Privacy Policy

1. Who we are

Fitted (www.thefitted.online) is run by DKYS LLC. We are responsible for the information described here. Questions go to support@thefitted.online.

2. What we keep

Only what Fitted needs to do the job you ask of it:

• Your account: your email address, your name, and how you sign in (email code, password, Google, LinkedIn or Apple). Sign-in is handled by Clerk; we never see a password.
• Resumes you upload — the file itself and the text read from it — and the profile built from them, which you can edit.
• Your preferences (titles, locations, salary floor, words to avoid) and the answers you save for application questions.
• The jobs you add or that Fitted finds for you, their descriptions, scores, status history and notes, and every tailored resume.
• Your public page, if you make one: what you choose to show on it, your photo (resized, with its location and other metadata removed), and your availability.
• Bookings made on your page: the booker's name, email, company and note, and a one-way hash of their IP address used only to limit repeated bookings — never the address itself.
• If you connect Google Calendar: an encrypted token that lets Fitted check when you are busy and add bookings to your calendar.
• If you connect Gmail or forward emails to your Fitted address: for each email about one of your jobs, its sender, subject and date, and what it meant (a confirmation, an interview, a rejection). The email itself — its words, attachments and anything not about your jobs — is read once and not kept.
• A count of the AI requests made for you, with their size, to apply your plan's limits.
• Messages you send through the contact form — your name, email and what you wrote — and a one-way hash of your IP address used only to limit repeated messages. They're used only to answer you.

3. How we use it

To read and score jobs against your profile, tailor resumes, track postings, show your public page, take bookings, apply your plan's limits and keep the service secure. We don't sell your information, show you ads, or share it with recruiters or employers. Nothing is sent to an employer unless you send it yourself.

4. AI processing

To score a job or tailor a resume, Fitted sends the job description and the relevant parts of your profile to OpenAI through its API. Under OpenAI's API terms that data is not used to train their models; OpenAI may keep it for up to 30 days to detect abuse. We send only what the task needs, and every tailored line is checked against your own profile before you see it.

5. Who else handles it

These companies process data for us, each only for its part:

• Clerk — accounts and sign-in, and the waitlist.
• Neon — the database where your information is stored, in the United States.
• Vercel — hosting and delivery of the site, in the United States.
• OpenAI — reading and writing for job scores, tailoring and resume reading.
• Stripe, through Clerk Billing — payments for Pro. Fitted never sees your card number.
• Google — only if you connect Google Calendar.

6. Google user data

If you connect Google Calendar, Fitted asks only to see when you are busy and to create, change and delete events it made for bookings on your page. It never reads the titles, attendees or contents of your other events.

If you connect Gmail, Fitted asks for read-only access and searches only for mail from job-application systems and job alerts, and mail about applications, interviews and offers. It reads each such email once to match it to one of your jobs, keeps only the sender, subject and date, and can never send, change or delete mail.

Fitted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. That information is used only to show your free times, add bookings to your calendar and keep your job statuses current, is never used for advertising, never sold, never used to train AI models, and is not read by people except with your permission, for security, or where the law requires. You can disconnect at any time from the Share page, which deletes the token and revokes Fitted's access to both.

7. The browser extension

If you install Fitted for Chrome or Edge, it acts only on the tab where you click its icon, and only when you press one of its buttons.

• Fill with Fitted reads that page's form fields — their labels, choices and whether they're required — and fills them from your profile, saved answers and approved resume. It sends the field labels and the page's address to Fitted; your answers come back from Fitted. It never presses Submit.
• After you submit, it reads the text of that same tab for up to 45 minutes to spot the confirmation page, and tells Fitted the job was applied for.
• Add this job to Fitted sends the page's address and its text, so a job behind a sign-in (LinkedIn, Indeed) can be read.
• It asks your permission for a site only when you first press Fill there — that site, plus Greenhouse, Lever and Ashby, whose forms are often embedded in company pages. It doesn't read your browsing history, other tabs or other sites, and it stores only its connection key, which you can disconnect from your account at any time.

8. The directory, referrals and introductions

Nothing below happens unless you turn it on or answer it.

• The directory: if you list yourself, signed-in members and recruiters we've verified can find a listing made only from what your public page shows. Your current employer, and any company or domain you name, never see you — not their recruiters, and not members who work there.
• Introductions: a verified recruiter can send you a note about a role. They see your name and listing, never your email, unless you accept; then you both get each other's address. You can decline, block a recruiter or a whole company, or report them.
• Referrals: if you offer referrals, members see your name, company and note. When you accept someone's ask, you get their email and their resume for that job, and they get yours.
• Company insights: how applications went at each company is shown as figures only when at least five members are behind each one, and notes appear without names. Nothing identifies you.

9. Recruiters

If you apply to recruit on Fitted, we keep your name, work email, company, website and LinkedIn link to verify you, and your searches, shortlists, saved searches and introductions to run your account. Members can see your name and verified company when you contact them.

10. Your public page

Nothing about you is public until you publish your page. It shows only the parts you switch on, and your resume only if you make it downloadable. Unpublish it at any time and it stops existing at its address.

11. Your choices

• Export: download everything Fitted holds about you as a file from your account page.
• Correct: edit your profile, answers, jobs and page whenever you like.
• Delete: delete your account from your account page. Everything tied to it is removed from our database at once and from backups within 7 days, and your sign-in account is deleted.

Depending on where you live you may have further rights, such as to object to processing or to complain to a regulator. Write to us and we'll help.

12. Cookies

Fitted uses only the cookies sign-in needs and one that remembers whether you folded the menu. There are no advertising or analytics cookies.

13. Security

Connections are encrypted, Google tokens are encrypted at rest, and each person's information is kept apart from everyone else's in every query. No system is perfect; if something goes wrong that affects you, we'll tell you.

14. Children

Fitted is not for anyone under 16, and we don't knowingly hold information about them.

15. Changes

If this policy changes in a way that matters, we'll say so on the site and email you before it takes effect. The date at the top always shows the version in force.