1. Who is responsible
TelarLabs Ltd (company number 17273713, Waterhouse Gardens, 1 Dutton Street, Manchester M3 1AJ, United Kingdom) is the controller for applicant data. Contact: connect@telarlabs.co.uk.
2. What we collect
| Stage | Data | Why |
|---|---|---|
| Application | Name, email address, the links and profile details you choose to share, a description of the automation you submit and the stack it runs on | To assess the application and schedule a session |
| Verification session | What you show and say during a reviewer-driven screen-share of your own build (demo or synthetic data only), your answers, your declaration of how you used AI, the reviewer’s notes, and the evidence our tooling collects – inputs tried, results, security and permission checks, and a version fingerprint of the build | To verify the work and record the basis for the decision |
| Outcome | Verification result, badge status, dates, any later expiry or revocation and the reason for it | To issue, maintain and, where needed, revoke the badge |
We do not take access to your repositories – the screen-share replaces it – and you must not show real client data: demo or synthetic data only. Verification sessions are not recorded; if we ever want to record one, for example to calibrate reviewers, we will ask you at the start of the session and you can decline without any effect on the outcome.
3. Why we may process it (lawful basis)
- To run the programme you applied to – taking steps at your request before, and then performing, the programme terms (UK GDPR Article 6(1)(b)).
- Our legitimate interest in keeping a trustworthy, tamper-evident record of verifications (Article 6(1)(f)) – see the ledger section below.
- Your consent for anything optional, such as listing a public profile or displaying details beyond the minimum badge – you can withdraw it at any time.
4. Automated tools and human decisions
AI tools collect evidence during a session and produce a pre-score. Every accept, and every revocation, is decided by a human reviewer. No decision with a legal or similarly significant effect on you is made solely by automated means. Using AI in your own work is welcome and is not held against you – only undisclosed misrepresentation is.
5. What becomes public
A badge is public by design. It shows the name or handle you chose, the verified build, its version fingerprint, the verification date and its current status (verified, expired, revoked). Work you choose to list is shown with its verification status – verified or unverified. Nothing is listed publicly without your action, and your email address and session evidence are never public.
6. The ledger and how long we keep data
The verification ledger is append-only: entries are never edited, and a revocation is a new entry rather than a deletion. That is what makes a badge worth trusting, so ledger entries persist for as long as the programme runs.
- If you ask us to erase your data, we remove your name, contact details and public profile and keep only the minimal ledger record – build fingerprint, outcome and dates – needed to keep the remaining entries verifiable, unless the law requires more.
- Application data for candidates who do not proceed to a session, or who withdraw, is deleted 12 months after the last contact.
- Reviewer notes and session evidence are kept while the badge is valid and for 12 months after it expires or is revoked, in case the decision is questioned.
7. Where the data is stored and who sees it
Applications and the ledger are stored in our verification system, hosted on Supabase (Supabase Pte. Ltd) in its Central EU region – AWS Frankfurt, Germany – under Supabase’s data-processing agreement. Email correspondence runs through our email provider, Hostinger (data held in the UK or EU). Data is seen by TelarLabs reviewers; if we ever engage an external reviewer, they work under a written confidentiality and data-processing agreement. We do not sell applicant data and do not use it for advertising.
8. Your rights
You have the rights described in our main privacy notice: access, rectification, erasure (subject to the ledger rule above), restriction, portability, objection, and withdrawal of consent. Email connect@telarlabs.co.uk; we respond within one month. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint or, if you are in the EU, to your local supervisory authority.
