Privacy policy

Last updated 30 October 2026

Candidleaf helps you prepare job applications. This page explains what we collect, why, who helps us run the service, and your choices. Contact us any time at [email protected].

What we collect

• Account: your email address and a password hash (we never store your password itself), optional two-factor settings, and, if you sign in with Google or LinkedIn, your name, email address and that service's account number (never a password or access token). If you sign in with an emailed code, we keep a scrambled copy of the code for 10 minutes.
• Your profile and documents: the CV you upload and the profile built from it, jobs you add, drafts we prepare, answers you save, and preferences Candidleaf learns from your approvals. These are encrypted at rest with a key unique to your account.
• Get-started quiz (before you have an account): your answers, and the CV if you upload one, are kept encrypted for up to 24 hours so you can finish signing up, then moved into your account or deleted. The CV is read by Claude (Anthropic) once to suggest roles. If you never sign up, it is deleted after 24 hours. To limit abuse we also count uploads per network address for an hour.
• Your answers to employer questions: things forms commonly ask (right to work, notice period, salary, driving licence, security clearance, languages). If you choose to share equal-opportunity answers (gender, ethnicity, disability, veteran status) they are stored encrypted and used only to fill forms that ask, and only as you gave them; you can leave them blank and change or delete them at any time.
• Free tools: text you paste into a free tool is processed in memory and not stored; no AI is used.
• Browser extension: when you ask it to, it reads the application form on the page you're on so it can fill it in, and the wording of the form's questions so they can be answered. It never reads other pages or your browsing history.
• Security records: sign-ins and important account events with IP address, kept for 180 days to protect your account.

How we use it

Only to provide the service you asked for: building your profile, tailoring CVs and cover letters, drafting answers, filling forms you open, reminding you to follow up, and keeping your account secure. We do not sell your data, use it for advertising, or share it with employers. Nothing is submitted to an employer except by you.

Who helps us run it

• Amazon Web Services (Ireland, EU): hosting, storage and sending email (Amazon SES).
• Anthropic: the Claude AI that drafts your documents. Your CV content and job descriptions are sent to it to generate drafts; your name and contact details are not sent for tailoring.
• Cloudflare: domain, DNS and protection of the website.
• Stripe: payments, if you pay for an account. We never see your card details.
• Google and LinkedIn: only if you choose to sign in with one of them.

Email

We send account emails you need (address confirmation, password resets, invitations, security alerts) and, only if you turn it on, a weekly digest of new job matches with a one-click unsubscribe. If an address bounces or reports our email as spam, we stop sending to it.

Cookies

Only the cookies needed to keep you signed in and protect forms. No analytics, advertising or tracking cookies.

How long we keep it

Until you delete your account. Deleting your account (Account → Delete) removes your profile, documents, jobs and everything learned, immediately. Encrypted backups roll off within 14 days, and security records after 180 days.

Your rights

You can download everything we hold about you (Account → Export my data), correct it in your profile, delete it, or ask us anything about it at [email protected]. You can also complain to your data-protection authority.

Security

Encryption in transit and at rest, per-account encryption keys, two-factor sign-in, and no plain-text passwords. If a breach ever affected your data, we would tell you and the relevant authority without undue delay.