Privacy Policy

1. Who we are

Total Talent Source ("we," "us," or "our") operates this website, including The Advisor and its diagnostic report. If you have any question about this policy or your personal information, contact us at david@totaltalentsource.com.

2. What information we collect

When you use The Advisor to request a diagnostic report, we collect the information you voluntarily submit:

• Your selected business or executive-career path
• Your goal, timing, recent example, and implementation context
• Your company or professional website and the operating, career, ownership, impact, measurement, and readiness evidence you provide
• Any optional PDF or Word source document you choose to upload for analysis
• Full name, role or title, email address, and mobile number
• Your optional, separate choice about receiving marketing email

On our other public pages, we may also collect the information you submit through a contact, booking, purchase, or service form. Do not enter passwords, financial account numbers, health information, or other sensitive personal data into The Advisor.

3. Why we collect it (purpose and legal basis)

We use this information to respond in The Advisor, prepare and email the diagnostic report you request, create a customer relationship management record, and support personal follow-up about that request. The requested report is a service message. Marketing email is optional and is sent only when you select the separate marketing checkbox. You can withdraw that choice at any time. We do not use your data for automated decision-making that produces legal or similarly significant effects.

4. The Advisor (our AI chatbot) and AI-processed documents

The Advisor is an automated digital assistant, not a human being. It says so at the start of every conversation. Your answers and contact details are stored so we can prepare the requested report, preserve the evidence behind the finding, and support follow-up. A short customer relationship management note is stored separately from the bounded conversation transcript.

Relevant text may be sent to third-party AI service providers, including models accessed through OpenRouter, to prepare the report or support a response. Those providers process the information under their applicable service terms, privacy commitments, and our account configuration. We limit the information sent to what is needed for the requested function.

5. How we store and share your information

Your submitted answers are stored in our customer relationship management (CRM) system. Uploaded source documents, including resumes, LinkedIn exports, and relevant business documents, are stored securely with Cloudflare R2 file storage. Your completed finding and any related correspondence are sent to you via Resend, our transactional email provider. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

The service providers (subprocessors) who may process your data on our behalf are:

• Anthropic / OpenRouter: AI processing of chat and assessment content
• Resend: transactional email delivery
• Cloudflare R2: document and file storage
• Railway: application hosting and database
• Stripe: payment processing (only if you make a purchase)
• Google: calendar and scheduling integrations, where applicable
• TidyCal: appointment booking. Our booking links send you to TidyCal (tidycal.com), which collects the information you enter there under its own privacy policy

6. Do Not Sell or Share My Personal Information (CCPA)

We do not sell or share (as defined under the California Consumer Privacy Act, as amended by the CPRA) your personal information, and we never have. No action is required to opt out of a sale or share that does not occur.

7. Cookies and analytics

This site uses a Flask session cookie for administrator login and to keep The Advisor conversation, question progress, and completion record connected during a visit. The session cookie is necessary for those functions and is not used for advertising. Site analytics are provided by Umami, a cookieless analytics service that does not use advertising cookies or intentionally collect the contact details entered into The Advisor.

8. Data retention

We retain personal data for up to 24 months after your last interaction, unless a longer period is required by law, after which it is deleted or anonymized. Uploaded source documents are retained only as long as necessary to generate and support your finding. Conversations with The Advisor (our digital assistant) are stored as transcripts under the same retention schedule and can be deleted on request through the contact channel in Section 9.

9. Your privacy rights

We extend the following rights to all visitors as a courtesy, regardless of where you live:

• Know what personal information we have collected about you and request access to it
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Not be treated differently for exercising any of these rights

For California residents: as a California business, we follow the California Online Privacy Protection Act (CalOPPA). We honor Global Privacy Control (GPC) browser signals as an opt-out. As stated in Section 6, we do not sell or share your personal information, and we make that commitment voluntarily to every visitor.

To exercise any of these rights, email david@totaltalentsource.com with your request. We respond generally within 30 days. We may need to verify your identity before fulfilling a request.

10. International data transfers

Our service providers (CRM hosting, Cloudflare R2, our AI provider, and Resend) may process data in the United States or other countries. Where required, we rely on appropriate safeguards for any such transfer.

11. Children's privacy

This site is intended for working professionals and is not directed to children under 16. We do not knowingly collect personal information from children.

12. Data security and breach notification

We use reasonable technical and organizational measures to protect your information. If we become aware of a security incident affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

13. Changes to this policy

We review this policy at least annually and will update the date above whenever changes are made. Continued use of the site after an update constitutes acceptance of the revised policy.

14. Contact us

Questions, access requests, or deletion requests can be sent to david@totaltalentsource.com.