Taackk Privacy Policy

Registration. To create an account you provide data including your name, email address and/or mobile number, general location, and a password. If you register for a paid Service, you provide payment and billing information. Passwords are stored as a bcrypt hash and are never stored in plain text.

Profile. You have choices about the information on your profile, such as your professional history, skills, industries, publications, photo, city or area, and other information you provide when building a Leader or Business profile. You do not have to provide additional profile information, but it helps you get more from the Services. It is your choice whether to include sensitive information on your profile and to make it public. Please do not post or add personal data to your profile that you would not want to be publicly available.

Posting and uploading. We collect personal data when you provide, post or upload it to our Services, such as when you fill out a form (for example, with demographic or salary data), respond to a survey, or submit an application or document.

Content and news. You and others may post content that includes information about you (as part of articles, posts, comments or videos) on our Services. We may also collect public information about you, such as professional-related news and accomplishments, and make it available as part of our Services, including, as permitted by your settings, in notifications to others.

Contact and referral information. We receive personal data about you when others import or sync contacts with our Services, or send messages using our Services (including invitations or connection requests).

Partners. We receive personal data (for example, your job title and work email address) about you when you use the services of our customers and partners, such as employers or prospective employers.

We log usage data when you visit or otherwise use our Services, such as when you view or click on content, perform a search, or use a feature. This includes pages visited, features used, timestamps of actions, and IP addresses (retained for fraud prevention and audit purposes). We use log-ins, cookies, device information and IP addresses to identify you and log your use.

As further described in our Cookie Policy, we use cookies and similar technologies (for example, pixels and tags) to collect data (for example, device IDs) to recognise you and your device(s). We also allow some others to use cookies as described in our Cookie Policy. You can manage your cookie preferences at any time using the cookie banner.

When you visit or leave our Services we receive the URL of both the site you came from and the one you go to and the time of your visit. We also get information about your network and device (for example, IP address, operating system, web browser and add-ons, device identifier and features, cookie IDs, ISP or mobile carrier). If you use our Services from a mobile device, that device will send us data about your location based on your phone settings. We will ask you to opt in before we use GPS or other tools to identify your precise location.

We collect information about you when you communicate with others through our Services (for example, when you send, receive or engage with messages). This may include information indicating who you are communicating with and when. We also use automated systems to support and protect our site, to suggest possible responses to messages, and to manage or block content that violates our User Agreement or Professional Community Policies.

When your organisation (for example, your employer) buys a paid Service for you to use, they provide us with personal data about you and your eligibility to use the Services they purchase for their workers.

We receive information about your visits and interaction with services provided by others when you log in to others' services with your Taackk account or visit others' services that include our plugins, ads, cookies or similar technologies.

Our Services are dynamic and we often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we collect, use or share your data, we will notify you and may modify this Privacy Policy.

Stay connected. Our Services allow you to connect with professionals you choose, and who also wish to connect with you. Subject to your and their settings, when you connect with other Members you will be able to search each other's connections to exchange professional opportunities. We use data about you to help others find your profile, suggest matches and connections, and enable you to invite others.

Stay informed. Our Services allow you to stay informed about news, events and ideas on professional topics you care about, and to improve your professional skills. We use the data we have about you to personalise our Services, such as by recommending or ranking relevant content and conversations, and to suggest skills you could add to your profile.

Career and matching. Our Services allow you to explore and be found for engagements. Your profile can be found by those looking to engage senior capability, and you can signal interest in opportunities. We use your data to recommend engagements to you and you to Businesses.

Productivity. Our Services allow you to communicate with other Members and manage engagements. If your settings allow, we scan messages to provide tools that facilitate tasks such as scheduling, drafting responses, summarising messages or recommending next steps.

We sell premium Services that provide our customers with customised search, matching and messaging functionality as part of our marketplace offering. Customers can export limited information from your profile, such as name, headline, current company, current title and general location, to manage engagements, unless you opt out. We do not provide contact information to customers as part of these premium Services without your consent.

We contact you and enable communications between Members. We offer settings to control what messages you receive and how often. We will contact you through email, notices posted on our websites or apps, messages to your Taackk inbox, and other ways through our Services, including text messages and push notifications. We will send you messages about the availability of our Services, security or other service-related issues, and messages about how to use our Services, reminders and promotional messages. You may change your communication preferences at any time, but you cannot opt out of receiving service messages, including security and legal notices.

We may serve you tailored ads both on and off our Services. We offer you choices regarding personalised ads, but you cannot opt out of seeing non-personalised ads. We target (and measure the performance of) ads to Members, Visitors and others using data such as data collected by advertising technologies (pixels, tags, cookies and other device identifiers), Member-provided information, data from your use of our Services, information from advertising partners, and information inferred from the data described above.

Info to ad providers. We do not share your personal data with any non-affiliated third-party advertisers or ad networks except for (i) hashed IDs or device identifiers, (ii) with your separate permission, or (iii) data already visible to any users of the Services.

In addition to advertising our Services, we use Members' data and content for invitations and communications promoting membership and network growth, engagement and our Services.

Service development. We use data, including public feedback, to conduct research and development for our Services in order to provide you and others with a better, more intuitive and personalised experience.

