Privacy Policy - Fairview

1. Introduction

Altesino Labs, LLC ("we," "us," or "our") operates Fairview, a candidate assessment and interview monitoring platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

For Interview Candidates: This policy describes how your data is collected during interview sessions and how it may be shared.

For Company Users: This policy describes how we handle data collected from candidates you assess using our platform.

2. Information We Collect

2.1 Candidate Assessment Data

During interview sessions, we collect the following information:

Network Activity:

• API network calls related to AI services and usage
• Internet connectivity patterns
• Operating system logs to detect API usage and system-level activity

Application Monitoring:

• Usage of AI applications and tools on your computer
• Application switching and multitasking behavior
• Installation and presence of AI-related software

System Activity:

• Copy and paste actions (frequency and timing only - NOT content)
• VPN usage detection and status
• General system interaction patterns

Technical Information:

• Device specifications and operating system details
• Timestamps and session duration
• Network configuration data

2.2 Account and Contact Information

• Email addresses
• Names and contact details
• Company information (for business users)
• Account credentials and authentication data

2.3 Usage and Analytics Data

• How you interact with our platform
• Feature usage patterns
• Performance and error logs
• Website analytics through Google Analytics

3. How We Use Your Information

3.1 Primary Business Purposes

We use collected information to:

• Provide candidate assessment insights to hiring companies
• Generate behavioral analytics and patterns
• Improve our monitoring algorithms and platform features
• Ensure platform security and prevent misuse

3.2 Legal Basis for Processing

Our legal basis for processing personal information includes:

• Legitimate Business Interest: Providing assessment services to companies
• Consent: When explicitly provided by candidates
• Contractual Necessity: To fulfill our service obligations

4. Information Sharing and Disclosure

4.1 Sharing with Client Companies

Candidate assessment data is shared with the company conducting the interview. This includes all monitoring data, insights, and behavioral analytics collected during your session.

4.2 Cross-Company Data Sharing

Important: We may share candidate data and insights with other companies that use the Fairview platform. This allows us to:

• Provide comparative analytics
• Improve assessment accuracy across multiple evaluations
• Build comprehensive candidate profiles over time

4.3 Service Providers

We share data with trusted service providers who assist in our operations:

• Railway: Database hosting and storage (PostgreSQL)
• Google Analytics: Website usage analytics
• Other cloud infrastructure providers as needed

4.4 Legal Requirements

We may disclose information when required by law, court order, or to:

• Comply with legal processes
• Protect our rights or property
• Ensure user safety
• Investigate potential violations of our terms

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

5. Data Storage and Security

5.1 Storage Location

• All data is stored in the cloud within the United States
• No data processing occurs outside the US
• We use Railway's PostgreSQL database infrastructure

5.2 Security Measures

We implement industry-standard security practices:

• Encryption in Transit: All data transmission uses SSL/TLS encryption
• Encryption at Rest: Sensitive data including emails and passwords are encrypted in the database
• Access Controls: Limited access to personal data on a need-to-know basis
• Infrastructure Security: Railway provides SOC 2, GDPR, HIPAA, EU-US DPF, Swiss-US DPF, and SOC 3 compliance

5.3 Data Retention

• We retain candidate data until you request its deletion
• There are no automatic deletion periods
• Account information is retained for as long as you maintain an active account

6. Your Privacy Rights

6.1 Access and Correction

You have the right to:

• Access the personal information we have about you
• Request correction of inaccurate or incomplete data
• Receive a copy of your data in a portable format

6.2 Deletion Rights

You may request deletion of your personal information at any time. We will delete your data unless we have a legitimate business or legal reason to retain it.

6.3 Objection and Restriction

You may object to certain processing activities or request restriction of processing in specific circumstances.

6.4 Exercising Your Rights

To exercise any of these rights, contact us at: jared@withfairview.io

Response Time: We will respond to requests within 30 days.

7. Regional Privacy Rights

7.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

Note: We do not "sell" personal information as defined by CCPA, but our cross-company data sharing may qualify as a sale under some interpretations.

7.2 European Residents (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to withdraw consent at any time
• Right to data portability
• Right to lodge a complaint with a supervisory authority

8. Cookies and Tracking Technologies

8.1 Google Analytics

We use Google Analytics to understand how users interact with our website. This service may use cookies and similar technologies to collect usage information.

8.2 Essential Cookies

We use essential cookies for:

• User authentication and session management
• Security and fraud prevention
• Core platform functionality

9. Children's Privacy

Fairview is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

10. International Data Transfers

While we primarily operate within the United States, if you access our services from outside the US, your information may be transferred to and processed in the United States, which may have different privacy laws than your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify users of significant changes by:

• Posting updates on our website
• Sending email notifications to registered users
• Updating the "Last Updated" date at the top of this policy

Continued use of Fairview after changes constitutes acceptance of the updated policy.

12. Contact Information

12.1 Privacy Inquiries

For questions about this Privacy Policy or our privacy practices:

Email: jared@withfairview.io
Website: withfairview.io

Mailing Address:
Altesino Labs, LLC
3907 Gaines Ct
Austin, Texas 78735

12.2 Data Protection Requests

Send requests to exercise privacy rights to: jared@withfairview.io

Include "Privacy Request" in the subject line and provide sufficient information to verify your identity.

13. Compliance and Certifications

Our infrastructure provider (Railway) maintains the following compliance standards:

• SOC 2 Type II
• GDPR Compliance
• HIPAA Compliance
• EU-US Data Privacy Framework
• Swiss-US Data Privacy Framework
• SOC 3

For detailed information about Railway's security and compliance, visit: https://trust.railway.com/

---