Privacy Policy

1. Overview

FitScore ("we", "us", "our") provides an AI-assisted candidate screening platform for recruiters and hiring teams. This policy explains what data we collect when you use FitScore, how it is used, and the choices you have. We built FitScore around a simple principle: your data stays in your hands. We do not sell it, we do not share it with advertisers, and we do not connect third-party marketing or tracking services to your account.

2. Data we collect

• Account data — name, email address, organization details, and authentication credentials.
• Candidate data — CVs/resumes, job descriptions, and any notes or attachments you upload to screen candidates.
• Usage data — pages visited, features used, and session events, collected through our self-hosted analytics (see §5).
• Support data — messages you send us when requesting help.

3. How we use your data

We use the data above strictly to operate the service: authenticating your account, storing and organizing the candidates and jobs you create, generating fit scores, sending account-related notifications, and improving the reliability of the product. We do not use your data for advertising and we do not build profiles for resale.

4. AI processing

To generate candidate fit scores, FitScore sends the relevant parts of uploaded CVs and job descriptions to OpenAI's large language model API for analysis. This is the only third party that processes candidate content, and it is used solely to produce the screening results you see in the app. OpenAI processes this data under its own API data-handling terms, which (per OpenAI's policy at the time of writing) exclude API content from being used to train their models.

5. Analytics

FitScore uses a self-hosted, privacy-respecting analytics service running on our own infrastructure (analytics.fitscorex.com) to understand product usage and improve the app. This data is not shared with, or processed by, any external analytics or advertising company — it stays entirely within systems we operate.

6. No third-party sharing

Other than the AI processing described in §4, we do not share, sell, or rent your data to third parties. We do not embed third-party advertising, marketing pixels, or cross-site trackers in FitScore.

7. Data retention

We retain account and candidate data for as long as your account is active, or as needed to provide the service. You may request deletion of your data at any time (see §9). We may retain limited records where required by law or for legitimate audit purposes.

8. Security

We use industry-standard safeguards, including encryption in transit, access controls, and audit logging, to protect your data against unauthorized access, alteration, or disclosure.

9. Your rights & GDPR requests

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. If you would like to exercise a data subject request, including a GDPR deletion request, please email gdpr@fitscorex.com and we will respond promptly.

10. Changes to this policy

We may update this policy from time to time. We will revise the "last updated" date above when we do, and material changes will be communicated to active account holders.

11. Contact

Questions about this policy can be sent to gdpr@fitscorex.com.