Privacy Policy

Simonara Talent Solutions will never sell personal information. We collect only the data we need to run the platform, generate matches, and honor your explicit choices about visibility and verification.

We collect information you provide directly and information generated by your use of the platform:

• Account information — name, email, role, company name, password (hashed with bcrypt).
• Talent Passport™ information — resume text and files, work history, skills, salary expectations, availability, and social links you supply.
• Employer information — company name, hiring briefs, roles, notes, team memberships.
• Usage data — pages visited, features used, and interactions with AI tools (used only to improve the product for you).
• Verification data — when you request a verification via Simonara Verify™, we collect the information necessary to run the specific check you authorized. Sensitive PII (SSN, DOB, doc numbers) is encrypted at rest.

• To operate the platform — authentication, session management, notifications.
• To generate AI features — matching, Hiring Briefs, resume review, coaching. These features are advisory only.
• To honor your visibility settings — your Passport is discoverable only when you enable it.
• To improve product quality, aggregated and anonymized where possible.
• To comply with legal obligations and to prevent fraud/abuse.

Simonara uses third-party AI providers (currently OpenAI GPT and Google Gemini models via Emergent's managed infrastructure) to power features like matching, Hiring Briefs, Resume Optimizer, and Career Coach. We send only the fields needed for the specific request (never your entire account), and we do not authorize the AI provider to train foundational models on your data.

We use a small set of first-party cookies to keep you signed in and to remember preferences. We use privacy-respecting analytics (PostHog) to understand product usage. You can disable cookies in your browser at any time; some features may not work without them.

We share information with third parties only in the following situations:

• With employers that you authorize — via your Talent Passport visibility settings or an explicit reach-out consent flow.
• With verification partners you consent to — solely to complete the specific check you requested.
• With payment processors — for subscription and verification purchases (Phase 2).
• When required by law or valid legal process.

• Passwords are hashed with bcrypt.
• Sensitive verification PII is encrypted at rest using AES/Fernet.
• Admin views expose only masked previews (last-4 SSN, year-only DOB, etc.).
• Any plaintext PII reveal requires elevated admin role, a written business justification, and is written to our immutable audit log.
• We track every sensitive event in a Compliance Console for SOC 2 auditors.

We retain account data while your account is active. When you delete your account, we remove your Passport from discovery and delete personally identifiable fields within 30 days, except where retention is required for tax, compliance, or fraud prevention. Verification results are retained only as long as the underlying account.

• Access and download your data at any time from Settings.
• Update or correct information in your Passport or company profile.
• Revoke consent for any verification type from the Simonara Verify™ page.
• Disable employer discovery from your Passport settings.
• Delete your account at any time.

Simonara is not directed to children under 16. We do not knowingly collect personal information from anyone under 16.

Simonara is based in California, USA. If you access the platform from outside the United States, you consent to the transfer and processing of your information in the United States, subject to the safeguards described in this policy.

Privacy questions or data requests? Contact us.