1. Overview & Scope

Digital Asset Consultants, Inc. (doing business as "DACAISolution.com") and AiTalentSolution.com, Inc.(collectively "we," "our," or "us") respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:

• Visit our website at dacaisolution.com
• Use our AI-powered talent assessment and recruitment services
• Interact with our customer support or sales teams
• Engage with our digital agents and automation tools
• Participate in our consulting or professional services

By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to our data practices as described herein.

2. Definitions

3. Information We Collect

Identifiers

• Name, email address, phone number
• Professional contact information
• Account usernames and authentication credentials
• IP addresses and device identifiers

Account Data

• Registration information and profile details
• Account preferences and settings
• Subscription and service usage history

Payment Metadata

• Billing information and payment methods (processed by Stripe)
• Transaction history and invoices
• Tax information where required

Commercial Information

• Products or services purchased or considered
• Sales and customer support communications
• Marketing engagement and preferences

Usage & Analytics

• Website and application usage patterns
• Feature utilization and performance metrics
• Error logs and debugging information

Device/Network Information

• Browser type, version, and settings
• Operating system and device characteristics
• Network connection information

Professional/Education Data

• Resume and work history information
• Skills assessments and test results
• Educational background and certifications
• Professional references and recommendations

Inferences

• Skill level assessments and competency profiles
• Career recommendations and job matching insights
• Behavioral analysis and personality indicators

4. Sources of Information

Information You Provide

• Account registration and profile creation
• Assessment responses and uploaded documents
• Communications with our support team
• Survey responses and feedback

Automated Collection

• Cookies, web beacons, and similar technologies
• Server logs and analytics tools
• Application usage monitoring

Third-Party Providers

• Authentication providers (Google, LinkedIn, etc.)
• Payment processors and billing services
• Analytics and marketing platforms
• Professional networks and job boards (with your consent)

Public Sources

• Publicly available professional profiles
• Industry publications and directories
• Public records where legally permissible

5. How We Use Information

Service Delivery

• Provide talent assessment and recruitment services
• Process and analyze assessment responses
• Generate skill profiles and competency reports
• Facilitate job matching and candidate recommendations

Authentication & Security

• Verify user identity and manage account access
• Detect and prevent fraud, abuse, and security incidents
• Monitor for unauthorized access attempts

Communications

• Send service-related notifications and updates
• Provide customer support and technical assistance
• Send marketing communications (with consent)

Personalization

• Customize user experience and interface
• Provide personalized recommendations
• Remember user preferences and settings

Analytics & Research

• Analyze usage patterns and service performance
• Conduct research to improve our algorithms
• Generate aggregate statistics and insights

Compliance & Legal

• Comply with legal obligations and regulations
• Respond to legal requests and court orders
• Maintain records for audit and compliance purposes

6. Legal Bases (GDPR/UK GDPR)

If you are located in the European Union or United Kingdom, we process your personal information based on the following legal grounds:

Contract

Processing necessary for the performance of our service agreement with you, including account management, service delivery, and payment processing.

Legitimate Interests

Processing for our legitimate business interests, such as:

• Improving our services and user experience
• Ensuring security and preventing fraud
• Internal analytics and business intelligence
• Direct marketing to existing customers

Consent

Processing based on your explicit consent for:

• Marketing communications to prospects
• Optional data collection (e.g., demographic information)
• Cookies and tracking (where required by law)

Legal Obligation

Processing required to comply with applicable laws, such as:

• Tax and accounting requirements
• Data protection impact assessments
• Response to legal requests

7. Sharing & Disclosure

Service Providers/Processors

We share information with trusted service providers who assist us in operating our platform:

• Cloud hosting and infrastructure providers
• Payment processing and billing services
• Customer support and communication tools
• Analytics and monitoring services

Analytics Partners

• Google Analytics (anonymized data)
• Performance monitoring tools
• User experience research platforms

Professional Services

With your explicit consent, we may share assessment results with:

• Potential employers for recruitment purposes
• Professional development partners
• Educational institutions for certification programs

Legal and Compliance

• Law enforcement when required by valid legal process
• Regulatory authorities for compliance purposes
• Legal counsel for advice and representation

Corporate Transactions

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to appropriate confidentiality and data protection measures.

8. Subprocessors

We work with the following subprocessors to provide our services. All subprocessors are contractually bound by data processing agreements (DPAs) to maintain appropriate data protection standards:

This list is updated regularly. We will notify customers of any material changes to our subprocessor list.

9. Cookies & Tracking

We use cookies and similar technologies to enhance your experience and provide our services. You can manage your cookie preferences using the panel on the right side of this page.

