Privacy Policy

This policy explains what personal data TCS Insights ("we", "us") collects through the Talent Advisory platform at advisory.tcsinsights.com, why we collect it, who we share it with, and the choices you have. It covers the assessment, dashboard, education, and advisory features, and the marketing site.

Who we are

TCS Insights provides talent advisory assessments and development tools to organisations and their teams. For data you enter as part of an employer's team, that employer is generally the data controller and we act as their processor; for the marketing site and individual assessments, we are the controller. Questions can go to hello@tcsinsights.com.

Information we collect

• Account details: your name, email address, and a password (passwords are handled by Firebase Authentication; we never see or store them in plain text).
• Team and role: the team and organisation you belong to, your role (member or manager), and your invitation status.
• Assessment responses and results: your answers and computed scores for the maturity, persona, and capability/team assessments.
• Education progress: which learning attributes are assigned to you, your challenge progress, written reflections, and any files you upload as challenge findings.
• Alignment boards and best practices: content you create to plan and share what worked.
• Talent Advisor chat: messages you send to the in-app AI advisor and its replies.
• Payment information: if you purchase a plan, payment is processed by Stripe. We receive the outcome and subscription status, not your full card number.
• Marketing and diagnostic submissions: details you provide in public lead-capture or diagnostic forms (such as name, email, and your answers).
• Technical data: basic information needed to run and secure the service, including device/browser data and anti-abuse signals from Google reCAPTCHA (via Firebase App Check).

How we use your data

• To provide the platform: run assessments, show your results, track education, and power the dashboard your manager sees.
• To send service email through Resend: invitations, reminders you or your manager trigger, and a manager's completion digest.
• To produce anonymised, aggregate benchmarks. Individual client teams are only folded into a published benchmark once enough distinct teams are present that no single team can be identified.
• To take payment and manage subscriptions, via Stripe.
• To answer your questions to the Talent Advisor, via Anthropic's Claude API.
• To keep the service secure and prevent abuse.

Legal bases

Where UK/EU data protection law applies, we rely on: performance of a contract (to provide the service you or your employer signed up for); legitimate interests (to secure the service and produce anonymised benchmarks); consent (for optional marketing submissions); and legal obligation (for records such as payments).

Who we share it with

We do not sell your data. We share it with the service providers below, only as needed to run the platform. Your results are visible to you, to your team's manager, and to our administrators; other team members see individual results only if your manager chooses to release them.

Provider	Purpose	Data involved
Google Firebase (Google Cloud)	Hosting, authentication, database, file storage, and server functions	All account and platform data
Resend	Sending service email	Recipient name and email, message content
Stripe	Payment processing	Billing and payment details you enter with Stripe
Anthropic (Claude API)	The Talent Advisor AI feature	Your chat messages and relevant team context
Google reCAPTCHA	Abuse prevention (App Check)	Technical and device signals

These providers process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

• Account, team, assessment, and education data: kept while your account or team is active, and deleted on request or when the account or team is closed.
• Talent Advisor chat history: automatically deleted after 90 days.
• Anonymised benchmark statistics: retained indefinitely, as they contain no identifying information.

How we protect it

Data is encrypted in transit. Access is controlled by database security rules that limit each person to their own data and their team, with manager and administrator access scoped accordingly. Requests to the platform are attested with Firebase App Check to limit automated abuse. Passwords are managed by Firebase Authentication.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or object to our use of your personal data, and to withdraw consent. To exercise any of these, email hello@tcsinsights.com. If your data was entered through an employer's team, we may direct your request to that employer as the controller. You may also complain to your local data protection authority.

Cookies and local storage

We use only the storage needed to run the service: a sign-in session from Firebase Authentication, small preferences saved in your browser (such as a remembered team selection), and Google reCAPTCHA for abuse prevention. We do not use advertising cookies.

Children

The platform is for workplace use by adults and is not directed to children under 16.

Changes

We may update this policy as the platform evolves. Material changes will be reflected by the "last updated" date above.

Contact

TCS Insights · hello@tcsinsights.com