Privacy

1. What is collected

For an employer: name, work email, company name, the roles and Simulations the team creates in a Hiring Workspace, and the notes and decisions it records.

For an engineer: account email, the Engineering Passport details and photo they add, projects they import from GitHub or GitLab (only repositories or projects they choose to share), upload on the web, or submit through the desktop app or CLI, their applications and submissions, optional AI-session capture events when they start a session, and activity recorded during a Simulation, such as files opened, tests run and prompts sent to the built-in assistant.

For everyone: sign-in records, and the IP address and request details our hosting keeps for security.

2. Who is responsible

Fydell is responsible for engineer accounts, Engineering Passports and the projects engineers add. When an employer invites someone to a Simulation or reviews an application in Hiring Workspace, that employer decides how the hiring data is used and Fydell processes it on the employer's behalf. Questions about a specific hiring decision go to the employer; Fydell helps them answer.

3. Why it is collected

To run Simulations and Hiring Workspace reviews people sign up for, to show engineers their own Engineering Passport and Builder Reports back to them, and to keep accounts secure. It is not sold or shared for advertising and not used to target ads. Fydell does not use your code or capture sessions to train its own models; third-party AI providers receive only what is needed to generate labelled drafts and summaries under their terms.

4. Legal bases

Providing the service you signed up for: your account, Engineering Passport projects, Builder Reports, applications, and Simulations.

Legitimate interests: keeping accounts and the platform secure, preventing abuse, and fixing faults. These never override your rights.

Consent: optional things you choose to add or share, such as social profile links and share links. You can remove them at any time.

Legal obligations: records the law requires us or an employer to keep.

5. AI processing

Some summaries and drafts are written by an AI model from the project or submission they describe. They are labelled as drafts and cite the evidence they come from. Fydell does not score candidates, and a person on the hiring team makes every decision.

6. Automated decisions

Fydell does not make hiring decisions and does not reject anyone automatically. It does not analyse faces, voices, video or emotions. If an employer used Fydell in a decision about you, you can ask that employer for a human explanation and review, and contest the outcome.

7. Sensitive information

Fydell never asks for health, ethnicity, religion, sexual orientation, immigration status or similar details, and they play no part in any report. Please leave them out of what you upload. Files that look like credentials are left out of analysis, and secrets detected in code are redacted before anything is stored.

8. Who can see it

An engineer's work is visible to them, and to an employer only when they apply or share a link. The engineer chooses which projects are included and can revoke a link or withdraw an application, which stops further access; Fydell does not review the evidence before the employer sees it. Candidate work in a workspace is visible to that workspace's members. The server checks membership before returning any report, and every table holding candidate work has a row-level policy scoped to its organization. There is no public directory of candidates or results.

9. Service providers

Supabase (database, sign-in and file storage), Vercel (hosting and isolated code runs), Resend (email), Groq (the AI model behind drafts and summaries, and behind model review of repository code where the engineer allows it), GitHub (only to confirm which GitHub account belongs to an engineer and to read, never change, the repositories they share through the read-only Fydell app), and GitLab (only to confirm which GitLab account belongs to an engineer and to read, never change, the projects they choose to share through Fydell's read-only OAuth sign-in). When online billing is offered, Stripe will process payment details; Fydell never sees full card numbers. Providers process data on Fydell's behalf under their data processing terms and may not use it for their own purposes.

10. International transfers

Fydell and its providers process data in the United States and other countries. Transfers from the EU, UK and Switzerland rely on the providers' data processing terms, which include the standard contractual clauses approved for that purpose.

11. Cookies and tracking

Fydell uses only the cookies needed to keep you signed in and protect your session. There are no advertising or analytics trackers, and no third party tracks you across other websites through Fydell.

12. Do Not Track

Because Fydell does not track visitors across sites, it treats every visitor the same way whether or not their browser sends a Do Not Track or Global Privacy Control signal.

13. How long it is kept

Account data stays while the account exists. When you delete your account from Settings, erasure runs promptly on live systems as described in Your choices; backups expire on their normal schedule. Employers may be required by employment law to keep hiring records, so decisions and notes a workspace recorded stay with that workspace until the workspace itself is deleted.

14. Your choices

Anyone with an account can download their own account data as one JSON file from Settings. Engineers can remove a project from Projects, disconnect GitHub or GitLab from Connections, download everything in their profile and projects (including notes and corrections), and delete their account from Settings. Deletion erases their projects, reports, notes and profile, revokes share links and withdraws open applications. Employer members can delete their own account from Settings, and a workspace owner can request deletion of the whole workspace there. To see, correct or export anything else, email admin@fydell.com from the address on the account. We confirm who is asking, then answer within one month.

15. Your rights

Wherever you live, you can ask to see, correct, export or delete your data, and to stop optional processing. We do not treat you differently for using these rights.

In the EU, UK and Switzerland you can also restrict or object to processing, withdraw consent at any time, and complain to your local data protection authority.

In California and other US states with privacy laws, you can ask what personal information we hold and how it is used, and ask us to delete or correct it. Fydell does not sell or share personal information for cross-context advertising, and does not use sensitive information to infer characteristics. You may use an authorised agent; we verify both of you before acting.

16. Security

Data is encrypted in transit and at rest. Access inside Fydell is limited to people who need it to run the service, and every administrative action is logged. If a breach affects your data, we tell you without unreasonable delay.

17. Children

Fydell is a hiring tool for adults. It is not directed at children, and we do not knowingly collect data from anyone under 16.

18. Changes to this policy

The effective date above changes whenever this page does. If a change affects how your data is used, we email account holders before it takes effect.