How CandiLyt handles personal data.

CandiLyt provides hiring decision support for teams that review CVs, shortlist candidates, prepare interviews, and keep hiring records. For customer-uploaded candidate data, the customer normally decides the hiring purpose and CandiLyt acts on the customer's instructions. For website leads and CandiLyt account data, CandiLyt is responsible for the handling described here.

• Contact details submitted through registration forms.
• Account details such as name, work email, company, and role.
• Candidate records uploaded by customers, including CV content, role criteria, interview feedback, and hiring status.
• Product activity needed for security, support, audit history, and service operation.

• To respond to product and access enquiries.
• To provide customer workspaces and hiring workflows.
• To help teams shortlist candidates and prepare interviews.
• To secure the service, prevent abuse, and support customers.
• To keep required records of actions, approvals, and changes.

When enabled and permitted through Cookie settings, Google Analytics and Google Ads receive public website measurement and browser/network information. Analytics and advertising choices are separate. Optional tags do not run on authentication, workspace, or admin pages. Our page events exclude URL queries, fragments, form values, and customer hiring content. You can withdraw permission in the public footer. See the cookie notice for storage, controls, and limits on removing data already sent.

Customers are responsible for having a proper hiring purpose and appropriate notice before uploading candidate data. CandiLyt does not make final hiring decisions and does not automatically reject candidates. Customers remain responsible for human review and fair hiring decisions.

CandiLyt's initial policy is not to use customer CVs, interview feedback, candidate history, or hiring records to train shared models.

CandiLyt may use carefully reviewed service providers to operate, secure, support, and improve the product. Providers are reviewed before receiving personal data, and customer data is shared only where needed to provide the service or meet legal and security obligations.

CandiLyt does not intend to keep personal data indefinitely by default. Website leads, account records, candidate records, audit logs, and backups will follow documented retention rules. Customers may request deletion or return of their data according to their agreement and applicable law.

Privacy requests can include access, correction, export, restriction, or deletion. Contact us at privacy@candilyt.com. If the request concerns candidate data uploaded by a customer, we may direct the request to that customer or help them respond.

We may update this policy as the product, vendors, or legal requirements change. Material updates will be reflected on this page.