TAG AI
Talent Access Gateway
Privacy Policy
Effective Date: April 1, 2026 | Version 1.0
Introduction
TAG AI ("we," "our," or "us") is committed to protecting the privacy of candidates, contractors, clients, and website visitors ("you," "your") who use our AI-powered Talent Cloud platform at taghq.ai.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. We have written this in plain language so you can clearly understand how we handle your data.
Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor, we will delete it promptly.
We collect only the minimum personal information necessary for the purposes described in this policy, and we do not repurpose your data beyond those stated purposes without your consent.
Information We Collect
2.1 Information You Provide
- • Identity and contact: Name, email, phone, WhatsApp number, city, country
- • Resume and profile: CV, work history, skills, certifications, education, project history
- • Professional links: LinkedIn profile, GitHub repositories, portfolio websites
- • AI interview responses: Audio, video, and text responses to assessment questions
- • Availability and rates: When you can start, preferred contract type, hourly rate (kept private — never shared with clients)
- • Work authorization: Right to work status, visa type, authorized countries
- • Account information: Login credentials, profile settings, communication preferences
2.2 Automatically Collected
- • Device and browser: IP address (anonymized), browser type, operating system, device identifiers
- • Usage data: Pages visited, session duration, features used, clicks and interactions
- • Cookies: Analytics cookies loaded only after your explicit consent via our cookie banner
- • Behavioral signals: How you interact with the platform during assessments
2.3 From Public and Third-Party Sources
- • Public professional data: LinkedIn profiles, GitHub activity, public portfolio content
- • Third-party enrichment: Professional data providers for candidate profile verification
- • Background check providers: Only with your explicit written consent at placement stage
Legal Basis for Processing
We process your personal information based on the following legal bases:
- • Consent: AI interview participation, WhatsApp campaigns, marketing communications, background checks
- • Contractual necessity: Delivering our talent matching and placement services
- • Legitimate interests: Platform security, fraud prevention, service improvement, direct outreach to prospective clients
- • Legal obligation: Tax compliance, regulatory requirements, responding to lawful authorities
Contact support@taghq.ai for a detailed legal basis mapping.
How We Use Your Data
- • Candidate-client matching: AI-powered semantic search matches your profile to relevant contract opportunities
- • AI interview and assessment: We generate 28 custom questions from your specific resume and score your responses across technical accuracy, problem-solving, seniority match, and consistency
- • Anonymized profile generation: We create a client-facing version of your profile with all employer names, client names, and personal contact details removed
- • Skills freshness tracking: We monitor when skills were last used and notify you when skills need a refresh assessment
- • WhatsApp and email communications: Opportunity notifications, availability checks, onboarding messages, and placement updates
- • Platform improvement: Aggregate and anonymized data is used to improve our matching algorithms and assessment quality
- • Contractor payment processing: If you are placed, we process financial information to compensate you for services rendered
- • Legal compliance: Meeting obligations under applicable privacy, tax, and employment laws
- • Purpose limitation: We use your data only for the purposes listed above. Any new use requires your consent or a valid legal basis.
AI Processing and Human Oversight
Our platform uses artificial intelligence to conduct candidate assessments and match talent with opportunities. We are transparent about how this works:
- • Custom assessments: Our AI generates questions specifically from your resume — not generic tests. Every question is tailored to your claimed background and experience level.
- • Scoring: AI scores your responses across multiple dimensions. Scores are reviewed by a human team member before your profile is activated.
- • Matching: We use vector embeddings and semantic similarity search to match candidates to opportunities. The system finds meaning, not just keywords.
- • Human oversight: A TAG AI team member conducts a face-to-face or virtual interview using AI-generated questions. No candidate is presented to a client without human review
- • No biometrics: We do not perform facial recognition or biometric identification. Audio and video are analyzed for communication clarity only.
- • No external model training: Your interview recordings and assessment data are never used to train third-party AI models or large language models (LLMs).
- • Right to human review: You can request human review of any AI-generated decision at any time by contacting support@taghq.ai.
- • Anti-discrimination: Our AI does not use protected characteristics — including race, gender, age, disability, religion, or national origin — in assessment scoring or candidate matching.