Other research. We use the personal data available to us to research professional, social and economic trends. In some cases we work with trusted third parties to perform this research, under controls designed to protect your privacy. We publish or allow others to publish insights, presented as aggregated data rather than personal data.

Surveys. Polls and surveys are conducted by us and others through our Services. You are not obligated to respond and may opt out of survey invitations.

We use data (which can include your communications) to investigate, respond to and resolve complaints and Service issues.

We use your data to perform analytics to produce and share insights that do not identify you. For example, we may use your data to generate statistics about our Members, their profession or industry, or to calculate ad impressions.

We and our Affiliates may use your data (including your communications) for security purposes or to prevent or investigate possible fraud or other violations of the law, our User Agreement, and/or attempts to harm our Members, Visitors, company, Affiliates or others.

Any data you include on your profile, and any Content or social action you take on our Services, will be seen by others, consistent with your settings.

Profile. Your profile is visible to all Members and customers of our Services. Subject to your settings, it can also be visible to others on or off our Services (for example, Visitors or users of third-party search tools).

Posts, likes, follows, comments, messages. Our Services allow viewing and sharing of information including through posts, likes, follows and comments. When you share publicly, it can be viewed by everyone and re-shared anywhere (subject to your settings). When you like, re-share or comment on another's content, others will be able to view these social actions and associate them with you.

You may link your account with others' services so that they can look up your contacts' profiles, post your shares on such platforms, or enable you to start conversations with your connections on such platforms. Excerpts from your profile may also appear on the services of others. Third-party services have their own privacy policies, and you may be giving them permission to use your data in ways we would not.

We use others to help us provide our Services (for example, maintenance, analysis, audit, payments, fraud detection, customer support, marketing and development). They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes. Specific providers include:

• Stripe — payment processing (PCI DSS Level 1 certified). Billing information is processed by Stripe and is not stored on our servers; we retain only a Stripe customer ID and subscription status.
• OpenAI — AI-powered features such as profile generation and matching. Data is processed under OpenAI's data processing agreement and is not used to train their models.
• Infrastructure providers — cloud hosting and database services, bound by data processing agreements.

We may disclose information about you when required by law, subpoena or other legal process, or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you; (3) investigate and defend ourselves against third-party claims or allegations; (4) protect the security or integrity of our Services; or (5) exercise or protect the rights and safety of Taackk, our Members, personnel or others. We attempt to notify Members about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency.

We may share your personal data as part of a sale, merger or change in control, or in preparation for any of these events. Any entity which buys us or part of our business will have the right to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.

We generally retain your personal data as long as you keep your account open or as needed to provide you Services, including data you or others provided to us and data generated or inferred from your use of our Services. Specific retention periods:

• Account data: for the duration of your account plus 30 days after deletion (to allow recovery).
• Audit logs: 12 months (security and compliance).
• Login attempt records: 90 days (fraud prevention).
• Session tokens: automatically purged on expiry.
• One-time tokens (OTP, password reset, email verification): 30 days after use.

In some cases we retain certain information in a depersonalised or aggregated form.

You can access or delete your personal data, and you have many choices about how your data is collected, used and shared. For personal data we hold about you, you can:

• Delete data: ask us to erase or delete all or some of your personal data. Contact [email protected].
• Change or correct data: edit some of your personal data through your account, or ask us to change, update or fix your data in certain cases, particularly if it is inaccurate.
• Object to, or limit or restrict, use of data: ask us to stop using all or some of your personal data, or to limit our use of it.
• Right to access and/or take your data: ask us for a copy of your personal data, and ask for a copy of personal data you provided in machine-readable JSON format.

Residents in the Designated Countries, the UK and other regions may have additional rights under their laws — see our GDPR & Data Protection Notice.

If you close your account, your personal data will generally stop being visible to others on our Services within 24 hours. We generally delete closed account information within 30 days of account closure, except where we reasonably need to retain it to comply with our legal obligations, meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our User Agreement, or fulfil your request to unsubscribe from further messages. We retain depersonalised information after your account is closed. Information you have shared with others will remain visible after you close your account, and we do not control data that other Members have copied out of our Services.

We implement technical and organisational measures designed to protect your data, including AES-256-GCM encryption for sensitive credentials, bcrypt password hashing (12 rounds), HTTP-only SameSite=Strict session cookies, TLS in transit, and role-based access controls. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot warrant the security of any information you send us.

We process data both inside and outside your country and rely on legally provided mechanisms to lawfully transfer data across borders. Countries where we process data may have laws that differ from, and potentially are less protective than, the laws of your own country. See our GDPR & Data Protection Notice for the safeguards we use for transfers out of the Designated Countries.

We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent, contract, and legitimate interests. Where we rely on your consent, you have the right to withdraw or decline it at any time, and where we rely on legitimate interests, you have the right to object.

We do not share personal data with third parties for their direct marketing purposes without your permission. We do not generally respond to "do not track" signals.

If you have questions or complaints regarding this Policy, contact our Privacy Team at [email protected]. If contacting us does not resolve your complaint, you have more options, including the right to lodge a complaint with your local data protection authority. Residents in the Designated Countries may also contact our Data Protection Officer and our EU Representative (see our GDPR & Data Protection Notice).