1. Acceptance of Terms

By accessing or using Taltas ("the Service"), you agree to be bound by these Terms of Service and all applicable laws. If you do not agree, you are prohibited from using the Service.

2. Description of Service

Taltas is an AI-powered career intelligence platform. The Service includes:

• Network graph visualisation of professional connections
• AI Career Agents that conduct outreach on your behalf
• Job tracking, sentiment analysis, and compensation benchmarking
• Referral path discovery and warm introduction facilitation

3. User Accounts

You must provide accurate, complete information when creating an account. You are responsible for all activity under your account. Notify us immediately at contact@taltas.com of any unauthorised access.

4. Acceptable Use

You agree not to use the Service to:

• Engage in deceptive or misleading outreach
• Violate any applicable employment, data protection, or anti-spam law
• Reverse-engineer or scrape data from the platform
• Impersonate another person in automated communications
• Exceed rate limits or volume thresholds of your plan

5. AI Career Agents

When you deploy an Career agent, it communicates on your behalf using parameters you configure. You remain fully responsible for all outreach initiated through the Service. Career Agents operate within limits you set. We reserve the right to pause agents that violate our Acceptable Use Policy.

6. Subscription and Billing

Paid plans are billed monthly or annually in advance. All fees are non-refundable except as required by law. We reserve the right to modify pricing with 30 days' notice.

7. Termination

We may suspend your account immediately if you breach these Terms. Upon termination you may export your data within 30 days.

8. Limitation of Liability

To the fullest extent permitted by law, Taltas shall not be liable for any indirect, incidental, or consequential damages arising from your use of the Service.

9. Governing Law

These Terms are governed by the laws of the State of Delaware, United States. Disputes shall be resolved through binding arbitration per AAA rules.

10. Contact

Questions? Write to contact@taltas.com or visit our Contact page.

1. What We Collect

We collect information you provide directly and information generated by your use of the Service:

• Profile data: Work history, skills, target companies, compensation expectations
• Network data: Connection graph from LinkedIn import and manual inputs
• Activity data: Career agent conversations, message threads, engagement metrics
• Device data: IP address, browser type, access timestamps for security

2. How We Use Your Data

Your data is used exclusively to operate and improve the Service — to power your network map and Career Agents, generate match scores, send notifications, detect fraud, and comply with legal obligations.

We do not sell your personal data. We do not use your data to train AI models for third parties.

3. LinkedIn and Third-Party Data

When you connect LinkedIn, we access only your public profile and connection graph. We do not store your LinkedIn credentials. Data retrieved is used solely to populate your Taltas network map.

4. Data Sharing

We share data only with infrastructure and payment service providers under confidentiality agreements, legal authorities when required by law, and acquirers in the event of a merger with prior notice.

5. Data Retention

We retain your data while your account is active. After deletion, personal data is purged within 30 days, except where retention is required by law.

6. Your Rights

You may request access, correction, deletion, or export of your personal data at contact@taltas.com. We respond within 30 days.

7. Cookies

We use essential cookies for authentication and session management. Analytics cookies are opt-out via Settings. We do not use advertising cookies.

8. Contact

Privacy questions: contact@taltas.com. EU/UK users may contact our DPO at dpo@taltas.com.

Our commitment

Security is foundational to Taltas. Your professional network, conversation history, and career data are sensitive — we treat them accordingly.

Encryption

• In transit: All data is encrypted via TLS 1.3
• At rest: Databases are encrypted with AES-256 with geographically separate backups
• Credentials: Passwords are hashed with bcrypt and a per-user salt — never stored in plaintext

Authentication

• Two-factor authentication (TOTP) available for all accounts
• Session tokens rotate on each login and expire after inactivity
• Suspicious login attempts trigger email alerts and temporary locks
• OAuth tokens (Google, LinkedIn) are short-lived only

Infrastructure

• Hosted on SOC 2 Type II certified cloud infrastructure
• Isolated production environment — no shared tenancy
• Automated vulnerability scanning on every deployment
• Intrusion detection and 24/7 alerting on anomalous access
• Regular third-party penetration tests

Access controls

Employees access production data only when required for support, under a break-glass policy with full audit logging. Access is reviewed quarterly.

Incident response

In the event of a confirmed breach, we will notify affected users within 72 hours via email and in-app alert, in compliance with GDPR and applicable US state laws.

Responsible disclosure

Found a vulnerability? Email contact@taltas.com. We acknowledge reports within 48 hours and resolve critical issues within 7 days. We do not pursue legal action against good-faith researchers.