Privacy Policy | Candidate Falcon

Candidate Falcon ("Candidate Falcon," "we," "us," or "our") is committed to protecting the privacy and security of personal data processed in connection with our website, platform, and related services (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, store, and otherwise process personal data relating to users of the Services.

By accessing or using the Services, creating an account, uploading content, or otherwise submitting personal data to us, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. Where consent is required under applicable law, we will request such consent separately.

1. Scope and Interpretation

For purposes of this Privacy Policy, "personal data" or "personal information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual. Information that has been anonymized so that it can no longer reasonably be linked to an individual is not considered personal data for purposes of this Privacy Policy.

Where non-personal data is combined with personal data and the combined dataset can reasonably identify an individual, we will treat the combined dataset as personal data.

2. Categories of Personal Data We Collect

Depending on your interaction with the Services, we may collect and process the following categories of personal data:

Account information: including your name, email address, login credentials, and other registration information you provide when creating or managing an account.
Payment and billing information: including subscription status, billing-related metadata, transaction history, and limited payment details provided through our third-party payment processor. We do not store full payment card numbers on our own servers.
Practice session and assessment data: including video recordings, audio, written responses, practice history, interview answers, assessment inputs, scores, and AI-generated feedback.
Career-related materials: including resumes, CVs, cover letters, and any other documents or content you upload to the Services.
Usage data: including pages viewed, features accessed, actions taken within the platform, timestamps, session duration, interaction history, and related diagnostic information.
Technical and device data: including IP address, referring URLs, identifiers, and similar technical information collected automatically when you access or use the Services.
Communications data: including information contained in messages, support requests, feedback, and other communications you send to us.

3. Sources of Personal Data

We may collect personal data from the following sources:

Directly from you, including when you create an account, subscribe, upload documents, record practice sessions, contact us, or otherwise use the Services.
Automatically, through your use of the Services, including through cookies, server logs, analytics tools, and similar technologies, subject to applicable law.
From third parties, including authentication providers, payment processors, hosting providers, analytics providers, and other service providers engaged to support the operation of the Services.
By inference, where we derive limited information from the data described above, such as usage patterns relevant to service optimization and personalization.

4. Purposes of Processing

We do and/or may process personal data for the following purposes, as permitted by applicable law:

to provide, operate, maintain, secure, and improve the Services;
to create and administer user accounts and subscriptions;
to process payments, manage billing, and maintain subscription records;
to store, analyze, and display practice session data, uploaded documents, and related user content;
to generate AI-assisted feedback, performance analysis, and related outputs in connection with our website, platform, and related Services;
to communicate with you regarding your account, subscription, support inquiries, platform updates, service notices, and other administrative matters;
to monitor usage, troubleshoot errors, detect abuse, enforce our terms and policies, and protect the security and integrity of the Services;
to conduct analytics, research, testing, auditing, and product improvement activities;
to comply with legal obligations, regulatory requirements, lawful requests, and applicable enforcement needs;
and to establish, exercise, or defend legal claims and protect our rights, property, safety, and legitimate business interests.

5. Legal Bases for Processing

To the extent required by applicable law, we process personal data only where we have a valid legal basis to do so. Depending on the circumstances, such legal bases may include: (a) performance of a contract or steps taken at your request prior to entering into a contract; (b) compliance with legal obligations; (c) our legitimate interests, provided such interests are not overridden by your rights and freedoms; and (d) your consent, where consent is required by applicable law.

6. AI-Powered Features and Video Data

Certain Services include AI-enabled functionality designed to analyze user-submitted practice content and generate feedback. When you use such features, we may process video recordings, audio, text responses, resumes, and related inputs to deliver performance analysis, coaching outputs, and other assessment-related functionality.

Your uploaded or recorded content may be processed by us and by third-party service providers acting on our behalf for the purpose of generating and delivering AI-assisted outputs.
You are solely responsible for ensuring that any content you upload or record through the Services is lawful and does not infringe the rights of any third party.
You can request the deletion of some or all recordings or uploaded materials associated with your account by contacting us at hi@candidatefalcon.com. We will process such requests in accordance with applicable law. Residual copies may remain temporarily in backups, logs, or security systems for a limited period where retention is reasonably necessary for operational, security, or legal compliance purposes.
We do not guarantee that AI-generated feedback will be accurate, complete, error-free, or suitable for any particular employment process, employer, or hiring outcome.

7. Disclosure of Personal Data

We do not sell your personal data to third parties for their own direct marketing or independent commercial purposes. We may disclose personal data in the following circumstances:

Service providers and contractors: to hosting providers, payment processors, analytics providers, AI service providers, infrastructure providers, customer support tools, and other vendors that process personal data on our behalf and solely for the purpose of providing services to us and/or enabling the operation of the Services.
Corporate transactions: in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, dissolution, bankruptcy, or similar transaction, subject to customary confidentiality and legal safeguards.
Legal and regulatory compliance: where disclosure is required or reasonably necessary to comply with applicable law, regulation, court order, subpoena, legal process, or lawful governmental request.
Protection of rights and safety: where we determine in good faith that disclosure is necessary to protect the rights, property, safety, security, or integrity of Candidate Falcon, our users, third parties, or the public, including for fraud prevention, abuse prevention, or security incident response.
With your direction or consent: where you expressly instruct us to do so or where we otherwise obtain your consent, where required.

