Privacy Policy

What TaleoCert collects, why we hold it, and who can see it.

1.Who we are

TaleoCert operates a marketplace connecting verified corporate trainers with the organisations and individuals who book them. This policy covers taleocert.com and the trainer, corporate and learner portals on our subdomains.

2.Information we collect

• Account details you give us: name, email address, password (stored only as a salted hash — we never see it), and optionally a phone number and location.
• Trainer profile information: headline, biography, expertise areas, languages, experience, photographs, showcase materials, credentials and verification documents.
• Corporate registration details: organisation name, work email domain, registered address, GST/VAT identifiers, and the name and signature of the person who signs our agreements.
• Engagement records: booking requests, training agreements and e-signatures, participant rosters, attendance, certificates issued, and reviews.
• Communications: in-app messages, broadcast emails you send, replies received at your platform mailbox, and any files attached to them.
• Payment records: amounts, dates, status and references. Card and bank details are handled by our payment processor (Razorpay) and are never stored on our servers.
• Limited usage data: profile view counts and basic security logs such as IP address and timestamp for sign-in attempts.

3.How we use it

• To operate the marketplace: showing trainer profiles, matching requests, generating agreements, issuing certificates and settling payments.
• To communicate with you about your bookings, agreements, payments and certificates. You control which of these emails you receive in Settings → Notifications; account-critical mail such as password resets cannot be switched off.
• To verify trainers before they appear in the directory, which is the basis of the platform's value to buyers.
• To keep the service secure — rate limiting, abuse prevention and investigating suspected misuse.

4.Who can see your information

Visibility is enforced in the software, not by policy alone:

• Public trainer profile: name, headline, expertise, rating, languages, experience, location and photographs are visible to anyone. Your phone number, earnings, payout settings and any internal moderation notes are never included in that public data.
• Contact details: a trainer's email and phone are shared with a client only once a booking request has been accepted.
• Messages and attachments: visible only to the two parties in the conversation. Files sent in chat, mailbox or broadcasts are served through short-lived signed links and are not publicly reachable.
• Certificates: visible to the recipient, the organisation that commissioned the training, the issuing trainer, and TaleoCert administrators.
• TaleoCert staff may access records where necessary to provide support, resolve a dispute or meet a legal obligation.

5.Service providers

We share the minimum necessary with providers who help us run the service: Razorpay for payment processing, our email infrastructure for sending and receiving platform mail, and our hosting provider. We do not sell personal information, and we do not share it for third-party advertising.

6.Retention

Account and engagement records are kept while your account is active and afterwards for as long as we need them to meet tax, accounting and dispute-resolution obligations. Certificates are retained so they remain verifiable for the people who earned them. Security logs are kept for a limited period. When you ask us to delete your account we remove or anonymise personal data that we are not legally required to keep.

7.Your choices and rights

• Access and correct most of your information directly in your profile and settings.
• Control which platform emails you receive in Settings → Notifications.
• Request deletion of your account from Settings → Privacy & data, or by writing to us. We confirm by email before anything is removed.
• Ask us for a copy of the personal data we hold about you.

8.Security

All traffic is encrypted in transit over HTTPS. Passwords are hashed and never stored in readable form. Access to production data is restricted. Sign-in, registration and password-reset endpoints are rate limited to resist automated attacks, and private file attachments are served only through expiring signed links. No system is perfectly secure, but we treat protecting your data as part of building the product rather than an afterthought.

9.Children

TaleoCert is a business service and is not directed at children. We do not knowingly collect information from anyone under 18.

10.Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change affects how we use your information, tell you by email.