Data deletion

This page explains how to request deletion (erasure) of your personal data from TalentFlow, including data linked to LinkedIn or Facebook / Meta connections. These instructions support:

• GDPR / UK GDPR — right to erasure (“right to be forgotten”) and withdrawal of consent
• India’s Digital Personal Data Protection Act, 2023 (DPDP Act) — Data Principal right to erasure and withdrawal of consent
• Platform requirements from Meta / LinkedIn for apps that access user data

Full details on collection and use are in our Privacy Policy.

1. Who controls the data?

• Your TalentFlow account & integrations: Gventure Technology is the controller / Data Fiduciary for your sign-in profile and OAuth tokens we store for connected channels.
• Candidate / hiring records in a company workspace: the employer workspace is typically the controller / Data Fiduciary. Gventure processes that data as a processor / Data Processor on their instructions. Candidate deletion may require coordination with that employer.

2. What you can request to delete

• Your TalentFlow user account and profile
• Workspace membership records tied to your email (subject to workspace admin rights)
• Connected integration tokens (LinkedIn / Meta OAuth credentials and related identifiers)
• Candidate or hiring records you control as a workspace admin (jobs, applications, media), where legally permitted
• Personal data processed solely on the basis of your consent, after you withdraw that consent (for example optional social posting integrations)

3. Legal grounds for erasure

3.1 GDPR / UK GDPR

You may request erasure where, for example:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other lawful basis
• You successfully object to processing based on legitimate interests
• The data was unlawfully processed
• Erasure is required to comply with a legal obligation

Erasure may be refused or limited where retention is still required (for example legal claims, compliance, or freedom of expression/information exceptions under GDPR Article 17(3)).

3.2 India — DPDP Act

As a Data Principal you may request erasure of personal data when:

• It is no longer necessary for the purpose for which it was processed
• You withdraw consent (for consent-based processing)
• Erasure is otherwise required under applicable law

We may retain data where the DPDP Act or other Indian law permits or requires retention (for example for legal compliance or specified legitimate uses).

4. How to request deletion

Option A — Email (available to everyone)

1. Send an email to privacy@gventure.net with subject line TalentFlow data deletion request.
2. Include: (1) the email address you used with TalentFlow or LinkedIn/Meta; (2) your full name; (3) your country/region (helps us apply GDPR or DPDP timelines); (4) whether you want (a) only social connection data removed, (b) full account deletion, or (c) candidate application data related to a specific employer (name the employer if known).
3. We will verify your identity (for example by confirming control of the email) before deleting data, to protect against unauthorized requests.

Option B — In product (signed-in users)

1. Sign in to TalentFlow → Integrations → disconnect LinkedIn / Facebook to revoke tokens immediately (withdraws consent for that integration going forward).
2. Workspace admins can remove team members under Settings. For full account erasure, still email privacy@gventure.net.

Option C — Candidates

1. Contact the employer who received your application (they usually control hiring records), and/or email privacy@gventure.net so we can route the request to the right workspace.

5. What happens after we receive a request

• Acknowledgement: within 7 days (sooner where practicable)
• Decision & action: we delete or irreversibly anonymize personal data within 30 days of a verified request, unless a lawful exception applies or we need more time to coordinate with an employer controller (we will tell you if so)
• Where GDPR requires a response within one month (extendable by two further months for complex requests), we will meet that deadline and inform you of any extension
• Encrypted social tokens are deleted when you disconnect or when erasure is completed
• Copies in backups are purged on the normal backup rotation schedule and are not restored into production for active use
• We will confirm completion by email to the address used in your request (where available)

6. Data we may retain

After erasure of your primary records, we may retain minimized data only where law or compelling legitimate needs require it, for example:

• Billing, tax, or accounting records
• Security, fraud-prevention, or audit logs
• Evidence needed to establish, exercise, or defend legal claims
• Records showing that we fulfilled a deletion request

Such data is limited to what is necessary, protected appropriately, and retained only as long as required.

7. Third-party platforms

Deleting data from TalentFlow does not automatically delete content already published on LinkedIn or Facebook (for example a job post that appeared on your profile). Remove those posts directly on the social platform if needed. You can also revoke TalentFlow’s access from LinkedIn/Meta’s own app permissions settings. Those platforms process data under their own policies.

8. Grievance redressal & complaints

• First contact: privacy@gventure.net
• EEA / UK: if unsatisfied, you may lodge a complaint with your supervisory authority (for example the UK Information Commissioner’s Office)
• India: if unsatisfied after our grievance process, you may escalate to the Data Protection Board of India as provided under the DPDP Act

9. Contact

privacy@gventure.net
Privacy Policy: /privacy
Gventure Technology — gventure.net