1. Data Collected
When you use the platform, account information, business information, integration data, communication data, usage logs, and automation scenarios may be collected.
Legal
Privacy Policy
Learn how your personal data is collected, used, and protected.
2. Purposes of Data Use
Data is used to provide services, run integrations, maintain security, provide technical support, and fulfill legal obligations.
3. Data Protection Mechanisms
Data security is ensured with encryption, HTTPS, OAuth 2.0, access controls, and regular security updates.
4. Retention and Deletion Policy
Communication records can be deleted through the platform. Account information is retained until the account is closed; some records may be kept longer due to legal requirements.
5. Sharing with Third Parties
Limited data sharing may occur with integration providers, voice call and AI services, payment processors, and within legal obligations.
6. Cookies
Four categories of cookies may be used on the site: (i) Necessary — required for session management, security, and core functionality, and cannot be disabled; (ii) Functional — remembers preferences such as theme and language; (iii) Analytics — measures site usage with Google Analytics; (iv) Marketing — used for ad performance and retargeting. Analytics and marketing cookies run only with explicit consent. You can change your preferences at any time via the Cookie Preferences link at the bottom of the page or through your browser settings.
7. User Rights
Applications for access, correction, deletion, objection, and data portability rights can be made via destek@candit.ai.
8. Children's Privacy
The platform is not intended for users under 18 and does not knowingly collect data without parental consent.
9. Changes
The policy may be updated from time to time. Significant changes are announced via email or platform notification.
10. Contact
You can reach destek@candit.ai for privacy-related questions.
11. Google User Data (Google API Services)
When a recruiter connects their Google account to Candit, our application accesses the Google Calendar API with only two scopes: calendar events (calendar.events) — to create, update, and cancel interview events with Google Meet links on the connected user's own calendar; and read-only calendar access (calendar.readonly) — to read free/busy information in order to avoid scheduling conflicts. We store only the ID and Google Meet link of the events we create; no other calendar content is stored. Google user data is used solely to provide the interview scheduling feature; it is not used for advertising, is not sold, and is not transferred to third parties. Google user data is not used to create, train, or improve any artificial intelligence or machine learning models (including generalized or foundational models), and is not transferred to third-party AI services for such purposes. Candit's use of raw or derived user data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements ("The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements."). You can disconnect your Google account at any time from Settings → Integrations in the app or from your Google Account security settings (myaccount.google.com/connections); to request deletion of your Google data, contact destek@candit.ai.
Google API Services User Data Disclosure
Candit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Google user data accessed: when a recruiter connects their Google account, Candit accesses the Google Calendar API with only two scopes — calendar.events (https://www.googleapis.com/auth/calendar.events), used to create, update, and cancel mülakat events with Google Meet links on the connected recruiter's own calendar, and calendar.readonly (https://www.googleapis.com/auth/calendar.readonly), used to read free/busy availability to avoid scheduling conflicts. Data stored: only the calendar event ID and the Google Meet link of the events Candit creates; no other calendar content is read, stored, or shared. Google user data is never used for advertising, is never sold, and is never transferred to third parties, except as necessary to provide the scheduling özellik, to comply with applicable law, or as part of a merger or acquisition with prior notice. AI/ML disclosure: Candit's artificial-intelligence features (candidate mülakat scoring and AI voice interviews) process only candidate-provided mülakat content. No Google user data — raw, aggregated, anonymized, or derived — is transferred to any third-party AI/ML service, and no Google user data is used to create, train, or improve any machine-learning or artificial-intelligence models, foundational, generalized, or otherwise. The third-party AI providers Candit uses for candidate mülakat content (OpenAI, Anthropic, ElevenLabs) never receive Google user data. Candit does not use AI aggregators, gateways, or model hubs, and does not operate self-hosted or offline AI models. Retention and deletion: the stored event ID and Meet link are kept only as part of the related mülakat record; you can revoke Candit's access to your Google account at any time at myaccount.google.com/connections or from Settings → Integrations in the app, and you can request deletion of your Google user data by contacting destek@candit.ai.