In short
We collect what you give us when you create a Candfit account or email us, plus the basic technical data any website receives. We use it to run your account and your interviews, to answer you, and to keep Candfit working and secure. We don't sell it, we don't use advertising cookies, and you can ask to see or delete it at any time.
Invited to a Candfit interview? The candidate privacy and AI notice explains how your interview data is handled.
Who we are
Candfit is operated by Candfit LLC, 7567 Imperial Dr., Suite C501, Boca Raton, FL 33433 ("Candfit", "we", "us"). This policy explains how we handle personal data on candfit.com, in your Candfit client account at app.candfit.com, and when you email us.
It doesn't cover candidates' interview data. When a company uses Candfit to interview you, that company decides how your data is used, and we process it on its behalf. The candidate notice explains that in full.
What we collect
Information you give us
- When you create an account: your first and last name, work email, phone number and company, and your password or the Microsoft account you sign in with.
- When you use your account: the roles, job descriptions and candidate details you add. We handle candidate data as described in the candidate notice.
- When you email us: your message, your contact details and anything you attach.
Information collected automatically
- Technical data that our hosting and security providers record whenever anyone visits a website: your IP address, browser and device type, the pages you request, and when. Cloudflare, which protects and speeds up the site, also sees this data.
- [If you add analytics:] anonymous visit counts from [Cloudflare Web Analytics or Plausible], which works without cookies and doesn't identify you.
How we use it
| What we do | Legal basis in the EU and UK |
|---|---|
| Create and run your account, including your free first interview | Performing our agreement with you |
| Run the interviews you set up and send you the reports | Performing our agreement with you |
| Answer your emails | Our legitimate interest in answering business enquiries |
| Keep the site and your account working, secure and free of abuse | Our legitimate interest in running a safe service |
| Keep business and tax records | Legal obligation |
| Send you news about Candfit, only if you ask for it | Your consent, which you can withdraw at any time |
We never sell your personal data, and this website makes no decisions about you based solely on automated processing.
Who we share it with
We share personal data only with the service providers that help us run Candfit, under contracts that limit what they can do with it:
- Hostinger: website hosting
- Our cloud hosting provider: the platform behind your account
- Cloudflare: network security and delivery
- Microsoft: email, through Microsoft 365
- [Analytics provider, if used]
We may also share data with professional advisers such as lawyers and accountants, with authorities when the law requires it, and with a buyer or successor if Candfit's business is sold or merged. We don't sell personal data or share it for cross-context behavioral advertising.
International transfers
Our providers may process data in the United States and other countries. When personal data from the European Economic Area, the United Kingdom or Switzerland goes to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses, with the UK addendum, or the provider's certification under the EU-U.S. Data Privacy Framework. [Counsel to confirm the mechanism for each provider.]
How long we keep it
- Emails and enquiries: 2 years after our last contact, unless you become a client.
- Your account: while it's open. After you close it, we delete it within [90 days], except for the records below.
- Client records: for as long as we work together, then as long as the law requires for business and tax records.
- Server and security logs: kept by our providers for their standard periods, typically [up to 30 days].
Your rights
Depending on where you live, you may have the right to:
- see the personal data we hold about you and get a copy
- correct it
- delete it
- object to or restrict how we use it
- take it to another provider
- withdraw consent you've given, at any time
If you're in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority. If you live in California, you have the right to know, delete and correct personal information, and to opt out of its sale or sharing (we don't sell or share it), and we won't treat you differently for using these rights. Residents of other U.S. states with privacy laws have similar rights.
To use any of these rights, email info@candfit.com. We'll reply within one month, or 45 days for California requests, and we may need to confirm your identity first.
Security
We protect personal data with encryption in transit (HTTPS) and access limited to the people who need it[, plus the platform's safeguards for stored data, such as encryption at rest, once confirmed]. No method of sending or storing data is completely secure, but we work to protect yours, and we'll tell you and the authorities about a breach when the law requires it.
Children
Candfit is a service for businesses and isn't directed at children under 16. We don't knowingly collect their personal data.
Changes to this policy
We'll post any changes on this page and update the date at the top. If a change is significant and we have your email address, we'll tell you.
Contact us
Candfit LLC, 7567 Imperial Dr., Suite C501, Boca Raton, FL 33433. Email: info@candfit.com.
[If required: our EU and UK representatives under Article 27 of the GDPR, with their contact details.]