Privacy Policy

Last updated: July 22, 2026

AssessFit ("we", "us") provides psychometric and skills assessments that employers use to evaluate job candidates. This policy explains what we collect, why, and the rights you have. We act as a processor for candidate data (the employer who invited you is the controller) and as a controller for employer account data.

1. What we collect

• Employer accounts: name, work email, company details, billing records, and audit logs of account activity.
• Candidates: name and email (provided by the employer), assessment responses and scores, session telemetry used for fairness monitoring (tab switches, fullscreen state, response times), and — only when the employer enables camera proctoring and you consent — periodic webcam snapshots.
• Technical: IP address and browser type for security and rate limiting.

2. Why we process it

• To deliver and score assessments on the employer's instructions (contractual necessity).
• To protect test integrity and fairness for all candidates (legitimate interest, disclosed to you before you start).
• To operate, secure, and bill the service.
• To maintain anonymized statistics that keep test questions calibrated and fair. These cannot be traced back to you.

3. Automated processing & human review

Assessments are scored automatically, and proctoring signals are combined into an integrity score by an algorithm. AssessFit does not make hiring decisions. Results are delivered to human recruiters at the employer, who are responsible for any decision. See the Candidate Privacy & AI Disclosure for details required under automated employment-decision rules (e.g. NYC Local Law 144, EU AI Act).

4. Retention & deletion

• Employers choose a retention period (30 days – 2 years). After it, candidate records are automatically anonymized and responses deleted.
• Webcam snapshots are purged on a shorter schedule (7–180 days, employer-configured, 90 days default).
• Candidates can download all their data or erase it immediately at any time using the links on their assessment page — no email required.

5. Sharing

Candidate results are shared only with the employer who invited you. We use vetted subprocessors for hosting, email delivery, and payments (PayPal). We never sell personal data and never use candidate data for advertising.

6. Security

Data is encrypted in transit, access is logged in tamper-evident audit trails, invitation links are signed and expiring, and answer keys never leave our servers. Report security issues to security@assessfit.com.

7. Your rights

Depending on your location (GDPR, UK GDPR, CCPA, and similar laws) you may access, correct, export, delete, or object to processing of your personal data. Candidates can exercise access and erasure directly from their assessment page; for anything else contact privacy@assessfit.com or the employer that invited you.

8. Contact

AssessFit — privacy@assessfit.com. If you are unsatisfied with our response, you may lodge a complaint with your local data-protection authority.