- • Explainability: If an AI decision significantly affects you, you have the right to receive a clear explanation of the logic involved, the factors considered, and the significance of the outcome.
- • Right to contest: You may formally contest any AI assessment outcome by emailing support@taghq.ai. We will review your case and provide a written response within 30 days.
Interview Recording
Interviews conducted on our platform may be recorded and transcribed. Before any recording begins, you will be presented with an explicit consent screen that you must accept. You may decline recording and contact us for alternative assessment arrangements. By providing consent you agree to the following:
- • Recordings are used only for candidate evaluation and internal quality review
- • Transcripts are generated by AI and reviewed by our team
- • Recordings are retained for 12 months from the interview date, after which they are securely deleted
- • Extended retention beyond 12 months requires your explicit written consent
- • You may request deletion of your interview recording at any time by contacting support@taghq.ai
Communications — WhatsApp, Email, and SMS
We communicate with candidates primarily via WhatsApp. Here is what we may send you and how to control it:
What We Send
- • Opportunity notifications: Role matches relevant to your profile and availability
- • Availability checks: Weekly or bi-weekly messages asking if you are still open to opportunities
- • Onboarding messages: Assessment links, profile setup instructions
- • Placement updates: Status of active submissions and client interest
- • Skill refresh reminders: Notifications when your skills profile needs updating
How to Opt Out
- • WhatsApp: Reply STOP to any message — processed within 24 hours
- • Email: Click unsubscribe at the bottom of any email
- • SMS: Reply STOP to any SMS message
- • All channels: Email support@taghq.ai with subject line "Opt Out"
How We Obtain Consent
- • WhatsApp and SMS: We obtain express consent via a clear opt-in checkbox during candidate registration before sending any commercial messages
- • Email marketing: We use double opt-in — you must confirm your subscription via a verification email
- • Consent records: We maintain timestamped records of all consent — including when, how, and what you consented to — as required by applicable laws
- • Implied consent: We may contact you based on an existing business relationship (e.g., active placement), but only for purposes directly related to that relationship
Essential service messages — such as contract updates, payment notifications, or legal compliance communications — will still be sent to active contractors even after opting out of marketing communications.
Data Sharing
We do not sell your personal information. We share data only in the following circumstances:
- • Client organizations (anonymized only): We share anonymized candidate profiles — no real name, no contact details, no employer names, no rates. Your identifying information is only shared with a client after both parties agree to proceed and you are notified.
- • Technology service providers: Cloud hosting, AI services, messaging, email delivery, and international contractor payment providers
- • Background check providers: Only with your explicit written consent at the placement stage
- • Legal authorities: Where required by law, court order, or regulatory obligation. We will notify you where legally permitted.
- • Business transfers: If TAG AI is acquired or merges, your data transfers to the new entity under equivalent privacy protections
Public Data Collection
We may collect publicly available professional data from sources such as LinkedIn and GitHub to build and enrich candidate profiles. This may include your public employment history, skills, open source contributions, and professional publications.
If you would like to request removal of publicly sourced data from our platform, email support@taghq.ai with subject line "Public Data Removal". We will process your request within 30 days.Data Retention
- • Active candidate profile: Until you request deletion, or 3 years after last platform activity
- • AI interview recordings: 12 months from interview date — deleted unless extended consent obtained
- • Assessment scores: Duration of active profile plus 2 years
- • WhatsApp and email history: 24 months from last communication
- • Placed contractor records: 7 years from final engagement (tax compliance requirement)
- • Client organization records: 7 years from final engagement
- • Financial records: 7 years (Canada Revenue Agency requirement)
- • Consent records: Permanent audit trail maintained as required by applicable laws
- • Website analytics: 26 months
Backups and system logs may persist for a short additional period. Some data may be retained longer where required by law or to resolve disputes.
