Privacy Policy

1. Introduction

Floating(“we”, “us”, “our”) operates the website floating.tools (“Floating”), an assessment platform where organizations evaluate how candidates complete real work with an AI assistant. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use Floating. We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with applicable laws, including GDPR, CCPA, PIPEDA, and the ePrivacy Regulation.

2. Information We Collect

What we collect depends on how you use Floating:

• Account information (hiring teams): name, email address, organization name, and a password (stored only as a salted hash) when you create an account.
• Candidate information: name and email address, entered when you start an assessment through an invitation link. Candidates do not create accounts.
• Assessment data: the work produced inside the assessment workspace, including documents, whiteboard content, messages exchanged with the AI assistant, and workspace interaction events (such as window focus and start and submission times).
• Waiting-list information: the email address you submit to join our waiting list.
• Usage data: data automatically collected when using the website, such as IP address, browser type, and access times.
• Cookies: a single essential cookie used to keep hiring-team users signed in. See our Cookie Policy for details.

3. How We Use Your Information

Your information is used for the following purposes:

• Authentication: to verify the identity of hiring-team users and provide access to the platform.
• Delivering assessments: to run the assessment workspace, provide the AI assistant during the session, and record the candidate's submission.
• Evaluation: to produce scorecards. Assessment data, including the AI-assistant chat history, is processed by AI models to evaluate both the work produced and how the AI assistant was used.
• Sharing results: to make a candidate's submission, evaluation, and scorecard available to the organization that invited them.
• Service improvement: to analyze usage patterns and improve our services.
• Communications: to contact you about the waiting list, your account, or important changes to the service. We do not use your data for third-party advertising.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: for the waiting list and other optional communications.
• Contractual Necessity: to fulfill our agreement with you (e.g., providing access to your account or running an assessment you chose to start).
• Legitimate Interests: for evaluating assessments on behalf of the hiring organizations that commission them, securing the platform, and improving our services.

5. Data Sharing and Disclosure

We may share your information with:

• Hiring organizations: if you take an assessment as a candidate, your submission, AI-assistant chat history, and evaluation results are shared with the organization that invited you. That organization makes its own hiring decisions and is responsible for its own handling of your data.
• Service providers: infrastructure providers that host the platform and store its data (such as Vercel, Neon, and Upstash), and AI model providers (such as Anthropic, accessed through Vercel AI Gateway) that process assessment content to power the AI assistant and the evaluation. These providers process data on our behalf.
• Legal obligations: when required by law or to protect our rights.

We do not sell your personal data and we do not share it with advertisers.

6. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit, salted password hashing, HTTP-only session cookies, and access controls that scope every hiring-team account to its own organization's data.

7. User Rights and Choices

You have the following rights:

• Access and Correction: request access to or correction of your personal data.
• Deletion: request the deletion of your personal data.
• Consent Withdrawal: withdraw your consent for data processing at any time.

To exercise these rights, contact us at hello@floating.tools. Candidates may also direct requests to the organization that invited them.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Assessment data is retained while the hiring organization that commissioned the assessment needs it for its recruitment process.

9. International Data Transfers

Your data may be transferred to and processed in countries outside of the European Economic Area (EEA), including by the service providers listed above. We ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses.

10. Children's Privacy

We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and revising the “Last Updated” date above.

12. Contact Information

If you have any questions or concerns about this Privacy Policy, please contact us at hello@floating.tools.