Privacy Policy

1. Introduction

Welcome to FindFit ("we", "our", or "us"). We operate findfit.ca, a reverse-hiring platform connecting verified professionals with curated opportunities.

We built FindFit on the premise of trust and verification. This means we design our data practices to respect your privacy, secure your information, and give you control over who sees your professional background.

This Policy applies to individuals seeking employment ("Candidates"), individuals hiring on behalf of an organization ("Recruiters"), and visitors to our website, in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws such as BC's Personal Information Protection Act (PIPA).

2. Information We Collect

We collect information based on how you use our platform:

Information from Candidates

• Account Data: Full name and email address.
• Professional Profile: Headline/title, years of experience, current location (city/region level), work arrangement preferences (e.g., remote, hybrid), availability, required engagement type, and compensation expectations.
• Work History & Projects: Previous roles, companies, dates, project descriptions, skills used, portfolio links, and related media.
• Credentials: Names of certifications or degrees, and the issuing organization.

Information from Recruiters

• Account & Company Data: Full name, company name, company website, your role title, and LinkedIn URL.
• Payment Information: Handled securely via our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.

Information Collected Automatically

• Platform Usage (Internal): Which Recruiter views which Candidate profile or unlocks a Candidate's contact information.
• Audit Logs: Administrative actions taken on profiles to maintain platform integrity.

3. Our Unique Credential Verification Approach

To maintain a high-trust environment, FindFit verifies the professional credentials and identities of Candidates. During this process, our team may request to temporarily sight professional licenses or identity documents.

4. How We Use Your Information

• To Facilitate Hiring: Candidate data is used exclusively to facilitate discovery by verified Recruiters.
• Platform Integrity: To verify your identity, evaluate recruiter applications, and maintain the guarded unlock system.
• Communication: To send authentication links, notifications about platform activity, and support responses.
• Payments: To process Recruiter subscription payments.

FindFit does not and will not sell, rent, or lease your personal information to third parties. Candidate profiles are hidden from public web search engines.

5. Cookies and Tracking

We take a minimalist approach to tracking. We do not deploy third-party advertising, marketing, or tracking cookies.

• Essential Cookies: We use cookies strictly necessary for authentication (maintaining your logged-in session).
• Analytics: We use privacy-first, cookieless analytics (like Plausible/Umami) to understand website traffic. These tools do not collect personally identifiable information.

6. Data Sharing and Third-Party Subprocessors

We rely on trusted third-party service providers to power our platform. These providers are bound by confidentiality obligations and are only permitted to use your data as necessary to provide these services:

Cross-Border Data Transfers: As detailed above, some of our service providers are located outside of Canada, primarily in the United States. Your personal information may be transferred to, stored, or processed in these jurisdictions, and thereby may be accessible to foreign law enforcement or courts under the laws of those jurisdictions.

7. Data Retention

We retain your information only as long as necessary:

• Candidates: Active data is held while your account is open. Upon requesting deletion, your profile is immediately removed from live systems, and backed-up data is cycled out within 30 days.
• Recruiters: Account data is held while active. Billing and payment history must be retained for at least seven (7) years to comply with Canada Revenue Agency (CRA) taxation obligations.
• Verification Media: Destroyed immediately upon verification status approval.
• Audit Logs: System logs are retained indefinitely but anonymized to preserve system integrity without violating privacy.

8. Your Privacy Rights

Under PIPEDA and PIPA, you have the right to:

• Access: Request a copy of the personal information we hold about you. We will respond within 30 days.
• Correction: Request updates to inaccurate or incomplete information. (Candidates generally self-manage this via their profile dashboard).
• Withdraw Consent / Deletion: Close your account and request we delete your data, subject to necessary legal and financial retention requirements outlined above.
• Challenge Compliance: Raise concerns with our Privacy Officer regarding our handling of your data.

9. Security

We employ modern security safeguards appropriate to the sensitivity of the information. This includes passwordless login (preventing password theft), Row Level Security (RLS) on our databases, and encryption in transit and at rest. However, no digital transmission is entirely secure, and you use the platform at your own risk.

10. Children's Privacy

Our platform is designed exclusively for professionals. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy as our services evolve. If changes are material, we will notify you by email or through a prominent notice on the platform at least 30 days prior to the changes taking effect.

12. Contact Our Privacy Officer

If you have questions, privacy requests, or wish to challenge our compliance, please contact our designated Privacy Officer:

If you remain dissatisfied with our response, you have the right to contact the Office of the Information and Privacy Commissioner for British Columbia (OIPC) or the Office of the Privacy Commissioner of Canada (OPC).