Privacy Policy

Last updated: April 14, 2026

1. Introduction

Tanznt ("we," "us," or "our") operates the Tanznt talent intelligence platform at tanznt.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, organization name, and authentication credentials. If you sign in via a third-party provider (Google, LinkedIn, or GitHub), we receive your name and email address as authorized by that provider.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, timestamps, and device and browser information.

Recruiting & Candidate Data

When you use Tanznt for recruiting operations, you may upload or input candidate information, resumes, job descriptions, interview notes, assessment responses, and related data. You control what data you provide, and you are responsible for ensuring you have appropriate consent or legal basis to process that data.

Third-Party Integration Data

When you connect third-party services (Google Calendar, Gmail, Microsoft Outlook), we access only the specific data required to provide scheduling and communication features. See Section 5 for details on each integration.

3. How We Use Your Information

Provide, operate, and maintain our platform and services
Process data through AI agents for candidate analysis, scoring, matching, interview preparation, and other recruiting workflows you configure
Schedule interviews by reading calendar availability and creating calendar events on your behalf
Send candidate communications through connected email accounts
Improve and personalize your experience
Communicate with you about your account, updates, and support
Detect, prevent, and address security issues and abuse
Comply with legal obligations

4. AI Processing

Tanznt uses artificial intelligence to power recruiting operations including candidate analysis, scoring, matching, interview preparation, assessment evaluation, and offer generation. AI processing is performed on data you provide within your organization's workspace. We do not use your organization's data to train our AI models. All AI agent actions are logged in an audit trail with inputs, outputs, and timestamps.

5. Third-Party Integrations & OAuth

When you connect third-party services, we request only the permissions necessary for the features you use. Below is a complete list of data accessed for each integration.

Google Calendar

Scopes requested:

calendar.readonly — Read your calendar free/busy availability
calendar.events — Create and delete interview events on your calendar
userinfo.email — Identify your account by email address

What we do: Check panelist availability, create interview calendar events with attendees and optional Google Meet links, and delete events when interviews are cancelled.

What we don't do: We do not read the content of your existing calendar events, access contacts, or modify events we did not create.

Gmail

Scopes requested:

gmail.send — Send emails on your behalf
userinfo.email — Identify your account by email address

What we do: Send candidate communications (outreach, scheduling confirmations, follow-ups) from your email address when you initiate them.

What we don't do: We do not read your inbox, access existing emails, scan message content, or send emails without your explicit action.

Microsoft Outlook Calendar

Scopes requested:

Calendars.ReadWrite — Read availability and create/delete events
email, openid — Identify your account
offline_access — Maintain connection without repeated sign-in

What we do: Check panelist availability, create interview calendar events with attendees and optional Teams meeting links, and delete events when interviews are cancelled.

What we don't do: We do not read the content of your existing calendar events, access mail, contacts, or files.

You can disconnect any integration at any time from your account settings. When disconnected, we delete the stored access and refresh tokens immediately.

6. Google API Services — Limited Use Disclosure

Tanznt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google user data to provide and improve the calendar scheduling and email features you explicitly connect and use.
We do not use Google user data for advertising, market research, or to build user profiles unrelated to the recruiting features you use.
We do not sell Google user data to third parties.
We do not use Google user data to train AI or machine learning models.
Human access to Google user data is limited to what is necessary for security, legal compliance, or at your explicit request.

7. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

AI model providers (e.g., OpenAI, Anthropic) to process recruiting workflows. Data is sent per-request and not retained by providers for training.
Infrastructure providers (hosting, database, video) who process data on our behalf under data processing agreements.
Third-party integrations you explicitly connect (e.g., Google Calendar, Gmail, Outlook).
Legal authorities when required by law or to protect our rights.

8. Data Security

We implement the following security measures:

OAuth token encryption: All third-party access and refresh tokens are encrypted at rest using AES-256-GCM with unique initialization vectors.
Multi-tenant isolation: All data is scoped to your organization. Queries are filtered at the application layer to prevent cross-organization data access.
Authentication: SSO via Google, GitHub, and LinkedIn with JWT-based session management.
Audit logging: All AI agent executions are logged with inputs, outputs, timestamps, and status.
Encrypted transport: All data in transit is protected via TLS 1.2+.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law. OAuth tokens are deleted immediately when you disconnect an integration.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal data
Export your data in a portable format
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Disconnect third-party integrations and have tokens deleted immediately

To exercise these rights, contact us at privacy@tanznt.com.

11. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

12. Children's Privacy

Tanznt is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will delete it promptly.

13. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with applicable data protection laws.

14. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@tanznt.com