✨ Privacy

Privacy Policy

Verification is our product, so we collect more than a typical website — and we owe you clarity about exactly what, and why.

Updated October 16, 2026

Who we are

Fraace operates a hiring platform where candidates train in AI skills, prove them through proctored tests and simulations, and are matched with companies. This policy explains what personal data we collect, how we use it, and the choices you have. For questions, contact hello@fraace.com.

What we collect

CategoryExamplesWhy we use itWho receives itRetention
Account and contact dataName, email address, login/authentication data, role, account status, and candidate phone number when provided in a résumé or profile.Create and secure accounts, provide support, authenticate users, send service notices, and operate candidate/company workflows.Fraace, authentication/hosting providers, and support staff who need access.For the life of the account, then deleted or retained only as required for legal, security, tax, dispute, or audit purposes.
Candidate profile dataProfession, industry interests, active industry, experience years/bracket, location, profile settings, résumé-derived summary, skills, projects, education, and employment history.Build the candidate profile, scope lessons/tests, support matching and eligibility, and let candidates edit or hide selected profile fields.Fraace; other users or companies only through the profile, member, search, or contact surfaces controlled by candidate settings and product rules.While the account is active, unless edited or deleted sooner. Some earned credential records may be retained or anonymized as described below.
Résumé and extracted résumé dataUploaded PDF, DOCX, or text résumé; extracted name/contact fields, employment history, education, projects, skills, and experience estimates.Prefill the candidate profile, derive an editable experience bracket, and support candidate-controlled profile editing.Fraace and storage/extraction service providers. Companies do not receive raw résumé files unless a candidate separately chooses to share them.Until replaced, deleted with the account, or retained where needed for disputes, fraud, security, or legal obligations.
Identity and proctoring dataLive profile photo, test screen/audio recordings, recording metadata, camera/microphone/screen-share preflight data, and outside-activity flags.Verify identity, protect test integrity, route flagged attempts to review, and support rank/credential trust.Fraace reviewers/admins and storage providers. Companies do not receive raw proctoring recordings through the marketplace.For as long as needed to support verified results, reviews, disputes, fraud prevention, and legal obligations.
Learning, test, and ranking dataLessons started/completed, saved progress, test answers, process notes, supporting evidence, scores, feedback, grading details, profession points, and rank.Deliver training, grade work, bank points, calculate rank, show progress, support retakes/reviews, and display verified credentials.Fraace; candidates; companies and other users through public/profile/search/member surfaces where enabled.For the life of the account and longer when needed to preserve credential integrity, audit trails, fraud reversals, or legal obligations.
Company and engagement dataCompany name, company owner information, company description, live company photo, candidate searches, conversations, interview notes, deployments, contracts, payments, and training-seat activity.Operate company accounts, candidate matching, communications, interviews, training purchases, deployments, billing, and support.Fraace, relevant candidates/companies, payment/e-sign/hosting providers when those services are enabled, and legal authorities where required.For the life of the company account and as needed for contracts, payments, tax, audit, dispute, and legal obligations.
Simulation, work-product, and review dataSeat requests, eligibility facets, tasks, messages, decisions, deliverables, AI-workspace trails, proofs, lookups, peer/manager reviews, final grades, disputes, dropout/reliability signals, and published run records.Run simulations, evaluate work, bank points, create shared proof-of-work records, support disputes, and detect fraud or abuse.Fraace, run participants, peer/manager graders, companies where relevant, and the public for runs that are published after required consent and scrubbing steps.Private run data is kept while needed for operations, grading, disputes, integrity, and legal obligations. Published simulation records may be retained indefinitely as shared credential records, with personal identifiers removed where deletion requires it.
Hiring profiles and matching requirementsProfile-interview video/audio, transcripts, source-linked interpretations, confirmation and permission history, minimum requirements, availability, blocks, displayed applications, and compatibility indicators.Build confirmed job-relevant profiles, resolve missing details, compare both parties’ requirements, assess relevant work, and create and manage eligible introductions.Fraace and authorized processing/storage providers; candidates and companies receive only the information permitted for their profile or application. Profile transcripts are admin-only.Confirmed profile recordings: one year from original confirmation. Permitted transcripts and profiles: while the account is active. Closed applications and feedback: two years from closure, subject to earlier deletion or withdrawal rules.
Private hiring feedback and outcomesParticipant interview ratings, hire reports, disputes, later-work check-ins, and associated status events.Manage hiring outcomes, support disputes, and, only with separate combined permission for the applicable source scope, measure hiring quality and train or evaluate matching models.The submitting participant and authorized Fraace staff; only explicitly permitted information is available to counterparties. Private check-ins are not public profile content.Closed-application feedback: two years from closure. Outcome/check-in and learning records: at most two years from original collection, subject to earlier source expiry, withdrawal, or deletion.
Hiring interview dispute recordingsActual candidate–company hiring interview recordings and both participants’ recording permissions.Resolve disputes only after both participants give advance recording permission. Excluded from transcription, AI analysis, chemistry, persona simulation, and training.Authorized Fraace admins and storage providers; recordings are not available for public or company marketplace browsing.90 days after meeting end or cancellation, shortened by applicable account-deletion deadlines. Revocation stops future access/use; storage and provider deletion is tracked separately.
Optional hiring learning dataSeparately permitted, versioned confirmed profiles and own approved test results with associated feedback, hire reports, and check-ins; consent scope, exclusions, and withdrawal records.Measure hiring quality and train or evaluate matching models under a separate combined opt-in. Signing up does not grant this permission.Authorized Fraace staff and service providers processing the permitted data for these purposes. Private chats, notes, hiring recordings, and simulation work with unproven authorship are excluded.Learning datasets: at most two years, bounded by original source expiry. Withdrawal stops future use immediately and triggers the applicable model exclusion/retraining controls.
Behavioral, device, and activity dataLast-active markers, lesson/test events, notifications, message state, IP-derived request context, logs, browser/device data, and security events.Operate, secure, debug, measure, improve, and prevent misuse of the platform.Fraace and infrastructure, analytics, logging, security, and hosting providers used to run the service.For periods appropriate to operations, security, debugging, abuse prevention, analytics, and legal obligations.

