Privacy Policy

Introduction

Taraki is a recruitment and applicant tracking platform operated by Bolandi Technologies. This Privacy Policy explains how Taraki collects, uses, stores, shares, and protects personal information when employers, recruiters, candidates, and other users access the platform.

Our role in processing personal information

For account information belonging to recruiters, employers, and other platform users, Taraki acts as a data controller. For candidate information submitted through the platform or added by an employer's recruitment team, the employer is the data controller and Taraki acts as a data processor on its behalf. The employer decides what candidate information is collected, how it is used, and how long it is kept. Candidates should contact the relevant employer directly to exercise privacy rights over their application information, and Taraki will assist employers with such requests where appropriate.

Information We Collect

• Recruiters and employers: name, email address, company information, job title, account and login details, team permissions, jobs managed through Taraki, candidate communications, scheduling information, and billing information.
• Candidates: name, contact details, location, resume or CV, employment and education history, skills, current or expected salary where requested, application and screening responses, interview information, application status, recruiter notes, and referral information. What is requested varies by employer and job.

How We Use Information

Taraki uses this information to create and manage accounts, provide recruitment and applicant tracking functionality, facilitate communication between recruiters and candidates, schedule interviews, run integrations authorized by the user, including Gmail, Google Calendar, and job boards, process subscriptions and payments, provide support, secure and improve the platform, and comply with legal obligations.

Taraki uses automated tools, including artificial intelligence, to assist recruitment teams with parsing candidate resumes and evaluating or scoring applications based on candidate-provided information and relevant job requirements. These tools are intended to support recruiters and do not independently make final hiring decisions. Employers and their recruitment teams remain responsible for employment decisions.

Taraki's AI-powered recruitment features operate exclusively on candidate application information and relevant recruitment data. Google Workspace user data obtained through Gmail or Google Calendar APIs is not transferred to third-party AI/ML service providers or used for AI-powered resume parsing, candidate scoring, or other machine-learning processing.

Where United Kingdom or European Union data protection law applies, Taraki relies on applicable legal bases, including performance of a contract, legitimate interests, consent, and compliance with legal obligations, as appropriate to the processing activity. Where Taraki processes candidate information as a processor, the employer is responsible for establishing the applicable legal basis.

Google Services and Google User Data

Recruiters may connect their Google account to send recruitment emails and schedule interviews. Taraki requests only the permissions necessary for these features. When a user connects a Google account, Taraki receives basic account information, such as name, email address, and account identifier, but never the account password.

Gmail

Taraki requests permission only to send recruitment-related messages initiated by the authorized user. Taraki does not use this permission to read, scan, analyze, or access the contents of the user's inbox.

Google Calendar

Taraki uses Google Calendar access to create and manage interview events requested through Taraki and, where applicable, retrieve the current status and details of those events, including scheduling changes and cancellations. Taraki does not access unrelated calendar events except where technically necessary to provide the calendar functionality expressly requested by the user.

Google User Data and AI/ML Processing

Taraki does not transfer, disclose, or provide Google Workspace user data obtained through Gmail or Google Calendar APIs to third-party artificial intelligence or machine-learning service providers.

Google Workspace user data, including raw, aggregated, anonymized, or derived information, is not used to create, train, develop, or improve foundational or generalized artificial intelligence or machine-learning models.

Taraki's AI-powered recruitment features, including resume parsing and candidate scoring, operate independently using candidate recruitment information and do not process Google Workspace API data.

Google User Data Sharing and Disclosure

Google user data is used only to provide the connected features requested by the authorized user. Taraki does not sell Google user data, use it for advertising, or use it for unrelated purposes.

Taraki uses authorized infrastructure service providers, including Amazon Web Services (AWS), to securely host and operate the platform and its Google integrations. Google account connection information, OAuth credentials, and related integration data may be processed within this infrastructure for authentication, secure storage, email sending, and interview scheduling functionality.

Taraki exchanges information required for these operations with Google through authorized Gmail and Google Calendar APIs. Recruitment emails and calendar invitations are delivered to the recipients designated by the authorized recruiter.

Taraki does not share Google Workspace API data with third-party AI/ML providers, advertising services, payment processors, or data brokers.

Google Account Authentication and Security

OAuth credentials and authentication tokens used to maintain connected Google integrations are securely stored within Taraki's AWS-hosted infrastructure and used only to authenticate authorized requests to Google services. Access to these credentials is restricted to authorized systems and personnel as necessary to operate the integration.

Compliance with Google's Limited Use Requirements

Taraki's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

Google user data is accessed, processed, and transferred only where necessary to deliver the Google-connected functionality requested by the authorized user, subject to the applicable restrictions and permitted exceptions under these policies.

Data Retention and Security

Taraki retains personal information for as long as reasonably necessary to provide the platform, support recruitment processes, meet contractual and legal obligations, and prevent fraud.

Where Taraki acts as a data processor, candidate information is retained in accordance with the relevant employer's instructions and Taraki's agreement with that employer. Following deletion or termination, information may remain temporarily in secure backups before being deleted in accordance with Taraki's backup and retention procedures, unless retention is required by law.

Taraki uses reasonable administrative, technical, and organizational measures to protect personal information and limits access to candidate data according to account permissions. No internet-based service can guarantee absolute security, and users are responsible for the confidentiality of their own credentials.

Google Integration Data Retention

Google OAuth credentials and Google integration-related information are retained only for as long as necessary to provide the connected functionality or meet applicable legal and security obligations.

When a user disconnects their Google account from Taraki, Taraki stops using the connection and deletes or invalidates the stored OAuth credentials in accordance with its security and retention procedures. Associated information is retained or deleted according to applicable retention requirements.

Users may also revoke Taraki's access to their Google account through their Google Account security settings.

Your Rights and Choices

Depending on applicable law, you may request access, correction, deletion, restriction of or objection to processing, withdrawal of consent, and revocation of connected third-party services. As described in Section 1, candidates should contact the relevant employer for requests about their application information, and Taraki will assist where appropriate. Google access can be revoked at any time in Google Account settings.

Changes to this Policy

Taraki may update this Policy from time to time. The Last Updated date will change accordingly, and where required, additional notice will be given for material changes.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at support@taraki.co.