Legal
Data Retention Policy
Last updated: March 2026
We retain personal data only for as long as is necessary to provide the platform's services and to comply with applicable law. This policy sets out the specific retention periods that apply to each category of data.
Our approach to data retention
Talent Atrium retains candidate data for up to 12 months to support platform continuity — so candidates can reuse their profile across multiple applications without re-uploading their CV or repeating their behavioural assessment each time.
We do not retain data longer than is necessary. We do not use retained data for purposes beyond what is stated in this policy. Two weeks before any scheduled deletion, candidates receive a notification and the option to extend their data retention. Candidates may also delete or update their data at any time from their portal.
A separate category of audit and system logs is retained for up to four years for legal compliance purposes. These logs record system events and operation records; they do not contain CV text, behavioural assessment responses, or evaluation report content.
Retention schedule
| Data category | What it includes | Retention period | Deletion method |
|---|---|---|---|
| Application data | CV content, parsed profile data, evaluation scores, compatibility reports, and match data linked to a specific vacancy application | 12 months from application date, unless candidate opts to retain longer | Automatically deleted after 12 months unless the candidate has explicitly chosen to retain their data. Candidates are notified two weeks before deletion and may extend retention at any time. Deletion is permanent and irreversible. |
| Candidate profile | Account credentials, structured CV profile, behavioural assessment results, and personal report | 12 months from date of last activity, or until account closure | Deleted on account closure or upon request within 48 hours. Automatically deleted after 12 months of inactivity with two weeks' prior notice. Candidates may choose to extend retention. |
| Recruiter account | Account credentials, vacancy listings, and evaluation decisions | Duration of active account | Deleted on account closure or upon request |
| Vacancy listings | Job descriptions, requirements, and vacancy metadata | Retained for 60 days after closure to allow recruiter reference, then deleted | Deleted 60 days after closure |
| Authentication and session data | Login tokens and session records | Duration of active session | Deleted on logout or session expiry |
| Audit and system logs | System operation records, evaluation event logs, and compliance audit trails. Does not include CV content or evaluation report text. | Up to four years from date of creation | Retained for legal compliance. Required under applicable law including California FEHA (4-year ADS record retention requirement) and Colorado SB24-205. Cannot be reduced in response to individual deletion requests, but is not accessible to recruiters or candidates in raw form. |
Note on deletion requests and audit logs
When you close your account or request deletion, all profile data, CV content, behavioural assessment responses, and evaluation reports are deleted within 48 hours. The audit and system log category listed above is the only data category that may be retained after a deletion request, and only where required by law. These logs are not accessible to recruiters or candidates in raw form and do not re-identify you to any party reviewing them.
Requesting early deletion
Candidates can request deletion of their account and all associated data at any time from their candidate portal. Once requested, deletion is processed within 48 hours.
If you cannot access your account or need to make a deletion request by other means, contact us via the Contact page and we will process your request within the timeframe required by applicable data protection law.