Cookie Categories

10. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention practices are based on the following criteria:

Retention Periods

• Account Data: Retained while your account is active and for 3 years after closure
• Assessment Results: Retained for 7 years for quality assurance and compliance
• Payment Records: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until you opt out or for 2 years from last engagement
• Usage Analytics: Aggregated data retained indefinitely; individual data for 25 months
• Support Communications: Retained for 3 years for quality and training purposes

Legal Retention Requirements

Certain information may be retained longer to comply with legal obligations, including:

• Employment and recruitment records where required by law
• Financial records for tax and audit purposes
• Security incident logs for investigation and prevention

Deletion Process

When retention periods expire or you request deletion (where legally permissible), we securely delete or anonymize your information using industry-standard data destruction methods.

11. Security

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Technical Safeguards

• TLS 1.3 encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication for administrative access
• Regular security vulnerability assessments
• Automated intrusion detection and prevention

Administrative Controls

• Role-based access controls and principle of least privilege
• Background checks for employees with data access
• Regular security training and awareness programs
• Incident response and breach notification procedures

Physical Security

• Secure data centers with 24/7 monitoring
• Biometric access controls and surveillance
• Environmental controls and redundancy systems

12. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers:

EU/EEA Transfers

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for transfers to approved countries
• Binding Corporate Rules where applicable

UK Transfers

• International Data Transfer Agreement (IDTA)
• UK Addendum to Standard Contractual Clauses
• UK adequacy regulations

Regional Safeguards

We implement additional safeguards based on regional requirements and maintain regional data residency options where required by law or customer preference.

13. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

EU/UK Rights (GDPR/UK GDPR)

• Access: Request a copy of your personal information and details about our processing
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation of processing in specific situations
• Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw consent where processing is based on consent

California Rights (CPRA)

• Know/Access: Request disclosure of personal information collected and shared
• Delete: Request deletion of personal information
• Correct: Request correction of inaccurate personal information
• Opt-Out of Sale/Share: Opt out of sale or sharing for cross-context behavioral advertising
• Limit Sensitive PI: Limit use of sensitive personal information
• Non-Discrimination: Not receive discriminatory treatment for exercising rights

Other US State Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws have similar rights to those described above. Contact us to exercise your rights under applicable state laws.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to your request within the timeframes required by applicable law.

14. Automated Decision-Making & AI Disclosures

We use artificial intelligence and automated processing to enhance our services and provide insights:

AI-Powered Features

• Talent assessment scoring and skill evaluation algorithms
• Job matching and candidate recommendation systems
• Chatbots and virtual assistants for customer support
• Content personalization and user experience optimization
• Fraud detection and security monitoring

Human Oversight

While we use automated systems to assist in assessments and recommendations, significant decisions that affect you (such as final hiring decisions) typically involve human review. You have the right to:

• Request human review of automated decisions
• Understand the logic behind automated processing
• Challenge decisions and provide additional context
• Appeal assessments through our review process

15. Children's Privacy

Our services are not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can take appropriate action.

Teen Users (13-17)

For users between 13 and 17 years old, we recommend parental involvement in account creation and usage. We may require additional verification or parental consent for certain features or services.

16. Third-Party Links & Services

Our platform may contain links to third-party websites, applications, or services that are not owned or controlled by us. We are not responsible for the privacy practices of these external sites or services.

Third-Party Integrations

• Social media platforms for authentication or sharing
• Professional networks for profile importing
• Job boards and career platforms
• Educational institutions and certification providers

When you interact with these third-party services, their own privacy policies apply. We encourage you to review the privacy policies of any third-party services you use in connection with our platform.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you by email if you have an account with us
• Post a notice on our website for 30 days
• Obtain consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For urgent privacy matters, please email kyleh@aitalentsolution.com with "URGENT" in the subject line. We will respond to privacy inquiries within 30 days or as required by applicable law.

19. Jurisdiction-Specific Notices

California Residents

Under the California Consumer Privacy Act (CPRA), California residents have specific rights detailed in Section 13 above. In the preceding 12 months, we have collected the categories of personal information described in Section 3 for the business purposes outlined in Section 5.

Categories of Sources: As described in Section 4
Categories Shared: Identifiers, commercial information, and usage data with service providers
Sale/Sharing: We do not sell personal information as defined by the CPRA

EU/EEA Residents

Under the General Data Protection Regulation (GDPR), you have the rights outlined in Section 13. Our legal basis for processing is detailed in Section 6. You may lodge a complaint with your local supervisory authority if you believe our processing violates GDPR.

UK Residents

Under UK GDPR and the Data Protection Act 2018, you have similar rights to EU residents. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Canadian Residents

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial privacy laws. You may file a complaint with the Privacy Commissioner of Canada if you believe our practices violate applicable law.

Australian Residents

We comply with the Privacy Act 1988 and Australian Privacy Principles. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.