CandiLite is built to help recruiters manage hiring data responsibly. This policy explains what we collect, how we use it, and how candidate information is handled when recruiters upload resumes and records into the platform.
If you are a candidate and your information was uploaded by a CandiLite customer, please contact the company or recruiter that uploaded it. We will support them in responding to your request.
This Privacy Policy explains how CandiLite, LLC (“CandiLite,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit candilite.com, submit a form, or use the CandiLite application, including related websites, features, and services (collectively, the “Service”).
CandiLite is an applicant tracking system for recruiters. Two different kinds of personal data may flow through the Service, and we treat them differently:
Customer and prospect information. Information about people who create an account, request a demo, contact us, or otherwise interact with CandiLite directly. For this information, CandiLite generally acts as the controller.
Candidate information uploaded by customers. Resumes, candidate records, notes, contact details, work history, education, skills, certifications, and related hiring information uploaded or created by our customers. For this information, the customer is generally the controller and CandiLite acts as a processor / service provider, processing it on the customer’s behalf and under the customer’s instructions.
If you are a candidate and want to access, correct, or delete information uploaded by a CandiLite customer, please contact the company or recruiter that uploaded your information. We will assist our customer as needed.
We use information to provide, operate, and maintain the Service; parse and structure uploaded resumes (see AI Resume Processing); respond to demo, contact, and support requests; send service-related communications; improve and secure the Service; and meet legal obligations. We do not sell your personal information, and we do not use candidate data for advertising.
To turn an uploaded resume into a structured candidate profile, the Service sends the resume’s text to our AI provider, Anthropic, which extracts fields such as contact details, experience, and skills and returns them to us. Anthropic acts as our sub-processor under its commercial terms. AI output can be inaccurate and is not a substitute for human review.
We share information only with providers that help us run the Service, each contractually bound to protect it and use it only for the purposes we specify:
We may also disclose information if required by law, to protect rights or user safety, or in connection with a business transfer such as a merger or acquisition. We do not sell personal information.
We keep account information while your account is active and as needed to provide the Service. We retain candidate data on our customer’s behalf until the customer deletes it or closes their account, after which we delete or de-identify it within a reasonable period, unless we must keep it longer by law.
We use reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS), row-level access controls in our database, and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live, you may have rights to access, correct, delete, or port your information, or to object to or restrict certain processing. For account data, contact us at hello@candilite.com. For candidate data uploaded by a customer, please contact that customer (the controller); we will support them in responding. We will not discriminate against you for exercising your rights.
The Service is operated from the United States, and our providers may store and process data in the United States. If you access the Service from outside the United States, your information may be processed in the United States.
The Service is not directed to children and is intended for people who are at least 18 years old (or the age of majority where they live). We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will post the updated version here and change the “Last updated” date. Where appropriate, we will communicate material changes.
Questions about this policy or your information: hello@candilite.com.
We’re here to help you understand how CandiLite handles your data.
