Privacy Policy

Superteam Talent — operated by Lanista Talent Lab

Effective Date: 18 June 2026

1. Introduction

Superteam Talent ("we", "our", or "us") is operated by Lanista Talent Lab, registered in the United Arab Emirates (Meydan Grandstand, 6th Floor, Dubai, UAE). We are committed to protecting and respecting your privacy across all touchpoints — our website, talent platform, and recruitment services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to all users of our platform and services globally, including in the European Economic Area (EEA), the United Kingdom, the United States, and the UAE.

We process personal data in compliance with:

• The EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679)
• The UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
• The California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), where applicable
• Other applicable data protection laws in the jurisdictions where our users reside

Lanista Talent Lab is the Data Controller for all personal data processed through Superteam Talent.

2. Who We Are and What We Do

Superteam Talent is a community-powered recruiting agency specialising in talent identification and placement within the Solana and broader Web3 blockchain ecosystem. Our services include:

• Sourcing and placing candidates in permanent or contract roles with Web3 companies
• Maintaining a talent network for candidates actively seeking roles in the Solana ecosystem
• Supporting client companies ("Customers") with their hiring needs
• Operating a Scout programme that enables community members to refer talent
• Publishing talent spotlights and sourcing newsletters

Our platform operates at talent.superteam.fun, and our legal entity is:

3. Information We Collect

We collect personal data in the following ways:

3.1 Information You Provide Directly

When you register on our platform, submit a talent profile, apply for a role, sign up as a Scout, or contact us, you may provide:

• Full name, email address, phone number, and location (city, country, region, timezone)
• Professional summary, employment history, and years of experience
• Skills, desired job categories, and seniority level
• Compensation expectations (salary range, currency)
• Links to professional profiles: LinkedIn, GitHub, X/Twitter, Behance, Dribbble, Earn profile
• Telegram handle
• CV/resume files
• Proof of work, portfolio links, intro videos
• Availability status and work setup preferences
• Solana Wallet Address (used for Scout programme payouts and ecosystem verification)
• Superteam or Solana community membership and role
• Hackathon participations and wins
• Responses to application questions (motivation, why Solana, community connections)
• Consent checkbox: agreement to share data with hiring partners
• Newsletter subscription consent

3.2 Information We Collect Automatically

When you visit our website or platform, we automatically collect:

• Usage data via Google Analytics (pages visited, session duration, referral source, device type)
• URL tracking parameters used to attribute talent sourcing channels
• Browser type and operating system (anonymised)

3.3 Information From Third Parties

We may collect information about you from:

• LinkedIn, X/Twitter, GitHub, and other public professional networks
• Community platforms and partner organisations (e.g., Superteam, Solana DAOs)
• Scouts and referrers who provide your details to us with your prior knowledge
• Business partners supporting recruitment verification or sourcing

If we obtain your data from a third party, we will notify you within 30 days of collection, including the source and purpose.

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

Recruitment & Talent Matching

To match your profile against open roles, introduce you to client companies, and manage the recruitment pipeline. Legal basis: Legitimate Interests (GDPR Art. 6(1)(f)); Contractual Necessity where a service agreement exists.

Platform Services & Account Management

To operate your talent profile, process job applications, and manage your account on our platform. Legal basis: Contractual Necessity (GDPR Art. 6(1)(b)).

Scout Programme

To manage Scout registrations, track referrals, calculate SOL-based payouts, and operate the leaderboard. Wallet addresses are collected solely for this purpose. Legal basis: Contractual Necessity; Legitimate Interests.

Communications & Newsletter

To send you relevant job opportunities, industry updates, and talent spotlights (where you have subscribed). Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw consent at any time.

Analytics & Platform Improvement

To understand how our website is used and improve our services. Legal basis: Legitimate Interests; Consent where required by applicable cookie law.

Legal Compliance

To meet our obligations under applicable law, respond to legal requests, or protect our legal rights. Legal basis: Legal Obligation (GDPR Art. 6(1)(c)).

5. Special Categories of Data & Blockchain Identifiers

We do not intentionally collect special category data (e.g., health data, racial or ethnic origin) under GDPR Article 9.

Regarding Wallet Addresses:

• Solana wallet addresses are collected exclusively for Scout programme payouts and ecosystem verification.
• We treat wallet addresses as pseudonymous personal data that may be linked to an individual and protect them accordingly.
• Wallet addresses collected from talent profiles on the platform are used solely for ecosystem identification and are not used for financial transactions without explicit consent.
• We do not engage in on-chain data analysis or tracking of wallet transaction histories.

6. Cookies and Tracking Technologies

Our website uses the following tracking technologies:

• Google Analytics: Used to analyse website traffic, user behaviour, and referral sources. Data is anonymised where possible. Google acts as a data processor under a Data Processing Agreement.
• URL Tracking Parameters: Appended to links to attribute traffic sources (e.g., scout referrals, job postings, community campaigns). These are stored in your talent profile record.

You may adjust cookie settings in your browser preferences at any time. Where required by applicable law, we will request your consent before placing non-essential cookies.

