Privacy Policy

At Candilate, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform. By using Candilate, you consent to the practices described in this policy.

1. Information We Collect

We collect information you provide directly, information generated through your use of our services, and limited technical information necessary to operate the platform.

Account Information

When you register, we collect your email address, name, and password hash. We may also collect your phone number and country if you choose to provide them.

Candidate Data

You may upload or enter professional information including work experience, education, skills, certifications, projects, and career objectives. This data belongs to you and is used solely to power our AI analysis and CV generation features.

Uploaded Files

When you upload a CV in PDF, DOCX, TXT, or Markdown format, we extract text content for processing. Original files may be retained for reference but are not shared with third parties.

Usage Data

We collect anonymized usage metrics such as feature usage, AI request counts, and error logs to improve our service. We do not track you across the web.

Payment Information

We do not store credit card details. All payments are processed securely by Flutterwave, our payment processor. We retain transaction references, amounts, and status for billing and accounting purposes.

2. How We Use Your Information

• To provide, maintain, and improve Candilate services
• To generate AI-powered career analysis and CV content
• To process payments and manage subscriptions
• To communicate with you about your account, updates, and support requests
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

3. AI Processing

Candilate uses third-party AI providers to analyze your career data and generate content. When you use AI features, your data may be transmitted to these providers under strict confidentiality terms. We only share the minimum data necessary for the specific operation, and we do not authorize providers to use your data for training their general-purpose models.

4. Data Sharing

We do not sell your personal data. We share information only in the following limited circumstances:

• Service Providers: Trusted vendors who help us operate the platform (hosting, payment processing, email delivery) under strict data protection agreements.
• Legal Compliance: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

5. Data Retention

We retain your account and candidate data for as long as your account is active. You may delete your account at any time, which will permanently erase your personal data and candidate profiles from our systems. Some records, such as payment logs, may be retained for legal and accounting purposes as required by law.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted password storage (bcrypt), and access controls. However, no system is completely secure. You are responsible for keeping your password confidential and using a strong, unique password.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Request a copy of your data in a portable format

To exercise these rights, contact us at support@candilate.com.

8. Cookies and Tracking

Candilate uses essential cookies to maintain your session and authentication state. We do not use third-party tracking cookies for advertising purposes. We may use basic analytics to understand how our product is used, but this data is aggregated and anonymized.

9. Children's Privacy

Candilate is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Transfers

Your data may be processed and stored on servers located outside your country. We ensure that any international transfers are protected by appropriate safeguards, including standard contractual clauses where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or platform notice. Your continued use after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out through our support page or email us at support@candilate.com.

Candilate is operated by Yconsoft Technologies.