Privacy Policy

Last updated: 23 July 2026 · Applies to candidrecord.com and the website assistant. Account creation takes place separately on v6.candidrecord.com.

CandidRecord is built on a simple promise: your data is yours. We don't run third-party ad trackers, we don't sell your data, and nothing is ever sent or applied on your behalf.

Who we are

CandidRecord ("we", "us") operates candidrecord.com. For any privacy question or request, contact info@candidrecord.com.

What the public website collects

Website assistant messages, if you choose to use chat. Please do not include CV details, passwords, API keys or sensitive personal details in chat.
Standard server logs (such as IP address and browser type) kept briefly for security and abuse prevention. Chat turn logs record timing, a session-token hash and provider metadata only, not message text.

We do not use advertising cookies or third-party tracking scripts on this site, so there is no cookie banner. The website assistant uses sessionStorage in your browser to remember the current chat and does not set cookies.

Website assistant

If you send a chat message, it is sent to CandidRecord's server and may be processed through OpenRouter, a third-party LLM provider, so the assistant can answer from our approved FAQ. Contact details are sent only if you choose to pass a message to a human.

Account creation and access

The public website links to v6.candidrecord.com, where account creation, email verification, sign-in and access decisions take place. The public website does not receive or share your v6 session cookie or authentication token.

The former website waitlist is no longer an access route. If you submitted an address previously, that record is preserved pending a separate data-handling decision; it is not copied into v6 and does not itself create or approve an account. Contact us to exercise your rights over it.

How long we keep data

Account and application retention controls are described inside v6. Public-site server logs are kept only as long as needed for security and abuse prevention.

Who we share it with

We do not sell your data. Website-assistant data is shared only with service providers needed to operate that feature, under agreements limiting them to processing on our behalf.

Your choices and rights

Ask us for a copy of the data we hold about you, or to correct or delete it.
Withdraw consent at any time where consent is the lawful basis.

To exercise any of these, email info@candidrecord.com. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Changes

If we change this policy we'll update the date above.