Legal
Privacy Policy
Last updated: May 2026
1. Controller
The data controller responsible for personal data processed through the Talent3X platform (talent3x.com) is:
2. Data We Collect
We collect and process the following categories of personal data:
- Account information: name, email address, username, institutional role
- Profile data: academic programme, year of study, matriculation number (optional)
- Submission data: uploaded files, links, and notes submitted as part of task work
- Evaluation data: skill ratings and evaluations created by educators
- Usage data: login timestamps, page visits, and platform interactions
3. Legal Basis for Processing (GDPR)
We process personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):
Contract performance (Art. 6(1)(b))
Processing necessary to provide the Talent3X platform and its core features to registered users.
Legitimate interests (Art. 6(1)(f))
Improving platform security, preventing fraud, and maintaining platform integrity.
Consent (Art. 6(1)(a))
Where explicitly requested — for example, optional profile sharing or communications.
Legal obligation (Art. 6(1)(c))
Where required by applicable law.
4. How We Use Your Data
- To provide and operate the Talent3X platform
- To create and maintain user accounts and capability profiles
- To enable educators to evaluate and rate student submissions
- To generate institutional reporting and outcome summaries
- To send transactional notifications (e.g. evaluation completed, task assigned)
- To maintain platform security and prevent abuse
5. Data Retention
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Account data is retained for the duration of the account. Capability records may be retained beyond account closure to support the portability of student profiles, unless deletion is explicitly requested.
6. Data Sharing
We do not sell personal data. We may share data with:
- Supabase (database and authentication infrastructure) — operating within the EU
- Pinata (IPFS storage for ratings data)
- Your institution — if access has been provisioned through an institutional account
- Legal authorities — if required by law
7. Cookies
Talent3X uses session cookies for authentication and security purposes. No third-party tracking or advertising cookies are used. Session cookies are automatically deleted when you close your browser.
8. Your Rights (GDPR)
Under the GDPR, you have the following rights:
Right of access
Request a copy of your personal data.
Right to rectification
Request correction of inaccurate data.
Right to erasure
Request deletion of your personal data.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests.
Right to restrict
Request restricted processing of your data.
To exercise any of these rights, contact us at privacy@talent3x.com. You also have the right to lodge a complaint with your national data protection authority.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (HTTPS). Database access is protected by row-level security policies.
10. Changes to This Policy
We may update this privacy policy from time to time. Where changes are material, we will notify users by email or through the platform. Continued use of Talent3X after changes take effect constitutes acceptance of the updated policy.
11. Contact
For any questions about this privacy policy or your personal data, contact: privacy@talent3x.com