Privacy Policy

Psych-Fit ("we", "us") provides a candidate assessment platform that helps hiring organisations understand role fit across skills, cognitive ability, personality and motivation. This policy explains what information we collect, why we collect it, where it is stored and the rights you have over your data.

What information we collect

• Account details (employers): name, work email, company and authentication credentials.
• Candidate details: name, email, years of experience, salary expectation, self-reported skills and any notes you choose to share.
• CV uploads: the file you upload as part of an assessment.
• Cognitive assessment results: your answers to the reasoning questions and the resulting score.
• Personality assessment results: your answers to the Big-Five style items and the resulting trait scores.
• Motivation assessment results: your answers to the work-motivation items and the resulting motivation profile.
• Technical metadata: limited interaction data needed to keep the assessment fair (e.g. tab-focus events during the timed cognitive section).

Why we collect it

Candidate information is processed solely to generate role-fit insights for the hiring organisation that invited you to complete the assessment. Employer account data is processed to operate the service, authenticate you and provide support.

Where it is stored

All production data is stored in the European Union (Stockholm region) using managed cloud infrastructure. CV files are stored in a private, access-controlled storage bucket. All data is encrypted in transit using HTTPS/TLS.

Who can access it

Your assessment information is only shared with the hiring organisation that invited you. Employer accounts can only access candidates and roles belonging to their own organisation — this is enforced at the database layer through row-level security. Psych-Fit staff may access data only when strictly necessary to operate the service or respond to a support request.

How long it is retained

Candidate assessment data is retained for as long as the inviting organisation needs it for their recruitment process, or until you request deletion. Employer account data is retained while the account is active. We will delete or anonymise data sooner where required by law.

Your rights

Under applicable data protection law (including the GDPR) you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• object to or restrict processing;
• request a portable copy of your data;
• lodge a complaint with your local data protection authority.

Deletion requests

To request deletion of your candidate profile, assessment responses or uploaded CV, email privacy@psychfit.org from the address you used during the assessment. We will action verified requests within 30 days and confirm once complete.

Contact

For any privacy enquiry, contact privacy@psychfit.org.

See also our Terms of Service and Security overview.