CanDesks is hiring software. Companies use it to publish roles, receive applications and decide whom to hire. This page says what personal data passes through CanDesks, why, where it is kept and who else handles it.
Who decides
An application, and everything a hiring team records about it, belongs to the company you applied to. That company decides how it is used; CanDesks keeps and processes it on the company's behalf. To see, correct or remove what a company holds about you, ask that company. If you cannot reach it, write to us and we pass your request on.
For this website, and for the accounts of the people who use CanDesks at work, CanDesks decides.
What we hold
- Candidates. What you send when you apply: your name, email, phone, CV and answers to the company's questions. What the hiring team adds: notes, interviews, feedback and decisions. What is read from your CV, such as work history, education and skills, and a match score for the role.
- Referrals. Who referred someone, their name and email, and any note they wrote.
- Early access requests. What a company tells us when it asks for early access: its details and hiring, and the contact's name, work email and job title, kept to decide and to email the answer.
- People who use CanDesks at work. Name, work email, role, and a history of what they did in CanDesks. A password is kept only as a one-way hash; someone who signs in with Microsoft needs none.
- WhatsApp. When a company turns on its assistant: the numbers it lists, the messages and CVs sent to its number, and each conversation for 30 days.
- Server logs. Requests and errors, kept for 30 days.
Who else handles it
CanDesks uses these providers, each only for what is listed, and sells personal data to no one.
- Amazon Web Services, Frankfurt
- Hosts CanDesks: its database, files and servers, in the European Union.Always
- TypeSafe
- Gives each application its match score. It receives the role's requirements and the work history, education and skills read from a CV, never a name, contact details or location.When a company scores applications
- OpenAI or Anthropic
- Reads CVs into a record, and writes the WhatsApp assistant's answers. The company chooses which, and uses its own account.When a company connects one
- Microsoft
- Signs people in with their work account, and sends and receives a company's email and calendar invitations through its own Microsoft 365. CanDesks' own notices come from info@candesks.com through Microsoft too.When a company connects Microsoft 365, and for CanDesks' notices
- Meta (WhatsApp)
- Carries messages between WhatsApp and a company's own number, and keeps them for up to 30 days.When a company turns on its WhatsApp assistant
- Google Fonts
- Serves the fonts of candesks.com's own pages: your browser asks Google for them.On candesks.com's own pages
The WhatsApp assistant
- It answers only the numbers a company adds, and only about what the company opens to it.
- Questions and answers, candidate data included, pass through Meta and the company's AI provider.
- It remembers the last 10 questions and answers of each person, and whom they asked about, for 30 minutes after their last message.
- Each conversation is kept in CanDesks for 30 days, to fix problems and test the assistant, then deleted. Only daily counts stay, with no text and no one named.
- When asked, it sends a candidate's CV, which then passes through Meta as messages do.
- It never writes first, and refers someone only after the sender confirms.
How it is kept safe
- Everything is stored in the European Union, in Frankfurt.
- Data is encrypted on its way to and from CanDesks and where it is stored. API keys and access tokens a company saves are encrypted again, each under its own company.
- Each company's data is kept apart from every other company's.
How long
- A company keeps its data in CanDesks for as long as it decides, and deletes it when it chooses.
- Backups are kept for 14 days. A copy taken before each software release is kept until five newer releases have replaced it.
- A deleted file can be recovered for 30 days, then is gone.
- WhatsApp conversations are deleted after 30 days.
Questions and requests
Write to hello@candesks.com. When this page changes, its date above changes with it.