We do not use advertising cookies, social media pixels, or retargeting technologies at this time.

7. Data Sharing and Third-Party Processors

We share personal data only where necessary for the purposes set out in this Policy. Recipients include:

7.1 Client Companies (Hiring Partners)

When we introduce you to a client for a specific role, we share relevant profile data (name, professional summary, skills, CV, professional links, and compensation expectations) with that client. We share only what is necessary and relevant for the specific role. You consent to this sharing when you tick the consent checkbox on our intake form.

7.2 Third-Party Technology Processors

We use the following third-party tools to operate our services. Each processes personal data only under our documented instructions:

• Airtable (Airtable Inc., USA): Our Applicant Tracking System and talent database. Stores talent profiles, pipeline data, job records, and Scout records.
• Notion (Notion Labs Inc., USA): Our operations hub used for internal documentation, job playbooks, and workflow management. May contain summarised candidate information.
• Vercel (Vercel Inc., USA): Our platform hosting infrastructure. Processes requests to talent.superteam.fun.
• OpenRouter (OpenRouter Inc., USA): AI routing infrastructure used for talent matching and profile normalisation. Processes candidate profile data to generate match scores and summaries.
• Google Analytics (Google LLC, USA): Website analytics. Processes anonymised usage data.

All processors are subject to data processing agreements. We ensure appropriate safeguards are in place for transfers outside the EEA, including Standard Contractual Clauses where required.

7.3 Other Disclosures

We may also share data with:

• Legal and compliance advisors, where necessary
• Law enforcement or regulatory authorities, where required by law
• Successor entities in the event of a business acquisition, merger, or restructuring — affected individuals will be notified

8. International Data Transfers

Superteam Talent is headquartered in the UAE and operates globally. Your data may be transferred to and processed in countries outside your home jurisdiction, including the USA.

For transfers from the EEA/UK, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all third-party processors

For transfers involving UAE residents, we comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Our guiding principles:

• Active Candidates: Retained for the duration of your engagement with Superteam Talent and for up to 3 years after your last interaction, to enable future matching.
• Placed Candidates: Retained for up to 6 years following a placement to meet contractual and legal obligations.
• Rejected or Inactive Profiles: Reviewed periodically. Profiles inactive for more than 3 years may be anonymised or archived unless there is a legitimate basis to retain them longer.
• Scout Records: Retained for the duration of your participation in the Scout programme and for up to 3 years after programme exit.
• Newsletter Subscribers: Retained until you unsubscribe or withdraw consent.
• Analytics Data: Anonymised usage data retained as configured in Google Analytics (default: 14 months).

We may archive, anonymise, or pseudonymise data rather than delete it outright, where we have a legitimate interest in retaining aggregated trend data.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

10.1 Rights Under GDPR (EEA / UK Users)

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data under certain conditions ("right to be forgotten").
• Restriction: Request that we limit how we use your data in specific circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Lodge a Complaint: File a complaint with your local supervisory authority (e.g., the ICO in the UK, the relevant DPA in your EU Member State).

10.2 Rights Under UAE PDPL

UAE residents have rights to access, correct, and request deletion of their personal data in accordance with UAE Federal Decree-Law No. 45 of 2021.

10.3 Rights Under CCPA / CPRA (California Residents)

California residents have the right to:

• Know what personal information is collected, used, disclosed, or sold
• Request deletion of personal information
• Opt out of the sale or sharing of personal information (we do not sell personal data)
• Non-discrimination for exercising your CCPA rights

To exercise any of your rights, contact us at: team.supertalents@gmail.com

We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

11. Automated Decision-Making and AI Processing

We use AI-assisted tools (via OpenRouter) to support talent matching, profile normalisation, and seniority evaluation. These tools generate match scores, candidate summaries, and job fit assessments.

These AI outputs are used to assist our recruiting team and are not the sole basis for any decision affecting you. All material decisions — including whether to introduce you to a client or progress your application — involve human review.

You have the right to request human review of any AI-assisted assessment that affects you. Contact us at team.supertalents@gmail.com to make such a request.

12. Newsletter and Marketing Communications

By submitting your email address via our newsletter subscription form, you consent to receiving updates about Solana job opportunities, talent spotlights, and ecosystem news.

You may unsubscribe at any time by following the unsubscribe link in any email we send, or by contacting us at team.supertalents@gmail.com.

We do not sell or share newsletter subscriber lists with third parties for marketing purposes.

13. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:

• Access controls limiting data access to authorised team members on a need-to-know basis
• Encryption of data in transit (SSL/TLS)
• Use of reputable, security-certified third-party processors
• Regular review of our data handling practices

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

14. Children's Privacy

Our platform and services are not directed at individuals under the age of 16 (or 18 where required by local law). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

15. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. We will post the updated policy at talent.superteam.fun/privacy and update the effective date. For material changes, we will notify you via email where possible.

We encourage you to review this Policy periodically.

16. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

We aim to respond to all legitimate requests within 30 days.