Legal
Privacy Policy
How Tlntly handles personal data: what we collect and why, who processes it, how long we keep it, and your rights.
Effective October 29, 2026
Future Visuals B.V. took over the business of the eenmanszaak Future Visuals on 25 September 2026. It is now the provider of Tlntly.
Who we are
Future Visuals B.V. is a Dutch besloten vennootschap (private limited company), KvK 42176504, VAT NL870047577B01, Franz Lisztlaan 16, 2253 HL Voorschoten, the Netherlands. Its director is Holding Opus B.V. (KvK 42175360), represented by Rick van den Broek. Future Visuals B.V. took over the business of the eenmanszaak Future Visuals on 25 September 2026.
For account, organization, billing and usage data, Future Visuals B.V. decides how it is used: we are the controller. For candidate data that customers upload, the customer is the controller and we process the data on their behalf under our Data Processing Agreement.
Are you a candidate? Contact the recruiter who uploaded your data. If you can't reach them, contact us and we will help.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account: name, email and photo from your Google or LinkedIn sign-in | To give you an account and send service emails | Contract |
| Organization: members, roles, invitations, and work profiles (name, photo, work email, phone) | To run shared workspaces and seats | Contract; for invited colleagues, our legitimate interest in letting customers manage access |
| Billing: company name, address, VAT ID and invoices, through Stripe | To bill you and keep invoices | Contract; legal obligation (Dutch tax law) |
| Usage: AI credits, record counts, exports, and AI usage records without CV content | To apply plan limits and show usage | Contract |
| AI instructions you save | To apply them to AI tasks | Contract |
| Technical logs | To keep Tlntly secure, fix errors and investigate incidents | Legitimate interest |
| Signup attribution: UTM and referral cookies, linked to your account when you sign up (see the Cookie Policy) | To know which channels bring sign-ups | Consent, which you can withdraw in Cookie settings in the footer |
| Marketing emails | To send news you asked for | Consent; unsubscribe at any time |
Plausible counts website visits without cookies or personal data. You don't have to give us data, but without account and billing data we can't provide an account or a paid plan.
AI
AI features run on Google Gemini through Vertex AI in the EU. We never use your content, candidate data or AI outputs to train AI models, and neither does Google. Scores help recruiters decide; Tlntly itself takes no decisions about candidates.
Who we share data with
These providers process data for us, each under a data processing agreement:
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Google Cloud (Vertex AI) Google Cloud EMEA Limited (Ireland) | AI processing: parsing, scoring, tailoring, translation, letters, anonymization | CV and vacancy content, candidate data, AI prompts and outputs | EU (Vertex AI, EU multi-region) | Not needed |
| Neon (Databricks) Databricks, Inc. (USA) | Database hosting and backups | All customer data | EU (AWS Frankfurt, Germany) | Data stays in the EU; SCCs and EU-US Data Privacy Framework for support access |
| Amazon Web Services (S3) Amazon Web Services EMEA SARL (Luxembourg) | File storage | Uploaded files (CVs, photos, logos) and exports | EU (Ireland, eu-west-1) | Not needed |
| Vercel Vercel Inc. (USA) | Application hosting | Requests and responses passing through the app, technical logs | EU and USA | EU-US Data Privacy Framework and SCCs |
| Trigger.dev API Hero Ltd (United Kingdom) | Background job processing | Background job identifiers, statuses and technical logs, without CV content | USA (AWS, us-east-1) | UK adequacy decision; SCCs for onward transfers |
| Resend Resend, Inc. (USA) | Product and service emails | Names and email addresses of users and invitees, email content | EU (sending, Ireland) and USA | EU-US Data Privacy Framework and SCCs |
| Stripe Stripe Payments Europe, Limited (Ireland) | Payments, invoices and tax | Billing contact, company and payment details (no candidate data) | EU and USA | EU-US Data Privacy Framework and SCCs |
You also sign in through Google or LinkedIn, and Plausible counts website visits. We never sell personal data.
Outside the EU
Our database and files are stored in the EU, and AI runs in the EU. Some providers are US companies or process data in the USA: Neon (Databricks), Vercel, Trigger.dev, Resend and Stripe. For those transfers we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU's Standard Contractual Clauses. Trigger.dev is a UK company; the EU recognizes the UK's data protection as adequate.
How long we keep data
- Organization content (candidates, CVs, vacancies, scores and generated texts): until you delete it. When a paid subscription ends, we keep it for 12 months, email the owner 30 days before, and then delete it. The owner can ask for earlier deletion in Settings.
- Backups: deleted data leaves them within 35 days.
- Background jobs: Trigger.dev keeps job records for as long as we use it. Since 28 October 2026 they hold identifiers and logs, not CV content. We have asked Trigger.dev to delete older records.
- Technical logs: deleted automatically by our hosting providers after a short period.
- Your account: until you ask us to delete it; we do so within 30 days. Signup attribution stays with the account.
- Invoices and billing records: 7 years, as Dutch tax law requires.
Security
Data is encrypted in transit and at rest, and access is limited by role. Our Data Processing Agreement lists all security measures.
Your rights
You can ask to see, correct, delete or export your personal data, to limit its use, or object to it. Where we rely on consent, you can withdraw it at any time. We answer within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your country.
Candidates: send requests about data a recruiter uploaded to that recruiter. We help them answer.
Changes
We email you about material changes to this policy before they take effect.
Contact
For privacy questions and requests:
Future Visuals B.V., Franz Lisztlaan 16, 2253 HL Voorschoten, the Netherlands. KvK 42176504. VAT NL870047577B01. hello@tlntly.com