Privacy Policy

Draft — last updated [date]. This document describes what Talatick actually collects and does with it today. It has not yet been reviewed by a lawyer; see the flagged sections below.

Talatick connects teens with local, informal, and employer-posted jobs, and gives parents/guardians visibility into that process. This policy covers three kinds of users: teens looking for work, guardians a teen has linked, and employers posting jobs or searching for candidates.

1. Information we collect

Before you sign in

If you use Talatick without creating an account, we assign your browser an anonymous identifier via an httpOnly cookie (not readable by JavaScript, not shared with anyone) so your resume match or draft posting isn't lost between visits. This cookie lasts up to a year. If you later sign in, anything tied to that anonymous identifier — your saved profile, matches, or postings — is moved onto your real account, and the anonymous identifier is discarded.

Account information

We use passwordless email sign-in (a "magic link" sent to your inbox). We store your email address and a unique account id. We never see or store a password because there isn't one.

Teen profile information

When you paste your resume text to get matched to jobs, we send that text to Anthropic's Claude API to extract structured information: your first name, skills, education, volunteer work, school activities, and rough experience level. We store only that extracted, structured information — the raw resume text you pasted is never saved anywhere, on our servers or otherwise; it exists only for the moment it takes to process it. If you choose to make your profile searchable to employers, we also store a location you provide (city/neighborhood level, not an address).

Guardian contact information

Saving your profile lets you optionally add a parent/guardian contact (a phone number or email you type in) — this is a plain text field we store as-is and don't verify. Separately, you can formally link a guardian: you enter their email address, and we send them a verification link. Until they click it, the link is "pending" and grants them no access to anything. Once verified, see Section 3 for exactly what that guardian can see.

Job posting content

If you post an informal job (as an adult hiring for yard work, babysitting, etc.), we collect the posting details, your name, and your contact info (a phone number or email you provide). If you create an employer account and post a job, we collect your company name, contact name and email, and the job details. Neither type of posting is shown to any teen until it passes content moderation (Section 5) and, for employer postings, payment (Section 6).

Payment information

We never see or store your card number, expiration date, or CVC. All payment is handled by Stripe on their own hosted checkout page. We store only what Stripe gives back afterward: a customer id, a checkout session or subscription id, and whether payment succeeded — not the underlying financial instrument.

Employer account information

If you create an employer account, we store your company name, your name, and your contact email. One account can be either a teen account or an employer account, never both.

Referral program

If you share your personal referral link, we store which account (if any) later signs up using your code and, once that person completes the required action — a teen finishing their profile, or an employer paying for their first job posting — we record that the referral was completed and credit your account with a free Premium month or a $9.99 posting credit. We never show either side of a referral the other person's name, email, or contact information — you only see anonymous counts (how many people you've referred, how many were rewarded) and your available credit balance.

2. How we use this information

To match you to relevant job postings and let employers find candidates who've opted in.
To let guardians see specific, limited activity involving their linked teen (Section 3).
To process payments for job postings and premium subscriptions.
To review submitted job postings before they're shown to any teen.
To send the transactional emails described in Section 4 — never marketing email.
To credit the right account when someone signs up using your referral link and completes the required action.

We do not sell your information, and we do not use it to train any AI model.

3. Guardian visibility — what a linked guardian can and can't see

This is enforced at the database level (row-level security), not just in the app's screens — the same rule applies no matter how the data is accessed.

A verified guardian can see:

The content of an informal job posting specifically after their linked teen has expressed interest in it — not a general feed of postings.
A notification email when their teen expresses interest in an informal posting, or when a paying employer expresses interest in their teen's searchable profile.

A verified guardian cannot see:

The teen's saved profile, resume-derived skills, or the optional freeform guardian-contact field.
Any employer's contact information, or the teen's own contact information — Talatick never exposes either party's direct contact info to the other in the employer-search flow. All contact happens through us.
Anything before the guardian link is verified — a pending, unclicked invitation grants nothing.

A teen's profile is only shown to employers at all if the teen explicitly opts in ("searchable") and has a verified guardian — employer search is unavailable to a teen with no verified guardian, regardless of the searchable setting.

4. Who we share information with

We work with the following outside companies to run Talatick. None of them can use your data for their own purposes beyond providing their service to us.

Stripe — processes all payments. See Stripe's privacy policy.
Resend — sends the transactional emails we trigger: notifying a verified guardian about posting interest or employer interest, and notifying a poster if their job posting is rejected.
Neon — hosts our database, and provides the passwordless sign-in system itself. Sign-in links and guardian-verification invitation emails are sent by Neon's systems, not Resend.
Anthropic (Claude) — processes resume text and job posting text to extract structured data, powers job matching, and searches the web to find formally-sourced job listings.
Adzuna — a job-search API we query for formally-sourced job listings shown on the browse page alongside informal and employer postings.

