Where your record goes, and when it disappears.
You are being asked to send a complete account of your career to a company you have not met. The least we owe you is the whole journey, in order, including the parts that are not flattering.
Upload, read, deliver, delete.
Each stage has a stated limit. Where a limit is a weakness, it is stated as one.
A single-use link, not an attachment
Your record reaches us over a link signed with HMAC-SHA256 and valid for fourteen days. It is single-use. Transport is TLS 1.2 or TLS 1.3 only — older protocols are refused rather than downgraded to.
Why it matters: an emailed CV lives in two mailboxes, two sent folders and an unknown number of backups, none of which you control.
One named person opens it
No parser, no scoring engine and no language model reads your file. That is a design decision, not an omission, and it is why the audit takes a few working days rather than a few seconds.
Your materials are confidential to the CareerOS delivery team and are never shared with employers or recruiters. We are not a recruiter and we take no fee from one.
Three pages of written prose
The audit is delivered as written prose — roughly 2,586 words on the published sample — not as a dashboard or a score card. Delivered files are retained for twelve months so you can ask for them again.
If you engage further, deliverables ship as DOCX, PDF, XLSX and PPTX. Yours to keep, with no platform to stay subscribed to.
Deletion you do not have to request
Uploaded documents are deleted thirty days after the audit is delivered. Automatically. You do not have to ask, and there is no retention setting buried in an account page.
You can also exercise your rights directly at any time: [email protected] for a data request, [email protected] if the answer is not good enough.
What we do not hold.
Published because you would find out eventually, and finding out later is worse than reading it now.
Not encrypted at rest
Our disks are not encrypted at rest. Transport is encrypted; storage is not. If that is disqualifying for your situation, it should be, and you should not send us anything.
No ISO 27001
We do not hold the certification. We would rather say so than imply a standard we have not been audited against.
No SOC 2
We do not hold an attestation. The controls described above are what exists, and they are what we will be held to.
Why this page exists at all. A senior person deciding whether to hand over a career record is running a risk assessment, and a page of badges is not an input to it. An accurate list of what we hold and what we do not is.
A registered company, with a named officer.
CVPRO CareerOS 360 is a service of TALPRO INDIA PRIVATE LIMITED, Bengaluru, India.
Entity
TALPRO INDIA PRIVATE LIMITED · CIN U74999KA2020PTC135946 · Bengaluru, Karnataka, India. Governing law is Bengaluru, Karnataka, India.
Data requests
[email protected]. Your rights and the four separate consents are set out in full in the privacy policy.
Grievances
[email protected] reaches a named Grievance Officer. Legal notices go to [email protected].