history, tax IDs, billing contact) required for legal and financial record keeping.

We use strictly necessary cookies to operate the platform, and, with your consent, analytics and preference cookies to improve product quality. You may adjust cookie preferences at any time in your browser settings or via the cookie banner on our website.

For personal data of individuals located in the European Economic Area or the United Kingdom, mytalentmetrics acts as either a data controller or a data processor depending on the context, and processes personal data in accordance with the General Data Protection Regulation and the UK GDPR. A Data Processing Addendum incorporating Standard Contractual Clauses is available to enterprise customers upon request.

Personal information is retained only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Customer workspace data is retained for the duration of the subscription and deleted or returned in accordance with the applicable enterprise contract.

The platform integrates with HRIS, payroll, identity, and communication providers such as Workday, SAP, Oracle, ADP, BambooHR, Okta, and Microsoft. Data shared with these integrations is governed by their respective privacy policies and the configurations authorized by the customer.

We maintain a defense-in-depth security program aligned with SOC 2 Type II and ISO 27001. Controls include encryption in transit (TLS 1.3) and at rest (AES-256), role based access, multi-factor authentication, continuous vulnerability management, and 24/7 monitoring.

Subject to applicable law, you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal information, and to withdraw previously granted consent. Requests may be submitted via the contact channels below and will be actioned within statutory timeframes.

mytalentmetrics operates across multiple regions. Where personal information is transferred outside its country of origin, transfers are protected by appropriate safeguards including Standard Contractual Clauses, UK International Data Transfer Agreements, and regional data residency options for EU, UK, US, Canada, and APAC.

To exercise your rights or ask questions about this Privacy Policy, please contact our Data Protection Officer at privacy@mytalentmetrics.com. Enterprise customers may also raise requests through their dedicated Success Manager.