How we use it

We use personal data to provide and secure the service, verify identity and work, operate lessons, tests, simulations, messages, interviews, deployments, billing, and support, calculate and display rank, enforce platform rules, prevent fraud and abuse, comply with law, and improve Fraace. We use only data that is reasonably necessary and proportionate to those purposes.

We may use aggregated, anonymized, or deidentified information to understand product performance, improve lessons, and develop new features. When we use deidentified data, we commit not to try to reidentify it and require recipients to follow the same rule.

Public and company visibility

Candidate profiles are designed as credential surfaces. Depending on your profile settings and product context, companies or other candidates may see a masked identity, profession, industry, rank, points, selected experience information, last active status, profile photo, completed lessons, proven tests, projects, simulation history, and other proof-of-work signals. You can use candidate profile settings to hide your profile from discovery and to hide selected fields.

Companies do not receive raw proctoring footage through marketplace browsing. A company can contact a candidate only through Fraace messaging unless and until contact details are unlocked through the applicable product flow and candidate settings allow employer contact.

AI and automated evaluation

Fraace may use AI or automated systems to extract résumé fields, grade or help grade test responses, summarize simulation records for reviewers, support simulated AI teammates or world facts, sanitize content before publication, and generate candidate feedback. These systems may contribute to scores, points, rank, review routing, or eligibility signals. Fraace also uses human/admin review for flagged, borderline, low-confidence, disputed, or manually configured reviews.

If you believe an automated or AI-assisted result is wrong, you may request a review, correction, or explanation by contacting hello@fraace.com. Where applicable law gives you a right to opt out of certain profiling or automated decision-making, we will honor that right or explain why an exception applies.

Hiring assessment and matching

Work progress, assessed quality, role verification, and evidence strength are separate signals. Completion and platform points alone do not establish role-specific verified work. We associate permitted evidence with its author and work episode; additional outputs about one task do not count as independent accomplishments. Résumé and interview claims remain self-reported context. Limited history is not evidence of poor ability. Missing assessment policies or evidence leave the relevant assessment pending.

