Privacy

Effective 16 October 2026

This page explains how Holdfast Talent (“we”) handles information you share on holdfasttalent.com. It is written for a small pilot site — not a full product privacy program.

What we collect

If you use the pilot access form, we collect the fields you submit:

• Name
• Work email
• Role you’re hiring for (optional)
• Notes you choose to include (optional)

If you use the assessment intake form at /assessment, we collect the fields you submit:

• Role title and, optionally, a description of what the role owns
• Role level
• Must-have skills for the role
• Name and work email
• Company (optional)

Please do not include personal data about candidates in either form.

Candidate assessments (recorded, AI-assisted)

If you are a candidate and take an assessment we send you (a page you reach only through a personal link), the session is recorded. We collect:

• Your name and email
• The assessment and invitation attached to your personal link
• Every message you type to the AI assistant and every reply it gives, each with the time it was sent
• The final work you write in the deliverable box, including any drafts we saved while you worked
• Your confirmation of consent to the recording and the AI-use rules, with the date and time
• Session times (when you started and submitted)

We then produce a report about the session. An AI system drafts it from the record above, and it is reviewed by a person at the hiring team before any decision. The report contains scores, quotes from your messages and work, and a stated confidence level. The AI draft is advisory. We do not make hiring decisions and we do not reject anyone automatically.

Please do not put sensitive personal data in your messages or work, for example health information, government ID numbers, or details about your race, religion, or other protected characteristics. The task does not ask for any of it and we do not score on it. Do not paste confidential information belonging to an employer.

If you need an adjustment, such as extra time or assistive technology, email us before you start.

We do not ask for payment details on this site. We do not run advertising trackers or sell your data.

Why we collect it

To respond to pilot access requests and assessment intake requests, to scope your assessment, and to follow up about the Holdfast Talent pilot. That is the only purpose for form submissions.

For candidate assessments: to run the AI assistant during your session, to assess how you worked against a written rubric, and to prepare a report for the hiring team that asked us to assess you. We do not use your session for marketing and we do not use it to build profiles for other purposes.

Who processes it

Form submissions are handled by Web3Forms, which receives the form data and delivers it to us (typically by email). Candidate sessions are not sent through Web3Forms. They are sent directly to Holdfast Talent and stored in a database at Cloudflare, our hosting provider, which acts as a processor for that storage. To run the AI assistant and to draft the report, the text of your messages and work is sent to an AI provider (currently Anthropic) through its commercial API. We send your messages, the assistant's replies, the task brief and your final work. For the report we also send the job description the hiring team supplied. We do not send your name or email address, although the text itself will contain them if you type them. The provider's handling of that text is governed by its own terms (privacy policy). Web3Forms acts as a processor for the pilot access and assessment intake forms only. Please also see their privacy terms.

Retention

We keep pilot request and assessment intake details only as long as we need them to run the pilot conversation — generally while we are evaluating or onboarding your request, then we remove or archive them when they are no longer useful. We do not keep a long marketing list from this form.

Candidate sessions (messages, final work and the report) are kept only as long as we need them to prepare the report, support the hiring team's decision, and answer follow-up questions. We do not set a fixed number of days during the pilot. You can ask us to delete your session at any time (see Contact), and we will delete it from our database, including the report and any decision notes. A short log records that a session was started, viewed, or deleted; it does not contain your messages or work, and for deletions it keeps only a one-way hash of your email address as proof that the deletion happened. Your personal link starts one session. You can return to it until you submit, and it expires after a set time.

Sharing

We do not sell your information. We share it only with service providers needed to receive and handle the form (currently Web3Forms for the access and intake forms, Cloudflare for hosting and assessment storage, and an AI provider for the assistant and report drafting), or if we are legally required to.

If you take a candidate assessment, we share the recorded session, the AI-drafted report (scores and the evidence we quote from your messages and work), and the reviewer's decision notes with the hiring team that requested the assessment. We do not share them with anyone else.

Contact

Questions or requests about your data, including asking us to delete your assessment session: hello@holdfasttalent.com. Please include the name and email you used. Once we have shared a report with a hiring team, deletion in our systems does not remove the copy they hold; we can pass your request on to them.

Changes

If this policy changes in a meaningful way, we will update the effective date on this page.