Security
We implement industry-standard technical and organizational security measures to protect your personal information:
- • Encryption in transit: All data transmitted to and from our platform is encrypted
- • Encryption at rest: All stored data including resumes, recordings, and database records is encrypted
- • Access controls: Role-based access — team members only access data required for their function
- • Cloud infrastructure: Hosted on industry-certified, compliant infrastructure
- • Candidate data isolation: Candidates never see other candidates. Clients only see anonymized profiles.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
- • Notify affected individuals as soon as reasonably possible
- • Maintain a detailed incident log and conduct a post-incident review to prevent future breaches
- • Report to the relevant supervisory authority within 72 hours where required by applicable law
- • Provide clear information about what happened, what data was affected, and what steps we have taken
- • Take immediate remediation steps to contain and resolve the breach
Your Data Rights
Depending on where you live, you have the following rights. Submit requests to support@taghq.ai. Verified requests are processed within 30 days.
- • Access: Receive a copy of all personal information we hold about you
- • Correction: Request correction of inaccurate or incomplete data
- • Deletion: Request deletion of your personal information (subject to legal retention requirements)
- • Portability: Receive your data in a structured, machine-readable format
- • Restriction: Ask us to stop processing your data while a dispute is under review
- • Objection: Object to processing based on legitimate interests or for direct marketing
- • Withdraw consent: Withdraw consent for any consent-based processing at any time
- • Human review: Request human review of any AI assessment decision that significantly affects you
Sensitive Personal Information
We do not collect health information, religious beliefs, ethnicity, or biometric identifiers. Audio and video captured during interviews are analyzed only for communication clarity and response quality. We do not perform facial recognition, emotion detection, or biometric identification.
If any sensitive information is incidentally disclosed during an interview, it is not used as a basis for any assessment or matching decision.Client Data Collection and Handling
We collect and process the following information from client organizations that use our talent matching services:
- • Business contact details: Name, email, phone number, and job title of authorized representatives
- • Company information: Organization name, industry, size, and location
- • Hiring requirements: Job descriptions, required skills, team structure, and project timelines
- • Billing and payment: Invoicing details and payment information for placement fees
- • Confidentiality: All client hiring requirements, budgets, and internal team details are treated as confidential and are never shared with other clients or candidates
- • Retention: Client data is retained for 7 years from the end of the business relationship for tax and legal compliance, after which it is securely deleted
- • Sub-processor changes: We will notify client organizations at least 30 days before adding or replacing any sub-processor that handles their data
Data Controller and Processor Roles
For the purposes of applicable data protection laws:
- • TAG AI as controller: We are the data controller for all candidate data collected through our platform — including profiles, assessments, and communications
- • TAG AI as controller (client data): We are the data controller for client organization data collected for our talent matching and billing services
- • Client as independent controller: When a client receives candidate information for a placement, the client becomes an independent data controller for that data and is responsible for its own data protection compliance
- • Data Protection Impact Assessment: We have conducted a DPIA for our AI-based candidate profiling and assessment activities. A summary is available upon request to support@taghq.ai.
Third-Party Links
Our platform and communications may contain links to third-party websites such as LinkedIn, GitHub, and portfolio sites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party website you visit through links on our platform.
Platform Role and Client Responsibilities
TAG AI acts as an intermediary connecting pre-assessed candidates with client organizations. In this role:
- • We are responsible for candidate data privacy and the integrity of our assessment process
- • Client organizations are independently responsible for their hiring decisions and compliance with applicable employment law
- • We do not make final hiring decisions — clients make all final decisions
- • Clients who receive candidate introductions through TAG AI are bound by our client agreement, which includes data protection obligations
- • If a client organization uses candidate data for purposes beyond the placement for which it was shared, that is the client's legal responsibility
Cookies
- • Strictly necessary: Session management and security — always active, cannot be disabled
- • Analytics: Loaded only after your explicit consent. IP anonymization is enabled.
- • No advertising cookies: We do not use retargeting pixels or behavioral advertising cookies
- • Do Not Track: We honor browser "Do Not Track" signals. When detected, no analytics cookies are loaded regardless of cookie banner settings.
Manage preferences via our cookie banner or your browser settings at any time.
International Data Transfers
Your data may be processed in global data centers to provide our services, including hosting, AI processing, and messaging infrastructure. We ensure appropriate safeguards are in place for all international data transfers.
Updates to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will notify you via WhatsApp or email and update the version number and effective date at the top of this document. Continued use of our platform after notification constitutes acceptance.
Version History:
Version 1.0 (April 1, 2026) — Initial release.