Privacy Policy

Talent2Role (the "Service") is operated by Quantum Task AI, Dubai, United Arab Emirates ("we", "us"). Last updated: 5 September 2026.

1. What we collect

• Account data — your name, email address and sign-in provider (Google via Netlify Identity, or email).
• Profile data you provide — résumé/experience text, roles held, skills, certifications, education, target role, study preferences, and any file you choose to import (parsed on your device; the extracted text is stored, the file itself is not uploaded).
• Derived data — readiness scores, gap analyses, learning-path progress, badges and certificates the engine generates from your profile.
• Usage data — in-app activity events (pages visited, features used, timestamps) linked to your account, used to operate and improve the Service and to power your own progress views.
• Credential registry records — when you issue a credential: your name as entered, the work role, scores, coverage, career stage, track, method versions, consistency flags, issue date and status. Your e-mail address is stored in the record only as a salted SHA-256 hash. Registry records are public to anyone who has the credential ID.
• Knowledge-check records — for each sitting: role, score, pass/fail, attempt number, item-bank version, duration, integrity counters (tab switches, paste attempts, timeouts) and per-theme results. Not your individual answers.
• Disputes and the honour statement — which statements you disputed and when, and the date you accepted the honour statement.

What we deliberately do not collect: protected characteristics (ethnicity, religion, health, sexual orientation, disability, union membership and the like), government identifiers, payment-card details (Ziina handles payment), webcam or screen recordings, keystrokes. Any future fairness monitoring would use opt-in, de-identified aggregates only and would be announced here first.

2. Where it is stored

Profile and usage data are stored in a per-user data store on our hosting provider (Netlify, which stores data on major cloud infrastructure). A cached copy is kept in your browser for speed and offline use. Authentication is handled by Netlify Identity; we never see or store your Google password.

3. How we use it

• To run the Service: mapping your evidence to the NICE Framework, scoring roles, building learning paths, generating reports, badges and certificates.
• To keep your data available across devices and application updates.
• To respond when you contact us, and to administer Free/Professional plans.
• In aggregated, de-identified form to understand feature usage and improve the product.

We do not sell or rent personal data, use it for third-party advertising, or train public AI models on it.

4. Sharing

• You choose to share: certificates, badges and verification pages contain profile details only when you generate and share them (e.g. on LinkedIn). Anyone with a verification link or QR code can see what it encodes.
• Service providers: hosting and authentication (Netlify), payments (Ziina), and email when you write to us. They process data only to provide their service.
• AI analysis (Anthropic Claude): when you use a Claude-powered feature — résumé analysis, framework mapping, gap summaries, Profile Compare, generated copy — the relevant profile text (and any profile or job text you paste for that feature) is sent to Anthropic's API to produce the result, via our server and never with your API credentials exposed. Anthropic processes it under its commercial API terms, which exclude use of API data for training. Results are stored on your profile so they are not regenerated needlessly; you can delete them with your data at any time.
• Legal: if required by applicable law or to protect the Service from abuse.

5. Retention & deletion

Data is retained while your account is active. Email info@quantumtaskai.com from your account address to request a copy of your data (JSON export) or permanent deletion; we action requests within 30 days. You can also clear the local cache at any time from Settings → Clear profile.

6. Your rights

Depending on where you live (including under the UAE Personal Data Protection Law and the EU/UK GDPR), you may have rights to access, correct, export, restrict or delete your personal data, and to complain to a supervisory authority. Contact us and we will honour them.

7. Security

Access to stored profiles requires your authenticated session token; server endpoints validate every request against the identity service. Administrative access is limited to named Quantum Task AI personnel. No method of storage is 100% secure — please use a strong, unique account password.

8. Age

The Service is for users aged 18 and over and is not directed at children. Accounts confirm this at first use; we delete accounts found to belong to under-18s.

8a. AI transparency

Section 4 describes what is sent to Anthropic's API. The full description of where AI is used, which model, how its proposals are validated, and the fact that scoring is deterministic is at trust.html.

9. Changes

We will post any material changes here and update the date above. Continued use after changes constitutes acceptance.

10. Contact

Quantum Task AI · Dubai, United Arab Emirates · info@quantumtaskai.com · quantumtaskai.com