Privacy Policy
Effective October 23, 2026 · Version 2026-10-23
M.K. Services Inc., operating as Valiant · 76 Kentland Crest, North York, Ontario, Canada, M2M 2X6
Privacy, support, complaints, and legal notices: [email protected]
1. Scope and responsibility
M.K. Services Inc., operating as Valiant, is responsible for personal information we handle for our accounts, platform operation, Marketplace, security, and support. This policy covers valiantapp.net and Valiant-operated connected services, including the Job Portal, employers and candidates, expert and learner profiles, AI-assisted interviews, verification, consultations, and payments. Our privacy contact is [email protected] at the postal address above.
When an employer determines why and how candidate information is used for recruitment, it is responsible for that recruitment processing and may act as an independent controller. Valiant may process application and interview information on its instructions under the applicable service agreement, while remaining responsible for our own account and platform purposes. The allocation depends on the actual activity, not solely on a contractual label. Contact the employer about its hiring decisions and retained application copies; contact us for Valiant's processing or help identifying the responsible organization.
Acknowledging this policy confirms that you have been given the notice. It is not blanket consent to every processing activity, a waiver of rights, or permission to record, train AI models, infer sensitive traits, or send marketing. Feature-specific notices and valid consent or another applicable lawful basis are required where appropriate.
2. Information we collect and where it comes from
Account and identity information: name, email, password authentication records, connected Google or LinkedIn account identifiers and information you authorize those providers to share, profile image, roles, organization membership, and verification status. If you use passkeys, authentication uses public-key credentials; your device's fingerprint or face unlock information is not sent to Valiant as part of passkey authentication.
Profile and recruitment information: resume contents and file metadata; education, experience, skills, links, location and time zone, professional qualifications, expert rates and availability; employer details, job postings, application answers, application status, hiring-team activity, and communications. Information comes from you, your authorized team, an employer handling your application, and services you choose to connect. Public expert profiles and job postings can be viewed by visitors and indexed or copied by others; applications and interview transcripts are not public listings.
Interview and verification information: live camera and microphone streams when you participate, conversation identifiers, interview start/end times and duration, transcripts, responses, interview-related materials and assessments, errors, and records of specific consent. Processing and storage depend on the interview feature and the notice you receive before starting. A video stream contains your appearance and voice; it is not automatically a biometric identity template. Creating an identity template or performing other regulated biometric analysis requires its own lawful basis and notices and is not authorized by ordinary account acceptance.
Booking and transaction information: participants, topic, scheduled and actual session times, attendance and connection events, extensions, cancellations, rates, fee and discount snapshots, invoices, payment status, refunds, disputes, Stripe customer and connected-account identifiers, and limited payment-method details such as brand and last digits. Stripe collects payment credentials, identity verification and banking details directly as required for its services. We do not store complete card numbers or security codes.
Technical, support, and legal records: IP addresses, browser/device and user-agent information, session and security logs, request and integration events, support messages, bug reports and optional attachments, evidence submitted in disputes, terms and privacy versions accepted and their server timestamps. Optional browser analytics collect product interactions and page usage only if you enable them. Avoid sending passwords, card details, unnecessary health data, government identifiers, or other people's confidential information in forms, interviews, or support messages.
3. Purposes and lawful grounds
We use information to create and secure accounts, provide authentication, publish information you choose to make public, process applications for their intended employer, conduct a consented interview, arrange and deliver consultations, calculate disclosed prices and earnings, process payments and refunds, send service communications, and answer support requests. Where the GDPR or UK GDPR applies, contract necessity supports processing objectively necessary to provide the service you request; steps requested before a contract can also apply.
We use necessary security, fraud, misuse, incident, and dispute information to protect users and the service, establish or defend legal claims, and meet regulatory, accounting, tax, sanctions, and payment obligations. Where applicable, the grounds are our legitimate interests in secure and reliable service and fraud prevention, balanced against individual rights, or a specific legal obligation. Employers must independently identify a lawful ground for recruitment; an employment opportunity does not automatically make all processing necessary for Valiant's contract with a candidate.
We seek consent where required for optional analytics, AI interviews, sensitive processing, recording, or a new purpose incompatible with the original purpose. You can withdraw consent prospectively without affecting processing already lawfully performed. A required service cannot be delivered without information objectively needed for it; if you decline an AI interview, contact support and the employer about an accessible or human alternative. Withdrawal does not remove retention required by law or automatically erase employer-held records.
