Legal

Privacy Policy

Last updated July 2026

Who we are

CandiDesk is a recruitment technology platform built and operated by Gloura AI in Vienna, Austria. This policy explains what personal data we collect when you visit this website or use our product, why we collect it, and what rights you have over it. We have written it in plain language on purpose. If anything here is unclear, write to us at nikon.mazur@candidesk.io and a person will answer.

Data we collect on this website

If you book a demo or contact us, we store the contact details you give us and use them only to respond and to talk to you about CandiDesk. We do not buy visitor lists, we do not sell your address, and we do not add you to unrelated mailing lists.

This website itself keeps data collection to a minimum. We do not run advertising trackers. Basic technical logs, such as requests to our servers, are kept for security and reliability and are deleted on a rolling basis.

Data we process in the product

When a recruitment agency uses CandiDesk, two very different kinds of personal data are involved. The first is customer account data: names, work email addresses, and billing details of the people at the agency. For this data, CandiDesk is the data controller.

The second is candidate data: the CVs, conversations, call transcripts, and screening results that agencies process through the platform. For this data the agency is the data controller and CandiDesk acts strictly as a data processor on the agency's instructions. Our dedicated GDPR page explains this split, and every right you hold under it, in detail.

How we use data

We use personal data to provide and improve the service, to communicate with customers, to meet legal obligations, and to keep the platform secure. We do not use candidate data to train models for other customers, and we do not sell personal data to anyone, for any reason.

Cookies

This site uses only what is technically necessary. Your language preference is stored locally in your browser. We do not set advertising or cross site tracking cookies.

Sharing and transfers

We share data only with service providers who help us run CandiDesk, under contracts that hold them to the same standards we hold ourselves. Where any processing happens outside the European Economic Area, we rely on the safeguards described on our GDPR page, including Standard Contractual Clauses.

Retention

We keep personal data only as long as it is needed for the purpose it was collected for, or as long as the law requires. Candidate data inside the product follows each agency's own retention settings and is swept automatically when those windows expire.

Your rights

You can ask us at any time what data we hold about you, ask us to correct it, or ask us to delete it. You can also object to processing, ask for a copy you can take elsewhere, and complain to a supervisory authority. Each of these rights is explained in plain language on our GDPR page. To exercise any of them, email nikon.mazur@candidesk.io.

Contact

For anything related to privacy or data protection, contact nikon.mazur@candidesk.io. We answer quickly and we do not hide behind forms.