Taleproof Privacy Policy

Taleproof is operated by Tom Bruckbock, an individual located in California, United States. This Privacy Policy explains how Taleproof collects, uses, shares, retains, and protects personal information when you visit taleproof.com, join the Taleproof early-access list, communicate with us, or use any Taleproof product or service that links to this Policy.

For purposes of applicable data-protection law, Tom Bruckbock is the controller of the personal information described in this Policy unless otherwise stated.

1. Scope

This Policy applies to:

• The Taleproof website and early-access list
• Invite-only, beta, and generally available Taleproof product experiences
• Emails and other communications sent by Taleproof
• Support, feedback, and privacy requests
• Related websites or services that link to this Policy

It does not govern third-party websites or services that have their own privacy policies.

2. Information We Collect

Information you provide directly

Depending on how you interact with Taleproof, we may collect:

Early-access information

• First name
• Email address
• Current role
• Consent and communication preferences

Account information

If you receive access to the Taleproof product, we may collect:

• Email address
• Account and authentication information
• Account status and access permissions
• Product preferences and settings

Career and interview content

When you use Taleproof product features, you may provide information such as:

• Resumes
• Employment and career history
• Companies, roles, responsibilities, projects, and initiatives
• Professional achievements, decisions, tradeoffs, mistakes, conflicts, and outcomes
• Interview responses and career narratives
• Audio, transcripts, or written responses, when those features are used
• Stories, drafts, notes, edits, and other content you create or submit
• Outputs generated from the information you provide

Communications

We may collect information contained in:

• Support requests
• Feedback
• Privacy requests
• Research or product-related communications
• Other messages you send to Taleproof

Please avoid submitting personal information that is not reasonably necessary to use the service.

Information collected automatically

When you visit or use Taleproof, we may automatically receive:

• Browser and device type
• IP address and general network information
• Date and time of access
• Pages or features used
• Error, diagnostic, and security information
• Referring website or source
• Landing page
• Campaign parameters such as utm_source, utm_medium, and similar attribution data

Website analytics

Taleproof uses Plausible Analytics for aggregate website analytics. Taleproof configures Plausible without advertising cookies or persistent user identifiers. Sensitive authentication, password-reset, and unsubscribe routes are excluded from analytics, and Taleproof limits the query parameters included in analytics requests.

Taleproof does not send your name, email address, resume, career content, interview responses, or form contents to Plausible.

Information from service providers

We may receive limited information from service providers that support Taleproof, such as:

• Email delivery or unsubscribe status
• Authentication status
• Security and abuse-prevention results
• Hosting or system diagnostic information
• Payment or subscription status if paid services are introduced later

3. How We Use Personal Information

We may use personal information to:

• Operate and maintain Taleproof
• Manage the early-access list
• Determine when and how to offer product access
• Create and manage accounts
• Process resumes, career information, and interview content
• Generate, organize, adapt, and display interview-story materials
• Provide support and respond to requests
• Send access announcements, confirmation messages, launch updates, and service communications
• Protect Taleproof against fraud, spam, abuse, unauthorized access, and security threats
• Diagnose errors and improve reliability
• Understand aggregate website and product usage
• Develop and improve Taleproof features
• Enforce our Terms of Service
• Comply with legal obligations
• Establish, exercise, or defend legal claims

We may create aggregated or de-identified information that does not reasonably identify you and use it for lawful business, analytical, security, and product-development purposes.

4. Legal Bases for Processing

Where the law requires Taleproof to identify a legal basis, we may process personal information based on:

Your consent

For example, when you join the early-access list or agree to receive launch communications. You may withdraw consent at any time, although withdrawal does not affect processing that was lawful before withdrawal.

Performance of a contract

When processing is necessary to provide a Taleproof product or service you requested.

Legitimate interests

For example, operating and improving Taleproof, protecting the service, preventing abuse, understanding aggregate usage, communicating with users, and maintaining service reliability, where those interests are not overridden by your rights.

Legal obligations

When processing is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request.

Legal claims and vital interests

Where reasonably necessary to protect rights, safety, property, or legal interests.

5. Automated and AI-Assisted Processing

Taleproof uses automated and artificial-intelligence-assisted systems to help process career information, identify relevant details, organize experiences, and generate or adapt interview-story materials.

These systems may produce incomplete, inaccurate, or unsuitable results. Taleproof does not independently verify every fact you provide and does not make employment, hiring, credit, legal, or similarly significant decisions about you.

You should review generated content before relying on or sharing it.

6. How We Share Personal Information

Taleproof may share personal information with service providers that process information on our behalf, including providers supporting:

• Database hosting, authentication, and application infrastructure, including Supabase
• Transactional and launch-related email communications, including Resend
• Security and abuse prevention, including Cloudflare Turnstile
• Privacy-focused website analytics, including Plausible
• Hosting, monitoring, diagnostics, and application delivery
• AI or model processing used to provide Taleproof product features
• Professional legal, accounting, security, or technical services

These providers may process information only as permitted by their agreements, applicable law, and the purposes for which Taleproof engages them.