We do not use the license to your content as permission to train general-purpose AI models or commercially reuse your face or voice. Any materially different optional use requires a separate lawful basis and any necessary specific consent. We do not sell personal information or share it for cross-context behavioral advertising, and do not operate targeted advertising through the platform.
4. AI processing, evaluations, matching, and human review
Depending on the feature used, AI may parse resume information, ask role-focused interview questions, convert speech into text, summarize responses, or assist with verification, candidate matching, scoring, or ranking. Inputs can include your submitted qualifications, application answers, interview transcript, and the employer's job criteria. The output can influence which materials a hiring team reviews and its assessment of an application; it is not proof of ability, identity, or suitability. Features apply only to the workflow you use and any specific notice provided for it.
AI may misunderstand speech, accents, disabilities, context, or qualifications and may generate incorrect or biased results. Employers must check relevant source information, provide meaningful human oversight, and comply with discrimination, accessibility, employment, and automated-decision rules. We do not authorize employers to use these services for unlawful solely automated significant decisions or prohibited emotion or sensitive-trait inference. An acknowledgment of this policy does not establish an exception to those rules.
You can request information about the processing relevant to your application, correct inaccurate inputs, explain your circumstances, contest an assessment, or ask for meaningful human review by contacting support and the employer. We may need to verify your identity and identify the employer and application. We provide information and assistance subject to applicable rights, others' privacy, and lawful confidentiality restrictions. The employer remains responsible for explaining and reviewing its hiring decisions.
5. Live video, transcripts, recording, and sensitive data
A Tavus AI interview processes live video and voice to hold the conversation and provides transcripts and related results for the application workflow. Before starting, you receive a specific interview notice and consent choice identifying this use and sharing with the employer's hiring team. Camera/microphone permission is a separate device control. Transcripts may contain sensitive information you voluntarily disclose; keep responses relevant and avoid unnecessary sensitive details.
Marketplace calls use Daily for live audio and video transport; Valiant disables Marketplace recording. Session timing, attendance, connection, and billing events can still be retained. Participants must obtain required advance permissions before making their own recordings or transcripts. We cannot technically control every participant's device; report suspected unauthorized recording or redistribution to support.
We do not treat this policy as consent to biometric identification, voice cloning, facial identity templates, emotion inference, or secondary commercial use of recordings. Any service that requires additional recording or regulated sensitive processing must supply the specific purposes, recipients, retention, lawful basis, and legally required affirmative choices before that processing. Do not include another person in an interview or call without their knowledge and any required permission.
8. International processing and transfers
Valiant is based in Canada. Our providers and authorized recipients may process information in Canada, the United States, and other countries where their operations and subprocessors are located. Information processed abroad may be accessible to foreign courts, law enforcement, or regulators under local law, and legal protections may differ from those in your country. Contact support for details relevant to your service and applicable safeguards.
Where required, transfers must use a valid mechanism, such as an applicable adequacy decision, European Commission standard contractual clauses with necessary supplementary measures, a UK addendum or International Data Transfer Agreement, or another lawful mechanism. Canadian accountability duties continue when processing is outsourced. Quebec and other regional laws may require assessments and additional contractual measures. This notice is not itself a transfer mechanism or a blanket consent exemption.
Country-specific localization, sensitive-data, government access, and transfer restrictions must be assessed for the actual country and service. UAE federal, DIFC, and ADGM regimes are distinct; Saudi Arabian, Qatari, and other Middle Eastern requirements are not interchangeable. Nothing here represents that a single Canadian arrangement satisfies every jurisdiction or that all regions are supported.
9. Retention, deletion, and account closure
We retain account and profile information while needed to maintain your account and the service you request. Applications, interview transcripts, assessments, and hiring records are kept for the recruitment purpose and the applicable employer's instructions and lawful retention obligations. Booking, payment, invoice, refund, and dispute records are retained as needed for accounting, tax, payment-provider requirements, claims, and legal obligations. Security logs and support evidence are kept only as needed for security, support, and resolution of the relevant matter. Consent records retain the versions and date needed to demonstrate the agreement and address claims.
