Security / Trust Center

Personal data protection

We process personal data in accordance with the GDPR. You will find the full scope of purposes, legal bases and processing periods in the Privacy Policy. Where the use of selected tools involves the transfer of data outside the European Economic Area, we apply the safeguards required by the GDPR, including standard contractual clauses.

Technical security measures

• Encryption of data in transit between your device and the Service (TLS) and protection of data stored in the talent.pl infrastructure.
• Access control to systems and data, limited to the people and processes for which it is necessary to provide the service.
• Regular updates and security reviews of the infrastructure and of the components used to generate and store AI Content.
• Logging of events relevant to security and compliance (including entries in the AI Passport register).

Payments and invoices

Payments are processed through external, licensed payment operators — talent.pl does not store your payment card details. Electronic invoices are issued for all plans, compliant with the logical structure required by the National e-Invoicing System (KSeF), where this obligation applies.

Incident response

In the event of a personal data breach, we take action in accordance with the requirements of the GDPR, including — where required — notifying the President of the Personal Data Protection Office within 72 hours of detecting the incident and, where justified, notifying the data subjects.

Reporting security vulnerabilities

If you have noticed a potential security vulnerability in the Service, please report it responsibly to contact@talent.pl, describing the finding and how to reproduce it. We ask that you do not disclose information about the vulnerability publicly until it has been fixed.

Recommendations for users

• Use a unique, strong password for your talent.pl account and do not share it with third parties.
• Verify the e-mail address assigned to your account — invoices and security notifications are sent to it.
• Report any suspected unauthorised access to your account without delay.