Privacy and data handling

Direct To Desk Candidate is designed to process account information, authentication details, shortlist selections, uploaded resumes, company targets, generated drafts, and workflow activity records.

If payment features are enabled, billing-related identifiers and processor references may also be processed to support subscriptions, invoicing, and transaction reconciliation.

We process personal and operational data to authenticate users, manage candidate workflows, generate tailored outreach content, support billing, maintain service integrity, and provide product support.

User content and workflow records should be stored using controlled access policies, role-based restrictions, and secure server-side integrations.

Production deployment should include retention schedules, incident response procedures, and vendor reviews appropriate to the regions and sectors being served.

The service may rely on third-party providers for authentication, storage, AI-assisted draft generation, billing, and mailing operations. Those providers may process data only to support the contracted service functions.

Users should be given a clear channel to request access, correction, deletion, or export of personal data where applicable under local law.

Before production launch, this policy should be reviewed and finalized with legal counsel to reflect the exact live data flows, jurisdictions, and operational practices.