Retention depends on the data category, service, applicable statutory periods, active disputes, legal holds, and employer instructions. We do not promise a single deletion period for all countries and records. Contact support for the period or criteria applicable to a particular record. When information is no longer necessary, it should be deleted or irreversibly anonymized under the applicable process; legal holds and required records take priority over ordinary deletion.
Request deletion or closure at [email protected]. We verify requests and assess what can be erased, restricted, or retained, explain any lawful exception, and respond within the applicable legal deadline. Closing an account does not automatically delete an employer's independent copy, a completed financial record, or information another user lawfully retains. Backups and provider copies may require their normal expiry or deletion process and remain subject to access restrictions. Deletion is not represented as instantaneous removal from every backup or third party.
10. Your privacy rights and how to use them
Depending on applicable law, you may request confirmation of processing; access and a copy; correction; deletion; restriction; portability; objection to processing based on legitimate interests or direct marketing; withdrawal of consent; information about significant automated decisions; or human review and an opportunity to contest them. These rights have legal conditions and exceptions. You can use available account controls or email [email protected] with the request and enough detail to locate your records, such as your account email and application or booking reference. Do not email passwords or complete identity documents unless specifically requested through an appropriate secure process.
We take proportionate steps to verify your identity and an authorized representative's authority, ask for clarification when needed, and provide the response or explain a lawful refusal or extension within the applicable statutory deadline. Requests are generally free; any lawful fee or refusal for an excessive or manifestly unfounded request will be explained. We do not penalize you for exercising legal rights, though a feature requiring deleted information may no longer work. For employer-controlled information, we may direct the request to that employer or assist it as legally required.
Canadian users may raise concerns with the Office of the Privacy Commissioner of Canada or the applicable provincial commissioner. EU/EEA users may complain to their competent data protection authority, and UK users to the Information Commissioner's Office. US users have applicable state access, correction, deletion, portability, opt-out, authorized-agent, and appeal rights where those laws apply; send an appeal to support with the earlier decision and grounds for review, without limiting recourse to the relevant state authority. Users in other jurisdictions may contact their competent privacy regulator. You do not need our permission to contact an authority.
11. Security and incident handling
We use authentication, role and organization access controls, and service-provider security measures to protect information. Access is limited to authorized purposes. No internet service or transmission can be guaranteed completely secure. Use strong credentials, protect your devices, and promptly report suspected unauthorized access, a leaked interview link, or an incorrect data disclosure to support.
We investigate security incidents and provide notifications to individuals, organizations, and regulators where required by applicable law. We do not promise that a contractual disclaimer overrides security, breach notification, or accountability duties.
12. Children and sensitive information
Valiant is intended for adults aged 18 and over. Do not create an account or submit a child's information if you are under 18 or do not have lawful authority. If you believe a child has supplied information, contact support so we can investigate and take the appropriate protective or deletion action. An age statement is not permission to collect children's information without required safeguards.
We do not ask candidates to disclose protected characteristics, health, religion, political views, precise biometric identifiers, or other special-category information for ordinary recruitment. A voluntary disclosure does not authorize discriminatory use or unrestricted sensitive-data processing. Contact support about redaction or correction if you accidentally disclose unnecessary sensitive information.
13. Communications and external sites
We send essential account, verification, security, application, booking, payment, and support messages needed for your requested service. These are distinct from optional promotional messages. Any marketing requires the applicable lawful basis and a way to unsubscribe; general account acceptance is not marketing consent. You can contact support about communication preferences without losing access to required legal notices.
External links and independent employer, expert, login, or payment-provider services have their own privacy practices. Review their notices before sharing additional information. We remain accountable for processing we control and cannot use a third-party link to remove duties that apply to us.
14. Updates and privacy contact
The effective date and version appear above. We notify users of material changes as required and record the current terms and privacy policy versions and the time of affirmative acceptance. Re-acknowledgment is distinct from a new specific consent required for an additional data use. Material changes do not retroactively authorize unrelated processing of information collected under an earlier notice.
For privacy questions, processor or transfer information, access and deletion requests, complaints, or an accessible copy of this policy, contact our designated privacy contact at [email protected] or M.K. Services Inc., operating as Valiant, 76 Kentland Crest, North York, Ontario, Canada, M2M 2X6. Identify the service and country relevant to your question so we can apply the appropriate requirements.