Privacy Policy

This Privacy Policy describes how Goodfit collects, uses, and shares personal information when you use our website or platform.

1. Information we collect

• Account information: name, work email, organization name
• Candidate information: contact details, resume, interview recordings, assessment responses - collected on behalf of the Customer
• Usage data: pages visited, features used, device and browser information
• Demo and contact information: your work email and related details when you try the live demo on our website, and business contact details of people we reach out to by email (see section 4)

2. How we use information

• Provide, maintain, and improve the platform
• Generate AI-assisted assessments and scorecards
• Communicate with you about your account
• Contact you about Goodfit, which you can opt out of at any time
• Detect and prevent abuse

3. AI interviews and calls

When a company invites you to an interview, assessment, exit interview or check-in call through Goodfit, it is conducted by an AI interviewer on that company's behalf. The session or call is recorded (audio, and video and screen where the assessment uses them) and transcribed. The AI produces a summary and scores for the company's reviewers. People at the company make any decision about you; the AI does not.

You can stop at any time by ending the call or closing the session. To ask about or delete your recording, contact the company that invited you, or email support@goodfit.so.

4. Live demo and email contacts

This section covers two groups of people: visitors who try the live AI interview demo on our website, and business contacts we email about Goodfit.

Live demo on our website

Before you start the demo, we ask for your work email and send a one-time verification code to it. When you use the demo, we collect:

• Your work email address, which you type in
• A one-time verification code, which is valid for 10 minutes
• The role and language you choose for the demo interview
• Your voice and the call transcript, used to run the demo interview and create the demo scorecard shown on screen
• Technical data such as IP address and browser signals, used to limit misuse

We use this information to:

• Send you the verification code and confirm the email is yours
• Run the demo interview and generate your demo scorecard
• Limit automated or abusive use of the demo
• Contact you about Goodfit, for example to follow up on your demo or offer a walkthrough with our team

The demo uses two short-lived cookies: one remembers your pending code, and one remembers that your email is verified (for up to 24 hours).

The demo is a sample interview. Its scorecard is not used to make any hiring decision about you.

Business contacts we email

We may email people whose work could benefit from Goodfit, such as HR, talent acquisition, and business leaders. For this, we use business contact details (name, job title, company, and work email) and information about a company's hiring activity, obtained from publicly available sources and business data providers. We use this only for business-to-business outreach about Goodfit, and you can opt out at any time as described below. We rely on our legitimate interest in telling businesses about Goodfit, and you can object to this at any time.

Opting out

You can opt out of emails from us at any time by replying to any of our emails or by writing to support@goodfit.so. Once you opt out, we stop contacting you and keep only what we need to remember not to contact you again.

How long we keep it

• Verification data expires within 24 hours: codes are valid for 10 minutes, and the "verified email" marker that lets you use the demo lasts up to 24 hours.
• We do not keep a recording of demo calls. The transcript is used to generate your scorecard and is not kept as part of your contact record.
• Contact records (your email and the fact that you tried the demo or were contacted) are kept until you opt out, or for up to 24 months from our last interaction, whichever comes first.

Who we share it with

We share this information only with service providers that process it on our behalf and under our instructions, such as our email delivery and AI service providers, and with hosting and security providers that run the website. We do not sell or rent your personal information.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your information, object to or restrict how we use it, and withdraw consent. To make a request, email support@goodfit.so. You can also complain to your local data protection authority.

5. AI model training

We do not train AI models on candidate-identifiable data. Aggregate, de-identified usage statistics may be used to improve product performance.

6. Sharing

We share information with:

• Sub-processors listed in the DPA (hosting, email, analytics)
• The Customer that invited you (if you are a Candidate) - they control your assessment data
• Law enforcement when legally required

7. Candidate rights

Candidates can request access, correction, or deletion of their data by contacting the Customer that invited them, or by emailing support@goodfit.so.

8. Retention

Account data is retained while the account is active and for 30 days after termination. Candidate data is retained as instructed by the Customer. Live demo and email contact data is retained as described in section 4.

9. Security

Data is encrypted at rest and in transit. Goodfit is SOC 2 Type II compliant. See the Trust Center for details.

10. International transfers

Data is primarily stored in India. Where transfers to other jurisdictions occur, they are protected by standard contractual clauses.

11. Google user data

Goodfit requests access to your Google Calendar (the calendar.events scope) only when you explicitly connect your calendar to schedule candidate interviews. We use this access solely to (a) create interview events with Google Meet links on your own calendar and invite the candidate, and (b) read back only the events Goodfit created in order to detect reschedules or cancellations and reflect them in your dashboard. We do not access events Goodfit did not create, and we do not sell or share Google user data with third parties.

Goodfit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke this access at any time from your Google Account permissions.

12. Contact

Privacy questions can be sent to support@goodfit.so.