Approved job postings and formally-sourced listings are shown publicly on our browse page to any visitor, signed in or not — that's the point of a job board. Nothing else described in this policy is public.

5. Content moderation

Every self-submitted job posting (informal or employer) is reviewed by a human before it's shown to any teen, checked specifically for signs of risk to a minor — requests to move contact off-platform, pay red flags, vague task descriptions, isolated settings, or age-fixated language — in addition to standard content review. Rejected postings include a reason, sent to the poster where we have a valid contact method for them.

⚠ Needs real legal review before this goes live: this describes our actual review process, not a safety guarantee — the copy here should be checked so it doesn't imply a level of vetting (e.g. background checks) we don't actually perform.

6. Payments, subscriptions, and refunds

Employers pay a one-time $9.99 fee per job posting, charged at checkout through Stripe. Full refunds are available any time, no questions asked, self-service, from the posting's own management page or by reaching us through Support. Requesting a refund closes the posting immediately as part of the same request.

Teens can optionally subscribe to Talatick Premium for $3.99/month. The subscription auto-renews every month until canceled. A full refund of the most recent payment is available any time, self-service, from the Premium page — requesting one cancels the subscription immediately as part of the same request, leaving the rest of your account intact. You can also delete your account entirely from the "Get started" page (Section 7 below), which cancels an active subscription as part of that deletion, or reach us through Support.

⚠ Needs real legal review before this goes live: self-service refund/cancellation now exists (described above), but there's still no way to cancel the subscription on its own withoutalso refunding the current period, and no way to keep a partial-period credit — a refund always cancels immediately. Auto-renewal notice requirements vary by state (several require specific pre-charge language, e.g. California's Automatic Renewal Law) — need attorney review before this is the final policy, including whether the current all-or-nothing refund-or-keep-paying shape needs a separate plain-cancel option to satisfy any given state's self-service cancellation requirement.

7. Deleting your data

Teens can delete their saved data from the "Get started" page; employers can do the same from their account page. As currently built, this permanently deletes your saved profile (or employer profile), job matches, any postings you submitted, and — for teens — severs any guardian link you've created (the relationship isn't just hidden; the underlying record is removed on both sides). If you have an active Talatick Premium subscription, deleting your account also cancels it with Stripe as part of the same request, so you won't keep being billed after you're gone.

What it does not currently do: it doesn't offer a way to cancel a Premium subscription on its own while keeping the rest of your account — see Section 6 above for how to do that today (email us).

⚠ Needs real legal review before this goes live: this section discloses real, current gaps rather than describing an aspirational "full right to deletion." If Talatick is subject to a law that requires complete deletion on request (e.g. CCPA, GDPR), confirm the deletion described above (including the guardian-link and Stripe-cancellation behavior) actually satisfies it before this policy relies on it.

8. Children's privacy and who may use Talatick

⚠ Needs real legal review before this goes live: this is still the most important flag in this document, even though the gap it originally described has narrowed. Talatick now asks for a birth year before any resume, profile, or job-posting data is collected (Step 0 of the "Get started" flow) — under-13 users are blocked from every data-collecting feature (saving a profile, browsing, guardian linking) until a parent or guardian confirms consent via a real emailed link and an explicit "I consent" click, reusing the same verified-guardian mechanism described in Section 3. This is a good-faith engineering implementation of the FTC's "email plus" consent method, not a legal determination that it satisfies COPPA's verifiable-parental-consent requirement. Email-based consent is one of the FTC's recognized methods but has known limitations depending on what data is collected and how it's used, and nothing here has been reviewed by an attorney. Don't treat this section as a compliance guarantee until that review happens.

If you enter a birth year showing you're under 13, Talatick will not let you save a profile, browse postings, or use any other feature until a parent or guardian you name confirms — by clicking a real emailed link and an explicit consent button, not just opening the email — that they're okay with you using the service. That confirmation also makes them a verified guardian on your account under Section 3.

9. Cookies

We use one first-party httpOnly cookie for anonymous pre-sign-in identity (Section 1) and whatever session cookie our sign-in provider (Neon Auth) sets to keep you signed in. We don't use advertising or cross-site tracking cookies.

10. Security

Data is stored in a Postgres database with row-level security enforced on every table that holds personal information — the same per-user access rules described in Section 3 apply at the database layer itself, not only in the app's UI. No method of storing or transmitting data is 100% secure, and we can't guarantee absolute security.

11. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of Talatick after a change means you accept the updated policy.

12. Contact us

Questions about this policy or your data: see our Support page for phone and email contact info.

Read our Terms of Service →