Privacy Policy

Terra Talent Hub is a digital skill verification and talent assessment platform. We help individuals demonstrate their competence through structured assessments based on recognised frameworks, and help employers identify qualified candidates based on verified performance.

For the purposes of data protection law, Terra Talent Hub is the data controller of personal data collected through this platform.

Contact: privacy@terratalenthub.com

2.1 Account and Profile Data. When you register, we collect your full name, email address, country of residence, and chosen role (Talent or Employer). You may optionally provide a profile biography, profile picture, portfolio URL, GitHub URL, and LinkedIn URL.

2.2 Assessment Data. When you take an assessment, we collect your answers (both selected choices and written responses), time taken, score, and submission date. For open-ended and scenario-based questions, your written answers are stored and reviewed by platform administrators or the employer who created the test.

2.3 Performance Data. We store your assessment scores, pass/fail results, topic breakdowns, and skill verification status. This data is used to generate your public profile, leaderboard ranking, and certificates.

2.4 Certificate Data. When you earn a certificate, we generate a record containing your name, the assessment title, your score, the date of issue, and a unique verification ID. This record is publicly accessible via a shareable verification link.

2.5 Employer Test Data. If you take an assessment created by an employer through a shared link, we collect your name, email address, and answers. If you are an existing Terra Talent user, this result may be linked to your account.

2.6 Communication Data. If you use the messaging feature to communicate with employers or the platform, we store the content of those messages. If you contact us through the Help Centre, we store your message and email address.

2.7 Technical and Usage Data. We automatically collect standard technical data including your IP address, browser type, device type, pages visited, and time spent on the platform. This is used for security, performance monitoring, and improving the platform.

2.8 Authentication Data. If you sign in with Google, we receive your Google account name, email address, and profile picture from Google. We do not receive your Google password.

We use your personal data for the following purposes:

• To create and manage your account and authenticate your identity
• To deliver assessment results, generate certificates, and update your ranking
• To allow employers to view your verified skills and performance (subject to your visibility settings)
• To send transactional emails including account verification, password reset, assessment results, and important platform notifications
• To enable employers to evaluate candidates through custom assessments and reports
• To operate and improve the platform, detect fraud, and ensure security
• To respond to support requests submitted through the Help Centre
• To comply with legal obligations

We do not use your data for automated profiling that produces legal or similarly significant effects.

We process your personal data on the following legal grounds:

• Contract: Processing necessary to provide the service you signed up for
• Legitimate interests: Platform security, fraud prevention, improving services, and enabling employers to find verified talent
• Consent: Where you have explicitly opted in, such as appearing on public rankings
• Legal obligation: Where required by applicable law

By default, your name, country, skill scores, and ranking position may appear on the public leaderboard. You can opt out of public visibility at any time from your Profile settings. Opting out removes you from the public leaderboard but does not delete your data — your ranking is still calculated and visible to you privately.

Certificates issued by Terra Talent are publicly verifiable by anyone who has the certificate link. This is a core feature of the platform that cannot be disabled, as it enables employers and clients to verify your credentials.

Employers: When you take an employer's custom assessment via a shared link, the employer can see your name, email address, score, answers, and the AI-generated or admin-provided feedback on your submission. They cannot see data from other assessments on the platform.

Service providers: We use the following third-party services to operate the platform. Each processes your data only as necessary to provide their service:

• Supabase (database and authentication infrastructure)
• Cloudflare (content delivery and edge hosting)
• Mailgun via Lovable's email gateway (email delivery)
• Google (OAuth sign-in, if you choose to use it)
• Gemini AI via Lovable's AI Gateway (AI-assisted grading suggestions and question generation — no personal data is included in AI prompts beyond anonymised answer content)

We do not sell your personal data to third parties. We do not share your data with advertisers.

We retain your account and profile data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law or for legitimate platform integrity purposes (such as maintaining the integrity of historical leaderboard records).

Assessment results and certificates are retained indefinitely to support verification by employers and clients, even after account deletion, in anonymised form.

Email logs are retained for 90 days for deliverability and compliance purposes.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing of your data in certain circumstances
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at privacy@terratalenthub.com. We will respond within 30 days.

We use essential cookies and local storage to keep you logged in and remember your language preference. We do not use advertising cookies or third-party tracking pixels. You can clear cookies at any time through your browser settings, but this will log you out of the platform.

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, row-level security on our database, and access controls that restrict data access to authorised users only.

Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and enable two-factor authentication on your Google account if you use Google sign-in.

Terra Talent Hub operates globally. Your data may be stored and processed in servers located outside your country of residence, including in the United States and European Union, where our infrastructure providers operate. We ensure appropriate safeguards are in place for such transfers.

Terra Talent Hub is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at privacy@terratalenthub.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for significant changes, notify you by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

For any privacy-related questions or requests:

Email: privacy@terratalenthub.com
Website: terratalenthub.com