We may also disclose information:

• When you direct or authorize us to do so
• To comply with law, legal process, or governmental requests
• To investigate fraud, abuse, security incidents, or violations of our Terms
• To protect the rights, safety, and property of Taleproof, our users, or others
• In connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate protections

7. No Sale or Behavioral Advertising

Taleproof does not currently sell personal information.

Taleproof does not currently share personal information for cross-context behavioral advertising or use third-party advertising networks to track you across unrelated websites.

If these practices change, we will update this Policy and provide any notices or choices required by applicable law before the change takes effect.

8. Communications and Unsubscribing

When you join the early-access list, Taleproof may send:

• Signup confirmation
• Access announcements
• Product and launch updates
• Introductory pricing information
• Important service or policy notices

You may unsubscribe from marketing and launch-related emails through the unsubscribe link in an email or by contacting privacy@taleproof.com.

Even after you unsubscribe from marketing communications, Taleproof may retain a limited suppression record so that we can honor your request. If you later obtain a Taleproof account, we may still send necessary account, security, legal, or service-related messages.

9. Data Retention

Taleproof retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security, resolving disputes, enforcing agreements, and complying with law.

In general:

• Early-access information may be retained while the early-access program remains active, until you unsubscribe or request deletion, or for as long as reasonably needed to manage access and launch communications.
• A limited record of consent, unsubscribe status, or prior communication preferences may be retained to honor your choices and demonstrate compliance.
• Account and product information may be retained while your account is active and afterward for a reasonable period needed for security, support, legal obligations, dispute resolution, or account recovery.
• Deleted information may remain temporarily in backups or system logs before being overwritten through normal retention cycles.
• Information may be retained longer when required by law or reasonably necessary to establish, exercise, or defend legal claims.

Where applicable law grants you a deletion right, you may request deletion by contacting privacy@taleproof.com.

10. International Data Processing

Taleproof is operated from the United States. Your personal information may be processed in the United States and in other countries where Taleproof’s service providers operate.

Those countries may have privacy laws that differ from the laws where you live. Where required by applicable law, Taleproof will use appropriate safeguards for international transfers of personal information.

Mandatory privacy and consumer rights provided by the law where you live are not waived by this Policy.

11. Security

Taleproof uses reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls, authentication, restricted database access, encryption provided by infrastructure providers, and abuse-prevention measures.

No system is completely secure. Taleproof cannot guarantee that information will never be accessed, altered, disclosed, or lost without authorization.

You are responsible for protecting your account credentials and promptly notifying Taleproof if you suspect unauthorized use.

12. Your Choices and Privacy Rights

Depending on where you live and the law that applies, you may have the right to:

• Know whether Taleproof processes your personal information
• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion
• Request restriction of processing
• Object to certain processing
• Receive certain information in a portable format
• Withdraw consent
• Opt out of marketing communications
• Lodge a complaint with a privacy or data-protection authority
• Appeal a decision concerning a privacy request, where applicable
• Receive equal service without unlawful discrimination for exercising a privacy right

These rights may be subject to legal exceptions and may not apply in every circumstance.

To submit a request, email:

privacy@taleproof.com

Please describe your request and the email address associated with your information. Taleproof may need to verify your identity before completing a request. We will respond within the period required by applicable law.

California residents

Where applicable, California residents may have rights to know, access, correct, or delete certain personal information and to opt out of certain selling or sharing practices.

Taleproof does not currently sell personal information or share it for cross-context behavioral advertising.

EEA and UK residents

Where applicable, you may have rights of access, correction, deletion, restriction, objection, portability, and withdrawal of consent. You may also lodge a complaint with the data-protection authority where you live or work.

Canada, Australia, and New Zealand

Where applicable, you may have rights to request access to or correction of personal information and to raise a complaint with Taleproof or the relevant privacy regulator.

13. Cookies, Local Storage, and Browser Signals

Taleproof may use cookies or similar browser storage that are reasonably necessary for:

• Authentication
• Security
• Session continuity
• User preferences
• Essential service operation

Plausible Analytics is configured without analytics cookies or persistent advertising identifiers.

Some browsers offer a “Do Not Track” setting. Because no uniform standard governs all Do Not Track signals, Taleproof does not currently respond to every such signal. Taleproof does not currently engage in cross-context behavioral advertising. Where applicable law requires recognition of a legally valid opt-out preference signal, Taleproof will process it as required.

14. Third-Party Links and Services

Taleproof may link to third-party websites or services. Taleproof is not responsible for the privacy practices of third parties, and their own policies govern information they collect directly.

15. Age Requirement

Taleproof is intended only for people who are 18 years of age or older.

Do not join the early-access list, create an account, or use Taleproof if you are under 18.

If Taleproof learns that it has collected personal information from someone under 18, it may delete the information and terminate access.

16. Changes to This Policy

Taleproof may update this Privacy Policy as the service, technology, or legal requirements change.

When changes are material, Taleproof will provide notice as required by law, such as by updating the effective date, posting a notice on the website, or sending an email.

Your continued use of Taleproof after an updated Policy becomes effective is subject to applicable law.

17. Contact

For privacy questions, requests, or complaints, contact: