Privacy policy
Last updated: 19 October 2026
This page explains which personal data we process when you use tailk.me and tailkme.com, why, who we share it with, how long we keep it and how you can exercise your rights. Cookies are covered in the cookie policy. The Italian version prevails in case of discrepancies.
1. Data controller
Email for privacy requests: [email protected]
2. Which data we process
- Account data: email, password (stored encrypted, we cannot see it), username, language.
- CV and AI profile: the text of the CV you upload and what we derive from it (experience, skills, role, seniority), and your search preferences (cities, countries, remote work, keywords). Please do not include special categories of data in your CV (health, political or religious opinions, trade union membership): we do not need them.
- Application data: the details you enter so the agent can apply for you (for example phone, address, date and place of birth), answers to form questions, cover letters, interviews with the AI recruiter and the status of your applications.
- Payments: chosen plan, amounts, dates and receipts. Card details are handled by Stripe: we never see them.
- Technical and usage data: IP address, browser type, pages visited, date and time, recorded in the server logs for security and operation; visit statistics (Google Analytics) only with your consent.
- Data uploaded by recruiters: when a company or recruiter uses tailk.me to assess candidates, they are the controller of the candidate data they upload and tailk.me processes it on their behalf, as set out in the Terms.
3. Why we process it and on which legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, AI profile and CV | Performance of the contract (Art. 6(1)(b) GDPR) |
| Finding suitable jobs (matches), running interviews with the AI recruiter, preparing cover letters and applications | Performance of the contract |
| Sending service emails (new matches, interview results, plan notices). You can turn them off in your account | Performance of the contract |
| Handling payments, receipts and tax obligations | Contract and legal obligations (Art. 6(1)(c)) |
| Service security, abuse and fraud prevention, technical logs | Legitimate interest (Art. 6(1)(f)) |
| Visit statistics with Google Analytics | Consent (Art. 6(1)(a)), which you can withdraw at any time |
4. Artificial intelligence
To analyse your CV, compute matches, run interviews and fill in forms we use artificial intelligence models. The text to be processed (for example your CV, interview questions, the fields of a form) is sent to the model provider (see section 6) only to obtain the answer. We do not use your data to train models.
Scores and matches are suggestions: they do not produce automated decisions with legal effects on you. You always decide whether to apply, and no application is sent without your confirmation.
5. Applications, agent and AI headhunter for Chrome
When you ask your agent to apply, your data (CV, cover letter, application profile) is entered into the form of the company or agency that published the job. From then on that company processes the data as an independent controller, under its own privacy notice. Submission only happens after your confirmation.
The AI headhunter for Chrome extension only activates when you click its icon, reads the form fields in the open tab and fills them in with your details. It does not read other pages you visit, does not read passwords and never submits an application on its own.
6. Who we share data with
We use these providers, which process data on our behalf as processors:
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare, Inc. | Network, protection and page delivery | USA / global network |
| Ollama, Inc. (Ollama Cloud) | Artificial intelligence models (CV, interviews, form filling) | USA |
| Stripe Payments Europe, Ltd. | Payments | Ireland (EU) |
| Aruba S.p.A. | Sending emails | Italy (EU) |
| Google Ireland Limited | Visit statistics (Google Analytics), only with consent | Ireland (EU) |
Data may also be shared with the companies and agencies you choose to apply to (section 5) and with authorities when required by law. We do not sell your data.
7. Transfers outside the European Union
Some providers (Cloudflare, Ollama and, in some cases, Google and Stripe) may process data in the United States. In these cases the transfer relies on the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework, or on the standard contractual clauses approved by the Commission.
8. How long we keep data
- Account, CV, AI profile, matches and applications: as long as your account is active. If you ask for deletion, we delete them within 30 days.
- Payment data and receipts: for the period required by tax law (10 years).
- Server technical logs: up to 6 months.
- Google Analytics statistics: according to Google Analytics retention settings, up to 14 months.
9. Your rights
You can ask at any time to access, correct or delete your data, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. You can withdraw consent to analytics from the cookie preferences. To exercise your rights or delete your account write to [email protected]: we reply within 30 days.
If you believe the processing is not lawful you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the authority of your country.
10. Changes
If we change this notice we update the date at the top; for important changes we notify you by email.