Privacy Policy

Last updated: October 23, 2026

This policy explains what information Tacit Awareness (“Tacit”, “we”, “us”) collects through tacitawareness.com and through Tacit’s hiring software, including the Tacit ATS at ats.tacitawareness.com and the Tacit connector for Claude at ats-mcp.tacitawareness.com (together, the “Service”), how we use it, and the choices you have. Questions: ryan@tacitawareness.com.

Who this covers

• Members: people at a company that uses Tacit to hire (recruiters, hiring managers, interviewers), who sign in to the Service.
• Candidates: people applying to, or being considered for, a job at a company that uses Tacit, or applying to Tacit directly.
• Visitors to tacitawareness.com.

Information we collect

Account information. Your name, work email address, company, and access level, provided when your company invites you. Sign-in is handled by WorkOS; we do not see or store your password.

Hiring records. The jobs, candidates, applications, stages, notes, interview schedules, interview feedback and scorecards, offers, files (such as resumes), and email that members create or that candidates submit through an application form.

Google Calendar data. If you choose to connect your Google Calendar; see “Google user data” below.

Granola data. If you choose to connect Granola, we store an access grant for your Granola account and read the notes of interviews you were an interviewer on, only when you ask the Service for them.

Usage and security logs. A record of actions taken in the Service (which action, by whom, when, and on which record) to keep an audit history, enforce rate limits, and investigate misuse. These logs do not contain interview feedback, offer terms, or email contents.

Google user data

When you click Connect for Google Calendar in the Tacit ATS, Google asks you to grant Tacit these permissions:

• Your email address (openid, email): to show which Google account is connected and to address calendar invitations to you.
• See when you are busy (calendar.events.freebusy): to find interview times when you and the other interviewers are free. We read only busy and free time ranges, never the titles, descriptions, attendees, or other details of your events.
• Create and change events (calendar.events): to create an interview event on your calendar when you schedule an interview in Tacit (including a Google Meet link and invitations to the interviewers), and to move or cancel that event when you reschedule or cancel the interview in Tacit. We only change events Tacit created.

What we store. Your Google account email, the permissions you granted, and an OAuth refresh token, stored encrypted at rest in our database. The refresh token is never shown to you, to other members, or to any AI assistant. We store the Google event ID and link of each interview event we create. We do not store the contents of your calendar.

Who can see it. Your busy times are used only to compute available interview slots for members of your own company who are scheduling an interview you are on. They are not shown to candidates.

Limited Use. Tacit’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide the scheduling features described above, which you can see in the Service.
• We do not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models.
• No person at Tacit reads your Google user data unless you give us permission for a specific case, it is needed for security purposes or to comply with applicable law, or it is aggregated and anonymized for internal operations.

Disconnecting. You can disconnect Google Calendar at any time on the Integrations page of the Tacit ATS (ats.tacitawareness.com/client/integrations), which deletes your stored refresh token. You can also remove Tacit’s access at myaccount.google.com/permissions. Interview events already on calendars stay there until you or the attendees delete them.

How we use information

• To provide the Service: running your company’s hiring pipeline, scheduling interviews, sending email to candidates that a member has reviewed and approved, and showing reports.
• To secure the Service: authentication, access control, audit history, and rate limits.
• To respond when you contact us.

We do not sell personal information, and we do not use it for advertising.

AI assistants

Members can connect an AI assistant (such as Claude) to the Service. The assistant acts as that member and can read and change only what that member’s access allows. Information goes to the assistant only when the member uses it.

Who we share information with

We use these service providers to run the Service, each only for that purpose: Supabase (database and file storage), Vercel (hosting), WorkOS (sign-in), Resend (sending email), Google (calendar, if connected), and Granola (interview notes, if connected). Hiring records are visible to members of the company that owns them, according to the access their company gives them. We may disclose information if required by law.

Retention and deletion

A company’s hiring records are kept while it uses the Service, and deleted on its request when it stops. A company admin can permanently erase a candidate’s personal information from the Service at any time. Connected-account tokens are deleted when you disconnect. To ask us to access, correct, or delete your information, email ryan@tacitawareness.com. Candidates can also contact the company they applied to.

Security

Data is encrypted in transit (TLS) and at rest. Each member’s requests run under their own identity, and our database enforces which records each member can see.

Changes

We will post changes to this policy on this page and update the date above.