With the permission requested in the profile-interview flow, we use job-relevant answers to prepare a source-backed summary for confirmation and compare both parties' requirements. Missing essential facts remain pending. A displayed eligible introduction creates an application automatically; the candidate chooses whether to accept an interview request. Availability and block controls are in Settings → Account. Actual hiring interviews are not transcribed or analyzed by AI; any separately permitted recording is restricted to admin dispute review.

Your optional hiring data permissions

Accepting the terms at signup acknowledges the service disclosures. It does not grant optional quality measurement and AI training permission. Settings → Privacy lets you review the exact eligible profile and test-result source versions before granting that combined permission, exclude individual test results, and revoke both purposes. New profiles or additional sources need fresh explicit permission, and a new grant cannot restore a withdrawn matching source. You can continue using Fraace without this opt-in.

Withdrawal stops future permitted use immediately. Existing trained models require exclusion/retraining controls rather than instant untraining. Collection does not imply learned matching is live: activation requires validation and admin approval. Separate recording permissions and your private hiring feedback and check-ins are also accessible from Privacy settings. The Terms of Service explain assessment, matching, data scope, and hiring retention in more detail.

Simulations and public records

Some company simulations become shared public proof-of-work records after the run ends. When a simulation requires this, candidates must consent before requesting a seat. The published record may include the run log, tasks, decisions, messages, deliverables, archived proofs, AI-workspace trails, outcomes, and review/audit signals. Fraace scrubs AI trails before publication and avoids serving live links into personal AI accounts, but candidates should not include private personal, company, or third-party confidential information in simulation work unless the product expressly asks for it.

Sharing

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share personal data with service providers and processors that help us run Fraace, including hosting, storage, authentication, logging, security, AI/extraction providers, payments, e-signature, email, and support providers when those services are enabled. We also share data with candidates, companies, graders, reviewers, and public viewers through the product surfaces described in this policy, and with authorities or other parties when required by law or necessary to protect rights, safety, security, or platform integrity.

Retention & your rights

We keep personal data for the periods described above and for as long as reasonably needed to provide Fraace, support verified results, resolve disputes, prevent fraud, maintain security, meet legal obligations, and enforce our terms. Deleting verification data may remove the verified results it supports. Shared simulation, contract, payment, security, and audit records may be retained, anonymized, or detached from your profile where deletion would affect other users, legal obligations, or credential integrity.

Depending on where you live, you may have rights to know whether we process your personal data, access it, receive a portable copy, correct it, delete it, opt out of sale, sharing, targeted advertising, or certain profiling/automated decisions, limit use of sensitive personal information, appeal a denied request, and be free from retaliation or discrimination for exercising privacy rights. Candidate accounts can download a machine-readable export from Privacy Settings. You can also make a request by emailing hello@fraace.com. We may need to verify your identity before acting on a request.

State privacy notices

Texas residents may exercise rights under the Texas Data Privacy and Security Act, including access, correction, deletion, portability, opt-out rights for targeted advertising, sale, or certain profiling, appeal rights, and non-discrimination. Fraace does not sell sensitive personal data or biometric data.

California residents may have rights under the CCPA/CPRA if Fraace meets the law's applicability thresholds, including rights to know/access, delete, correct, opt out of sale or sharing, limit certain sensitive personal information uses, receive non-discriminatory treatment, and receive notices regarding automated decision-making where applicable. Fraace does not sell personal information or share it for cross-context behavioral advertising.

Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the data we hold. These include role-based access, private storage for résumés and test recordings, server-shaped public data routes, encryption in transit, file validation, and reviewer/admin restrictions for sensitive verification data. No system is perfectly secure, and you should keep your credentials confidential.

Changes

We'll update this policy as the platform evolves and change the date at the top when we do. Material changes will be announced in the product. See also our Terms of Service.

Key promises

We do not sell your personal data.
Companies do not receive raw proctoring footage through marketplace browsing.
Optional AI training is a separate opt-in.
Candidate accounts can export their data from Privacy Settings.