Privacy in the product

Full Privacy Policy

The binding policy is at /privacy. Effective date: 15 October 2026. If anything here conflicts with that page, the Privacy Policy wins. Questions go to admin@fydell.com.

What is collected

• Employers. Name, work email, company name, roles and Simulations in a Hiring Workspace, notes and decisions the team records.
• Engineers. Account email, Engineering Passport details and photo they add, projects they choose to import (GitHub, GitLab, upload, desktop, or CLI), applications and submissions, optional AI-session capture when they start a session, and Simulation activity such as files opened, tests run, and prompts to the built-in assistant.
• Everyone. Sign-in records, plus IP and request details the host keeps for security.

Who is responsible

Fydell is responsible for engineer accounts, Engineering Passports, and projects engineers add. When an employer invites someone to a Simulation or reviews an application, that employer decides how hiring data is used and Fydell processes it on the employer's behalf. Questions about a specific hiring decision go to the employer; Fydell helps them answer.

Data is collected to run Simulations and Hiring Workspace reviews people sign up for, to show engineers their own Engineering Passport and Builder Reports, and to keep accounts secure. It is not sold or shared for advertising and not used to target ads. Fydell does not use your code or capture sessions to train its own models.

Legal bases

• Contract. Providing the service you signed up for: account, Engineering Passport projects, Builder Reports, applications, and Simulations.
• Legitimate interests. Keeping accounts and the platform secure, preventing abuse, and fixing faults. These never override your rights.
• Consent. Optional things you choose to add or share, such as social profile links and share links. You can remove them at any time.
• Legal obligations. Records the law requires Fydell or an employer to keep.

AI and automation

Some summaries and drafts are written by an AI model from the project or submission they describe. They are labeled as drafts and cite the evidence they come from. Third-party AI providers receive only what is needed to generate those drafts under their terms.

Fydell does not make hiring decisions and does not reject anyone automatically. It does not analyse faces, voices, video, or emotions. If an employer used Fydell in a decision about you, you can ask that employer for a human explanation and review, and contest the outcome.

Fydell never asks for health, ethnicity, religion, sexual orientation, immigration status, or similar details. Leave them out of uploads. Files that look like credentials are left out of analysis, and secrets detected in code are redacted before anything is stored.

Who can see it

An engineer's work is visible to them, and to an employer only when they apply or share a link. The engineer chooses which projects are included and can revoke a link or withdraw an application, which stops further access. Candidate work in a workspace is visible to that workspace's members. The server checks membership before returning any report, and every table holding candidate work has a row-level policy scoped to its organization. There is no public directory of candidates or results.

Providers and international transfers

Providers process data on Fydell's behalf under their data processing terms: Supabase (database, sign-in, files), Vercel (hosting and isolated code runs), Resend (email), Groq (AI drafts and allowed repository review), GitHub and GitLab (read-only account and repo confirmation for projects you share). When online billing is offered, Stripe processes payment details; Fydell never sees full card numbers.

Fydell and its providers process data in the United States and other countries. Transfers from the EU, UK, and Switzerland rely on the providers' data processing terms, including standard contractual clauses where required.

Cookies and privacy signals

Fydell uses only the cookies needed to keep you signed in and protect your session. There are no advertising or analytics trackers, and no third party tracks you across other websites through Fydell.

Because Fydell does not track visitors across sites, every visitor is treated the same whether or not their browser sends a Do Not Track or Global Privacy Control signal.

Retention and deletion

Account data stays while the account exists. When you delete your account from Settings, erasure runs promptly on live systems; backups expire on their normal schedule. Employers may be required by employment law to keep hiring records, so decisions and notes a workspace recorded stay with that workspace until the workspace itself is deleted.

Your rights and choices

• Anyone with an account can download their own account data as one JSON file from Settings.
• Engineers can remove a project, disconnect GitHub or GitLab, download everything in their profile and projects, and delete their account from Settings. Deletion erases projects, reports, notes and profile, revokes share links, and withdraws open applications.
• Employer members can delete their own account; a workspace owner can request deletion of the whole workspace from Settings.
• Wherever you live, you can ask to see, correct, export, or delete your data, and to stop optional processing. Fydell does not treat you differently for using these rights.
• In the EU, UK, and Switzerland you can also restrict or object to processing, withdraw consent at any time, and complain to your local data protection authority.
• In California and other US states with privacy laws, you can ask what personal information we hold and how it is used, and ask us to delete or correct it. Fydell does not sell or share personal information for cross-context advertising, and does not use sensitive information to infer characteristics. You may use an authorised agent; we verify both of you before acting.

To see, correct, or export anything else, email admin@fydell.com from the address on the account. We confirm who is asking, then answer within one month.

Security and children

Data is encrypted in transit and at rest. Access inside Fydell is limited to people who need it to run the service, and every administrative action is logged. If a breach affects your data, we tell you without unreasonable delay.

Fydell is a hiring tool for adults. It is not directed at children, and we do not knowingly collect data from anyone under 16.

The effective date on the Privacy Policy changes whenever that page does. If a change affects how your data is used, we email account holders before it takes effect.

Related reading: Trust and security, CLI: what is collected, and the Privacy Policy.