Privacy Policy

MyTalentFlow ("we", "us") is a recruitment, HR and payroll platform operated by MyTalentFlow (Pty) Ltd, South Africa. For privacy questions contact our Information Officer at privacy@mytalentflow.co.za.

• Account data: your name, email, role, and settings.
• Data you enter: candidate, employee, client and payroll records you add to the platform.
• Google account data (only if you connect Google Calendar): your Google account email address, and your Google Calendar events (read and create) accessed via the Google "calendar.events" scope.
• Usage/technical data: log data needed to operate and secure the service.

If you connect Google Calendar, we access your calendar solely to: (a) display your upcoming events so you can see availability, and (b) create/manage interview events you schedule in MyTalentFlow. We access the minimum data needed for these features and only while your account is connected.

MyTalentFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Calendar data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the feature you requested, to comply with law, or as part of a merger with appropriate protections. We do not allow humans to read this data unless we have your consent for specific support, it is necessary for security or to comply with law, or the data is aggregated and anonymised.

Data is hosted on our platform provider (Base44) with row-level and field-level access controls so users only see records they are permitted to; sensitive fields (salary, banking, ID numbers) are restricted to authorised roles. Access tokens for Google are stored securely by the platform and used only server-side.

We do not sell personal information. We share data only with sub-processors that help run the service (e.g. hosting, email delivery) under confidentiality obligations, and where required by law.

We keep data for as long as your account is active or as needed to provide the service and meet legal obligations. You can disconnect Google Calendar at any time in Settings, which revokes our access; you may also revoke access at https://myaccount.google.com/permissions. To request deletion of your data, contact privacy@mytalentflow.co.za.

You may request access to, correction of, or deletion of your personal information, object to processing, and lodge a complaint with the Information Regulator of South Africa. Contact us at privacy@mytalentflow.co.za.

Data is processed on servers operated by Base44, located in the United States. Any cross-border transfer from South Africa is conducted with appropriate contractual safeguards in accordance with POPIA.

The service is for use by people aged 18 and older and is not directed at children.

We may update this policy; we will post the new "last updated" date here.

MyTalentFlow (Pty) Ltd, South Africa · privacy@mytalentflow.co.za