1. Who is responsible (controller / 事業者)
Christopher (Chris) Snow, an individual based in Japan, operates this service personally and is the data controller (GDPR) and personal-information-handling business operator (APPI / 個人情報取扱事業者). “Talentako” and “SkillsForge” are brand and product names he uses; Talentako is not an operating legal entity.
Contact for all privacy matters: chris.snow@talentako.com
2. What we collect, and why (purpose of use / 利用目的)
a. Anonymous usage analytics — all visitors
- A random identifier generated in your browser (stored in
localStorage), a per-tab session identifier, the pages you view, and which product features you use (e.g. running a JD scorecard, using the role simulator). - Purpose: understanding which parts of the product are useful so we can improve it.
- This identifier is random — it is not your name, email, IP profile, or an advertising ID, and it is never linked across other websites. We honour your browser's Do Not Track setting: with DNT enabled, no analytics events are sent at all.
b. Account data — only if you sign in with LinkedIn
- Name, email address (if your LinkedIn account provides one), profile photo, and an app-scoped LinkedIn member identifier. We receive nothing else — no connections, no CV, no work history.
- Purpose: operating your session, associating your product usage with your account, and (in future) managing paid subscriptions. Signing in is optional; the product works without it.
c. Content you submit — processed transiently, never stored
- Text you paste into analysis tools (e.g. a job description in the JD scorecard) is sent to our AI processor for analysis and the result is returned to your browser. We do not store submitted content — it exists only for the duration of the request.
d. Technical logs
- Our hosting provider records standard server logs (IP address, request path, timestamp) for security and reliability, retained per its standard schedule.
We do not use advertising trackers or third-party marketing cookies, do not build cross-site profiles, and do not sell or rent personal data to anyone.
3. Legal bases (GDPR Art. 6)
- Legitimate interests — anonymous product analytics and security logging.
- Contract — operating your account and any subscription you take out.
- Consent — signing in with LinkedIn (you actively choose to connect it); you may withdraw at any time by signing out and requesting deletion.
4. Processors and cross-border transfers (APPI Arts. 27–28 / GDPR Ch. V)
We use a small number of service providers ("processors") to run the product. Some are located outside Japan and the EEA (primarily the United States). We provide this information in line with the APPI's rules on third-party provision in foreign countries; each provider is bound by its own data-processing terms and safeguards (including EU Standard Contractual Clauses where applicable):
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Web hosting, database (analytics events, account records) | USA / global edge |
| Anthropic PBC | AI analysis of content you submit (transient) | USA |
| LinkedIn Corporation | Sign-in (OpenID Connect) | USA |
| Google LLC | Business email for privacy requests | USA / global |
5. Retention
- Anonymous analytics events: up to 24 months, then deleted or aggregated.
- Account records (LinkedIn sign-in): for as long as you keep the account; deleted on request.
- Submitted content (JDs etc.): not stored.
6. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may also lodge a complaint with your supervisory authority.
Under the APPI you may request disclosure (開示), correction (訂正), cessation of use (利用停止), and cessation of third-party provision of your retained personal data, and we will respond as the Act requires.
To exercise any right, email chris.snow@talentako.com. We will verify your identity and respond without undue delay (within one month for GDPR requests; without delay under the APPI).
7. Cookies and local storage
We use no advertising cookies. We use: (a) localStorage/sessionStorage
for the anonymous analytics identifiers described above, and (b) strictly-necessary session
cookies if you sign in with LinkedIn (to keep you signed in). Clearing your browser storage
removes the identifiers; a new random one is created on your next visit.
8. Security
All traffic is encrypted in transit (TLS). Analytics data is stored in access-controlled infrastructure; administrative access is limited to the operator and protected by authentication and network controls. No system is perfectly secure — if a breach affecting your personal data occurs, we will notify you and the relevant authorities as required by the GDPR and the APPI.
9. Children
The service is a professional workforce-analytics tool and is not directed at children under 16. We do not knowingly collect their data.
10. Changes
We will post any changes to this policy on this page with a new effective date. Material changes affecting signed-in users will additionally be announced in the product.