Privacy policy
How TalentBridge International Inc. collects, uses, shares, and protects personal data on Ploy HR.
Effective August 19, 2026
Draft pending legal review. This document is a working draft prepared for review and is not yet a binding agreement. It must be reviewed and approved by qualified counsel, and the bracketed placeholders completed, before Ploy HR accepts live users.
1. Scope
This policy covers personal data processed by TalentBridge International Inc. through Ploy HR. Where a corporate partner or training center uses the Platform to manage its own staff or learners, that organisation is the controller of those records and we act as its processor.
2. Data we collect
- Account data — name, email, password hash, role, and organisation.
- Profile and career data — CV content, work history, education, skills, portfolio and project material, and uploaded documents.
- Assessment data — responses, generated talent scores and level bands, course enrolments, progress, and certificates.
- HR records — where an employer uses the HR modules: attendance, leave, claims, payroll figures, benefits, evaluations, and related approvals.
- Transaction data — credit purchases, subscriptions, and unlock history. Card details are handled by our payment provider and are not stored by us.
- Technical data — IP address, device and browser information, and error diagnostics.
3. How we use data
We use personal data to operate accounts and authentication; to generate talent scores and course recommendations; to present anonymised candidate profiles to corporate partners and to release contact details on a paid unlock; to deliver courses and issue verifiable certificates; to run the HR modules on an employer’s behalf; to process payments; to secure the Platform and investigate abuse; and to meet legal obligations.
4. Automated processing and AI
Talent scores, level bands, CV parsing, and course recommendations are produced with automated systems, including a third-party AI provider. Content you submit for these features is sent to that provider for processing.
These outputs are decision support, not automated decisions with legal effect: an organisation’s hiring and personnel decisions are made by that organisation, not by the Platform. You may request an explanation of how a score was produced and may contest an output by contacting [email protected].
[LEGAL: if any customer configures the Platform so a score alone gates an outcome, that becomes automated decision-making under GDPR Art. 22 and equivalent laws, and requires its own lawful basis, safeguards, and a human-review route. Confirm before go-live.]
5. Legal bases
[LEGAL: map each processing purpose above to a lawful basis — contract, legitimate interests, consent, or legal obligation — for every jurisdiction served, and record the legitimate-interests assessments. Cambodia, the wider ASEAN markets, and any EU/UK data subjects each need confirming.]
6. Sharing
- Corporate partners — anonymised profiles, and identifying contact details only after a paid unlock.
- Training centers — enrolment and progress data for their own learners.
- Service providers — payment processing, AI processing, email delivery, error monitoring, and hosting, each under contract and limited to what the service requires.
- Legal and safety — where required by law or to protect rights, safety, and platform integrity.
We do not sell personal data.
7. International transfers
Ploy HR supports cross-border placement across Southeast Asia, so personal data may be transferred to and processed in countries other than your own, including by the service providers above.
[LEGAL: identify the destination countries and put an appropriate transfer mechanism in place before go-live.]
8. Retention
We keep personal data for as long as an account is active and thereafter only as needed for the purposes it was collected for, including legal, accounting, and dispute-resolution requirements. Certificate verification records are retained so issued certificates remain checkable.
[LEGAL: set and document concrete retention periods per data category.]
9. Security
Access is authenticated and scoped by role and organisation, so one organisation cannot read another’s records. Passwords are stored hashed, traffic is encrypted in transit, and access to production data is restricted. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your rights
Subject to local law, you may request access to your data, correction, deletion, a portable copy, restriction of or objection to processing, and withdrawal of consent where consent is the basis. Contact [email protected]. Where an employer or training center is the controller of the records, we will refer your request to that organisation.
11. Cookies
We use cookies that are necessary to sign you in and keep your session secure. Any analytics or non-essential cookies will be described here and, where required, requested by consent.
12. Children
The Platform is not directed to anyone under 18 and we do not knowingly collect their data.
13. Changes and contact
We will post updates to this policy here and, for material changes, notify you through the Platform or by email. Questions, requests, and complaints can be sent to [email protected], or by post to TalentBridge International Inc., 100 Innovation Way, Suite 400, Dover, DE 19901, USA.