Privacy Policy

Who this applies to

Talroot is a hiring platform connecting companies, educational institutes, and candidates for internships and campus hiring. This policy covers everyone who creates an account or whose details are submitted to the platform by an institute on their behalf.

What we collect

The specifics depend on your role:

• Candidates: name, city, state, qualification, specializations, certifications, lab skills, years of experience, current and expected CTC, and a resume link (we don't host resume files — this is a link you provide). If you were added by an institute, your name, city, state, qualification, specializations, and academic year/semester are set and kept current by that institute rather than by you, for as long as you remain a campus profile.
• Companies: organization name, sub-sector, city, and state, used to verify and display your listing.
• Institutes: organization name, type, city, and state.
• Everyone: messages sent through the platform, and activity tied to your account (postings, submissions, pipeline stage changes).

Why we collect it

To run the core service: matching candidates to internships and campus-hiring postings, letting companies and institutes coordinate drives, and letting everyone track where a candidacy stands. Company and Institute accounts are also manually reviewed before they can post or respond to anything, which is why we ask for enough detail to verify who you are.

Your consent controls

Candidates get a dedicated privacy settings page with five separate toggles: whether your profile is discoverable, whether agencies can source you, whether you appear in cold-discovery search, whether you can be sent for AI-based screening, and whether your institute history is shown to companies. Every change is recorded with a timestamp, not just overwritten — so there is always a clear record of what you consented to and when. None of these are pre-ticked; you turn on only what you're comfortable with.

Who can see what

Companies and institutes can see each other's identity once a drive is underway. A candidate's contact details (email, phone, links) stay automatically masked in messages until an offer is formally accepted — before that point, anyone trying to share contact details in a message will see them blocked out automatically. We don't sell personal data to third parties, and we don't share it outside the specific company/institute pairing your candidacy is actually part of.

Where data is stored

Data is stored in a hosted PostgreSQL database (Neon) and the application runs on Vercel's infrastructure. Once email notifications are enabled, transactional emails (like password resets) are sent through a third-party email provider solely to deliver that message.

How long we keep it

We keep account and activity data for as long as your account is active. If you want your data deleted, email us at hello@talroot.com and we'll process the request — this is currently handled manually rather than through a self-service delete button.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you have the right to access what we hold about you, correct it, withdraw consent at any time, request erasure, and raise a grievance if you think we've mishandled your data. To exercise any of these, email hello@talroot.com.

Changes to this policy

If this policy changes in a way that affects how your data is used, we'll update the date at the top of this page and, where the change is significant, tell you directly.