Litmus logoLitmushire people who last.

Privacy Policy

Last updated: May 16, 2026

1. Introduction

Litmus ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our platform at www.litmushiring.com ("Service").

2. Information We Collect

Account Information: Name, email address, and profile details provided during sign-up or through third-party authentication (e.g., Google).

Assessment Data: Code submissions, commit history, and assessment responses submitted by candidates.

Hosted Workspace Monitoring: For hosted VM assessments, Litmus records activity within the workspace, including files and code created or modified, version-control history, process and command activity, and network request metadata for outbound connections. Activity on the candidate's own device outside the hosted workspace is not observed. Candidates are shown a disclosure describing this and asked to acknowledge it before starting an assessment in a hosted workspace.

HTTPS Proxying: To capture network metadata, Litmus operates an in-workspace proxy that decrypts outbound HTTPS connections from the hosted workspace. Litmus records destination host, SNI, HTTP method, path, response status, and request duration. Litmus does not record request or response bodies, request headers, or query-string parameter values.

Usage Data: Pages visited, features used, browser type, and device information collected automatically.

Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.

3. How We Use Your Information

  • To provide and maintain the Service
  • To manage your account and authenticate your identity
  • To process payments and manage subscriptions
  • To send transactional emails (e.g., assessment invitations, account notifications)
  • To improve the Service and develop new features
  • To ensure security and prevent fraud
  • For candidates, to administer assessments, preserve assessment integrity, generate or support evaluation outputs, provide submissions and related assessment metrics to the hiring company that invited the candidate, troubleshoot hosted workspace functionality, and maintain platform security

4. Information Sharing

We do not sell personal information or share personal information for cross-context behavioral advertising as those terms are used under California privacy law. We may share information with:

  • Service Providers: Third parties that help us operate the Service (e.g., Clerk for authentication, Stripe for payments, Resend for email, Fly.io for hosted workspace infrastructure, Cloudflare R2 for workspace backup storage)
  • Employers: When you submit an assessment as a candidate, the hiring company can view your submission and related metrics
  • Legal Requirements: When required by law, regulation, or legal process

Submission Ownership: While you are interviewing, your submission remains your intellectual property; the hiring company receives a license to evaluate and store it for hiring decision purposes. If you accept a job offer from that company, ownership of the submission transfers to them at the point of acceptance. You retain ownership of anything you brought in (pre-existing code, open-source dependencies, and general skills). The full terms are in the Candidate disclosure you accept before starting an assessment.

5. Data Security

We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, support the hiring company's assessment process, maintain security and audit records, resolve disputes, and comply with legal obligations. Candidate assessment and workspace activity data is retained according to the hiring company's configuration or instructions, unless a longer period is required for security, legal, or dispute-resolution purposes. You may request deletion by contacting us, subject to legal, security, contractual, and operational retention requirements.

7. Your Rights

Depending on your location, you may have the right to:

  • Access and receive a copy of your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Object to or restrict certain processing

8. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page.

11. Contact

If you have questions about this Privacy Policy, contact us at support@litmushiring.com.