Privacy Policy

Last updated: November 2025

1. Overview

TheyTest (“we”, “us”, “our”) provides an online platform for candidate assessments and related analytics services (“Services”). This Privacy Policy explains how we collect, use, store, and protect personal data of both our business clients (“Clients”) and their candidates (“Users”).

2. Data We Collect

Account Information: name, email address, company name, billing information.
Candidate Information: name, email, test responses, assessment scores, and metadata (e.g., time spent, IP address, browser type).
Usage Data: platform logs, device identifiers, cookies, and analytics data for improving user experience.
Optional Data: video or screen recordings during assessments (only when activated).

3. How We Use Data

We process personal data to provide, operate, and improve our Services; authenticate users; generate anonymized analytics; communicate with Clients and Users; and comply with legal requirements.

4. Legal Basis for Processing

TheyTest operates under the laws of the Republic of Estonia and the EU General Data Protection Regulation (GDPR). Legal bases include contractual necessity, legitimate interest, and consent (for optional data such as recordings).

5. Data Retention

We retain personal data only as long as necessary for service delivery or as required by Estonian law. Assessment data may be deleted after 12 months or upon Client’s request.

6. Data Sharing

We do not sell or rent data. Data may be shared with service providers (hosting, analytics, communication tools) and authorized clients or authorities where required by law.

7. Data Location & Security

Data is stored on secure servers within the European Union. We apply encryption, access controls, and regular audits in compliance with the Estonian Data Protection Inspectorate (AKI) guidance.

8. Cookies

We use functional and analytics cookies for performance optimization. Users can disable non-essential cookies via their browser.

9. Data Subject Rights

Under GDPR and Estonian law, you may request access, rectification, deletion, restriction, or portability of your personal data by contacting privacy@theytest.com.

10. International Transfers

If transfers occur outside the EU/EEA, we use European Commission-approved Standard Contractual Clauses.

11. Contact

Data Protection Officer:privacy@theytest.com
TheyTest OÜ, registered in Estonia (registry code to be inserted), Tallinn, Estonia.