TalentTight LLC

1. Introduction

This Privacy Policy describes how TalentTight LLC, a Delaware limited liability company ("TalentTight," "we," "us," or "our"), collects, uses, discloses, and safeguards personal information in connection with our SaaS analytics and campaign management platform (the "Services").

This Privacy Policy is incorporated into and subject to our Terms of Service.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. Categories of Personal Information We Collect

A. Information You Provide Directly

We may collect:

• • Name
• • Email address
• • Login credentials
• • Company name
• • Billing information
• • Profile information you choose to provide
• • Campaign materials and uploaded content
• • Communications with us

B. Information Collected Automatically

When you access the Services, we may collect:

• • IP address
• • Device identifiers
• • Browser type and operating system
• • Usage activity and timestamps
• • Log data
• • Cookie identifiers

We use cookies and similar technologies for authentication, security, analytics, and performance monitoring.

You may manage cookie preferences through your browser settings or our cookie consent tool where available. Disabling cookies may impact certain functionality of the Services.

We do not currently respond to "Do Not Track" browser signals.

C. Information from Third-Party Platforms

When you connect a social media account or other integration, we may collect data made available via authorized APIs, including:

• • Username and user ID
• • Public profile information
• • Follower and engagement metrics
• • Post metadata (e.g., thumbnails, post type)
• • Account statistics

We store OAuth tokens to maintain authorized access and may refresh them automatically. We access only the data necessary to provide the Services.

Access to third-party data is subject to platform permissions and terms. We do not control third-party platform policies or changes.

D. Service Providers and Subprocessors

We use third-party service providers to support our operations, including cloud hosting, payment processing, analytics, security monitoring, and customer support.

These providers process personal information pursuant to written agreements requiring appropriate security and confidentiality protections.

A current list of subprocessors is available upon request.

3. How We Use Personal Information

We process personal information for the following purposes:

• • Providing and operating the Services
• • Authenticating users
• • Processing subscriptions and payments
• • Maintaining account security
• • Providing analytics, reporting, and benchmarking
• • Improving and developing product features and functionality
• • Customer support and communications
• • Detecting fraud or misuse
• • Complying with legal obligations

We may use anonymized and aggregated data for benchmarking, analytics, product improvement, and internal business purposes.

We do not sell personal information.

4. Legal Bases for Processing (GDPR)

Where applicable, we process personal data under the following legal bases:

• • Performance of a contract
• • Legitimate interests (including security, fraud prevention, and product improvement)
• • Compliance with legal obligations
• • Consent, where required

Where we act as a processor, we process personal data pursuant to our customer's documented instructions.

5. How We Share Information

We may share personal information:

• • With service providers acting on our behalf
• • With other users as part of campaign functionality
• • When required by law or regulatory process
• • To protect rights, safety, or security
• • In connection with a merger, acquisition, restructuring, or asset transfer

We do not sell or share personal information for cross-context behavioral advertising.

6. Data Retention

We retain personal information only as long as necessary to:

• • Provide the Services
• • Fulfill contractual obligations
• • Comply with legal requirements
• • Resolve disputes
• • Enforce agreements

Inactive accounts will be retained for up to six (6) months following cancellation and will then be permanently deleted unless retention is required by law.

Aggregated and de-identified data may be retained indefinitely.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• • Access personal information
• • Correct inaccurate data
• • Request deletion
• • Restrict or object to processing
• • Request data portability
• • Withdraw consent (where applicable)

To exercise your rights, contact hello@talenttight.com.

We may verify your identity before fulfilling requests.

8. California and U.S. State Privacy Rights

Where applicable under CCPA, CPRA, or similar U.S. state privacy laws, you have the right to:

• • Know the categories of personal information collected
• • Request deletion
• • Correct inaccurate personal information
• • Limit use of sensitive personal information (if applicable)
• • Opt out of sale or sharing

TalentTight does not sell or share personal information as defined under California law.

Requests may be submitted to hello@talenttight.com.

9. International Data Transfers

Personal information may be transferred to and processed in the United States and other jurisdictions.

Where required, we implement appropriate safeguards, including:

• • Standard Contractual Clauses (EU)
• • The UK International Data Transfer Agreement (UK IDTA) or equivalent mechanism
• • Other legally recognized transfer mechanisms

10. Data Security and Breach Notification

We implement administrative, technical, and organizational safeguards designed to protect personal information, including:

• • Encryption in transit
• • Role-based access controls
• • Secure cloud infrastructure
• • Logging and monitoring

No system is completely secure.

In the event of a personal data breach that affects your rights, we will notify affected individuals and relevant regulatory authorities within the timeframes required by applicable law.

11. Children's Privacy

The Services are not intended for children under thirteen (13). We do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information, contact us and we will take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-product notice.

The "Last Updated" date reflects the effective date.

13. Contact

TalentTight LLC
State of Delaware
hello@talenttight.com