Your data, handled the way it should be

1. What we collect

Depending on how you use CanDid, we may collect:

• Account and profile information (name, email, resume/CV, work history, skills).
• Application data tied to the specific role and employer you apply to.
• Audio and video recordings of AI-led interview sessions, when you consent to be recorded.
• Assessment responses, scores, and the AI-generated evaluation notes tied to your session.
• Basic technical data (browser, device type, IP address) needed to keep the platform secure and working.

2. Consent, always first

We ask before we record. Before any interview session begins, you're shown a clear consent step explaining that audio and video will be captured, why, and how it will be used. If you don't consent, you won't be recorded, and you can ask a member of our team about alternative assessment formats.

• No silent recording - consent is explicit and logged.
• You can withdraw consent and stop a session at any time before it's scored.
• Consent is requested per session, not bundled into a one-time signup checkbox.

3. How your data is used

Your information is used only for purposes directly tied to the hiring process you're part of:

• Scoring your assessment responses and generating structured, comparable results for the employer.
• Letting a human reviewer verify and, where relevant, override an AI-generated score before any hiring decision is made.
• Operating and securing the platform itself (fraud prevention, debugging, service reliability).

4. Human review, not just AI

CanDid's AI produces a first-pass, structured evaluation - it doesn't make hiring decisions on its own. Employers can review the underlying transcript, recording, and scoring rationale before advancing or rejecting a candidate. If you believe a score misrepresents your interview, you can ask the employer or CanDid support to have it reviewed.

5. Storage, encryption, and retention

Concretely, here's how your data is protected:

• Recordings and assessment data are encrypted at rest (AES-256) and in transit (TLS).
• Data is stored on infrastructure configured for Canadian data residency where the employer requires it.
• Recordings and related assessment data are retained only as long as needed for the hiring process, then automatically purged by a scheduled deletion job.
• Employer accounts are tenant-isolated - one employer cannot see another employer's candidates or data.

6. Third-party providers

We use third-party AI providers to power interview scoring and speech-to-text/text-to-speech for the voice interview experience. These providers process the minimum data needed to perform that function, are bound by data-processing terms, and do not use your interview data to train their own general-purpose models.

7. Your rights

Under PIPEDA, and as a matter of policy on CanDid, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information in your profile or application.
• Request deletion of your data ("right to erasure") - including recordings, transcripts, and scores - via our support team.
• Ask which employers your data has been shared with, and withdraw an application at any time.

8. Deleting your data

You can request full deletion of your CanDid data at any time by contacting us at the email below. Once verified, deletion is comprehensive: it removes your profile, recordings, transcripts, and scores from our systems and any active employer views, subject only to what we're legally required to retain (for example, records needed to demonstrate compliance with employment law, kept for the minimum period required).

9. Changes to this policy

We'll update this page if our data practices change materially, and update the date at the top. If a change meaningfully affects how your data is used, we'll aim to notify active users directly rather than relying on this page alone.