Privacy Policy
Effective date: July 24, 2026 • Operated by Talent Ocean from Bangladesh
This page is maintained by Talent Ocean to answer common security and privacy questions about Talent Ocean. It describes the controls we have enabled and the practices we follow. It is not a certification, audit report, or legal guarantee. Some features also depend on the choices creators make and the terms of third-party services they connect.
1. Information we collect
- Account information: email address, name, profile picture, and other details you add to your profile.
- Creator content: products, courses, posts, consultation slots, live sessions, Circle content, fan-gate rewards, and any media or text you upload.
- Transaction information: order details, payment status, and payout records. Payment card or banking details are processed by SSLCommerz; we do not store full card numbers.
- Usage data: pages visited, actions taken, and technical logs such as IP address and browser type, used for security and platform health.
- Communications: support messages, reports, and emails you send to us.
2. How we use your information
We use your information to provide and improve the platform, process orders and payments, deliver content to buyers, communicate with you, prevent fraud and abuse, and comply with legal obligations. We rely on the legal bases of contract performance, legitimate interests, consent, and legal compliance under Bangladesh law.
3. Who we share information with
We share information only when necessary: with a creator when you purchase their product or book their service; with payment providers to process transactions; with cloud hosting and authentication providers to run the platform; and with Google only when a creator has connected Google Calendar to generate meeting links. We do not sell personal information.
4. Security
We use Supabase for data storage with Row Level Security (RLS) enabled, HTTPS in transit, and access controls for our team. Payment processing is handled by SSLCommerz according to their security standards. Google Calendar tokens are encrypted at rest. No system is perfectly secure, so we encourage users to use strong passwords and report any suspected issues.
5. Data retention
We keep your information for as long as your account is active and for a reasonable period afterward to fulfill legal, financial, or operational needs. You can request deletion of your account and personal data by contacting us; some records may be retained where required by law.
6. Your rights
You can access, update, or delete much of your information directly in your account settings. You may also request a copy of your data, correction of inaccurate information, or deletion of your account by emailing us at info@talentocean.com. We will respond within a reasonable timeframe.
7. Cookies and tracking
We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or analytics cookies. You can manage cookie preferences through your browser settings.
8. Integrations and subprocessors
The platform relies on the following services: Supabase (database, authentication, and hosting); SSLCommerz (payment processing in Bangladesh); and Google (Calendar and Meet links only when a creator connects their Google account). Each service operates under its own terms and privacy policy.
9. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or the platform. We will post the updated version on this page with a new effective date. Significant changes will be communicated through the platform or by email.
10. Security contact and vulnerability reporting
If you discover a security issue or have a privacy concern, please contact us at info@talentocean.com. We review all reports and respond as quickly as possible.