Legal

Data protection note

Last updated: 13 November 2026. A plain-language note on how RecruiterDesk handles the personal data you hold as a recruiter. It sits alongside our full Privacy policy.

The short version. The candidate and client data you add is yours. You can export it or delete it at any time. We hold it as your processor, protect it, and use it only to run the product for you.

Who is responsible for what

Recruiting means handling other people's personal data, so it helps to be clear on roles. Data protection laws use similar language across regions, and RecruiterDesk is built to fit them:

  • For candidate and client records you create, you are the controller of that data (the data fiduciary, in some regimes). You decide why and how it is used, and you are responsible for having a lawful basis to hold it.
  • We are your data processor for those records. We process them only on your instructions, to provide RecruiterDesk to you.
  • For your own account and billing data, we are the controller, and we handle it as set out in our Privacy policy. This includes a limited marketing source recorded with your workspace at sign-up (the campaign or referring page a sign-up came from), so we can see which campaigns lead to sign-ups.

How we help you meet your obligations

Export anytime

Take your candidate and client data out whenever you want, in a usable format.

Delete anytime

Remove records, or close your account and have your data deleted, within a reasonable period.

Protected by design

Encryption in transit, access controls, and processors bound by contract to act only on our instructions.

Breach response

A process to detect, contain and, where required, report a data breach in line with the law.

The rights of the people whose data you hold

The individuals whose data you hold have rights under data protection law, including access, correction and erasure, and the right to raise a grievance. Where a candidate contacts us directly about data held in your workspace, we will point them to you as the controller and support you in responding. A data-protection grievance about RecruiterDesk itself can be raised at dpdp.grievance@recruiterdesk.io.

Consent and notice

As the controller for your candidate and client records, you are responsible for giving the notice and obtaining the consent that the law requires for the data you collect. RecruiterDesk gives you a clean, organised place to hold that data and to act on requests about it. Where you represent a candidate to a particular client, you can record their consent to that representation, with its date, on the candidate's record for that client. The submission details a client asks for (such as notice period, current and expected compensation, relocation, work mode and joining availability) and your screening assessments are candidate personal data like any other: you hold them as the controller, and we process them for you. The same applies to the availability details kept on a candidate's profile and carried to their next mandate (serving notice and last working day, buyout, earliest joining date, the basis of their compensation, openness to relocate and work mode), and to the history RecruiterDesk derives from your own records when a candidate left an earlier mandate by their own choice (withdrew, took another offer or a counter-offer, stopped responding or lost interest). That history shows the role, client, round and date to your recruiters, never includes a client's rejection, and is not used in the fitment score. Both are part of the candidate's record, so a request to export or erase that record covers them.

Collecting and sharing through the product

RecruiterDesk gives you links and pages to collect and share candidate data as part of hiring: a consent-gated application page, a consent confirmation link, an interview self-scheduling link, a no-login shortlist review link for your hiring client, and a hiring-status summary that shows counts only and no candidate names. These links are non-enumerable, can be paused or revoked, and are kept out of search engines. You can also download a submission as an Excel or CSV file in a client's own format and send it to that client yourself; you choose the fields it carries. You also get controls to limit what a client sees: an application requires the candidate's consent first, a resume can be shared as a confidential (blind) copy that covers phone, email and personal links, and a client review link can be set to blind mode, which masks the candidate's email and phone and serves the redacted resume by default.

Standards we align with

We build to the expectations of major data protection regimes, including the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023, so that recruiters and agencies can use RecruiterDesk wherever they work.

Cookies, analytics and local storage on this site

This website uses the strictly necessary cookies needed to make it work, together with Google's advertising tag for Google Ads on every page. We run ads for RecruiterDesk on Google; the tag measures the sign-ups those ads lead to and supports remarketing, may set Google advertising cookies, and shares data with Google as an independent controller. You can turn off ads personalisation at adssettings.google.com. We also run ads on ChatGPT (OpenAI); that measurement pixel loads in the application where a sign-up is completed, not on this site. To match a sign-up to the ad that led to it, the pixel shares a hashed form of the sign-up email with OpenAI, never the email itself; this is covered in full in our Privacy policy. We also run our own first-party, cookieless analytics, self-hosted on our servers and shared with no third party, which sets no cookie or identifier in your browser and honours your browser's Do Not Track signal; the full detail is in our Privacy policy. There are no full-page pop-ups. On the pricing page it makes a one-time, IP-based country lookup to show prices in your likely currency and keeps that choice in your browser's local storage; neither is used to track you. If we add further analytics or trackers, we will update our policies first.

Contact

For anything about data protection, write to privacy@recruiterdesk.io. To raise a data-protection grievance, use dpdp.grievance@recruiterdesk.io. By post: N53 Techworks LLP, N53 Techworks LLP, 19th Floor, Tower-B, Alphathum, Sector-90, Noida, Uttar Pradesh 201305, India.