8. International Data Transfers

Your personal data may be processed in countries other than the country in which you reside. Where required by applicable law, and where personal data is transferred internationally, we will implement appropriate safeguards designed to ensure that such data remains protected in accordance with applicable legal requirements.

9. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate business interests.

Retention periods may vary depending on the nature of the data, the sensitivity of the information, whether the data is required for ongoing service provision, and applicable statutory, tax, accounting, regulatory, or legal requirements. When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it, except where continued retention is required or permitted by law.

10. Data Security

Candidate Falcon implements and maintains administrative, technical, physical, and organizational safeguards designed to protect personal data against unauthorized or unlawful access, acquisition, disclosure, alteration, loss, misuse, or destruction. Such safeguards may be updated, modified, supplemented, or replaced from time to time at Candidate Falcon's sole discretion in light of the nature of the Services, operational requirements, and evolving industry practices.

Notwithstanding the foregoing, no website, application, system, network, server, database, transmission, or method of electronic storage or processing can be guaranteed to be fully secure, uninterrupted, or error-free. Accordingly, Candidate Falcon does not represent, warrant, or guarantee that personal data or any other information will be secure from unauthorized access, intrusion, loss, corruption, disclosure, misuse, or other third-party acts or failures. To the fullest extent permitted by applicable law, any transmission, submission, upload, or storage of information through the Services is undertaken at the user's own risk.

Candidate Falcon shall have no responsibility or liability for any unauthorized access to, or use, alteration, deletion, destruction, loss, theft, or disclosure of, personal data or other information arising from events or circumstances beyond its reasonable control, including cyberattacks, hacking, phishing, malware, ransomware, service interruptions, telecommunications failures, infrastructure failures, acts or omissions of third-party providers, force majeure events, or other security incidents not directly and solely caused by Candidate Falcon's willful misconduct or violation of non-waivable legal obligations.

In the event of an actual or suspected security incident or personal data breach, Candidate Falcon may investigate, remediate, contain, report, or otherwise respond in such manner as it determines appropriate in its sole discretion and as required by applicable law. If notification is legally required, Candidate Falcon will provide notice to affected individuals, regulators, or other relevant parties within the time period and in the manner permitted or required under applicable law.

11. Your Rights and Choices

You can request the deletion of some or all recordings or uploaded materials associated with your account by contacting us at hi@candidatefalcon.com. We will process such requests in accordance with applicable law. Residual copies may remain temporarily in backups, logs, or security systems for a limited period where retention is reasonably necessary for operational, security, or legal compliance purposes.

Subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of processing of, portability of, or objection to the processing of certain personal data we hold about you. You may also have the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing conducted prior to such withdrawal. These rights are not absolute and may be limited, denied, or subject to conditions, exceptions, verification requirements, and retention obligations as permitted by applicable law.

You may also opt out of receiving marketing communications from us by using the unsubscribe link included in such communications or by contacting us directly. Please note that we may still send service-related or transactional communications where necessary for account administration or operation of the Services.

We may require you to verify your identity before responding to a request relating to your personal data. We reserve the right to deny or limit requests where permitted by applicable law, including where a request is manifestly unfounded, excessive, repetitive, or where compliance would adversely affect the rights of others.

To exercise any applicable privacy rights, please contact us at hi@candidatefalcon.com.

12. Third-Party Services and Links

The Services may integrate with or contain links to third-party websites, tools, or services that are not owned or controlled by Candidate Falcon. We are not responsible for the privacy, security, content, or practices of such third parties. Your use of third-party services is governed by the applicable terms and privacy policies of those third parties.

13. Children's Privacy

The Services are not directed to children, and we do not knowingly collect personal data from individuals who are not legally permitted to use the Services under applicable law.

If we determine or have reason to believe that personal data has been collected from a child in violation of applicable law, we reserve the right to delete such data, suspend or terminate the relevant account, and take any other action we deem appropriate without notice, subject to applicable law.

If you believe that personal data has been collected from a child in violation of applicable law, please notify us at hi@candidatefalcon.com.

14. Changes to Privacy Policy

We may update or modify these Privacy Policy from time to time, in our sole discretion. If we make material changes, we will always provide notice by posting the updated Privacy Policy, updating the "Effective Date" at the top of these Privacy Policy, and/or by sending you notice through the contact information associated with your account.

Any changes to these Privacy Policy will become effective upon posting, unless otherwise stated.

By continuing to access or use the Services after the updated Privacy Policy become effective, you agree to be bound by the revised Privacy Policy.

If you do not agree to the revised Privacy Policy, you must stop using the Services.

You are responsible for reviewing these Privacy Policy periodically to remain informed of any updates.

15. Contact Us

If you have any questions regarding this Privacy Policy or our data practices, please contact us:

Email: hi@candidatefalcon.com
Website: candidatefalcon.com