Legal

Data protection note

Last updated: 27 October 2026. A plain-language note on how RecruiterDesk handles the personal data you hold as a recruiter. It sits alongside our full Privacy policy.

The short version. The candidate and client data you add is yours. You can export it or delete it at any time. We hold it as your processor, protect it, and use it only to run the product for you.

Who is responsible for what

Recruiting means handling other people's personal data, so it helps to be clear on roles. Data protection laws use similar language across regions, and RecruiterDesk is built to fit them:

  • For candidate and client records you create, you are the controller of that data (the data fiduciary, in some regimes). You decide why and how it is used, and you are responsible for having a lawful basis to hold it.
  • We are your data processor for those records. We process them only on your instructions, to provide RecruiterDesk to you.
  • For your own account and billing data, we are the controller, and we handle it as set out in our Privacy policy. This includes a limited marketing source recorded with your workspace at sign-up (the campaign or referring page a sign-up came from), so we can see which campaigns lead to sign-ups.

How we help you meet your obligations

Export anytime

Take your candidate and client data out whenever you want, in a usable format.

Delete anytime

Remove records, or close your account and have your data deleted, within a reasonable period.

Protected by design

Encryption in transit, access controls, and processors bound by contract to act only on our instructions.

Breach response

A process to detect, contain and, where required, report a data breach in line with the law.

The rights of the people whose data you hold

The individuals whose data you hold have rights under data protection law, including access, correction and erasure, and the right to raise a grievance. Where a candidate contacts us directly about data held in your workspace, we will point them to you as the controller and support you in responding. A data-protection grievance about RecruiterDesk itself can be raised at dpdp.grievance@recruiterdesk.io.

Consent and notice

As the controller for your candidate and client records, you are responsible for giving the notice and obtaining the consent that the law requires for the data you collect. RecruiterDesk gives you a clean, organised place to hold that data and to act on requests about it.

Collecting and sharing through the product

RecruiterDesk gives you links and pages to collect and share candidate data as part of hiring: a consent-gated application page, a consent confirmation link, an interview self-scheduling link, a no-login shortlist review link for your hiring client, and a hiring-status summary that shows counts only and no candidate names. These links are non-enumerable, can be paused or revoked, and are kept out of search engines. You also get controls to limit what a client sees: an application requires the candidate's consent first, a resume can be shared as a confidential (blind) copy that covers phone, email and personal links, and a client review link can be set to blind mode, which masks the candidate's email and phone and serves the redacted resume by default.

Standards we align with

We build to the expectations of major data protection regimes, including the EU General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023, so that recruiters and agencies can use RecruiterDesk wherever they work.

Cookies, analytics and local storage on this site

This website uses the strictly necessary cookies needed to make it work, together with Google's advertising tag for Google Ads on every page. We run ads for RecruiterDesk on Google; the tag measures the sign-ups those ads lead to and supports remarketing, may set Google advertising cookies, and shares data with Google as an independent controller. You can turn off ads personalisation at adssettings.google.com. We also run ads on ChatGPT (OpenAI); that measurement pixel loads in the application where a sign-up is completed, not on this site, and is covered in our Privacy policy. We also run our own first-party, cookieless analytics, self-hosted on our servers and shared with no third party, which sets no cookie or identifier in your browser and honours your browser's Do Not Track signal; the full detail is in our Privacy policy. There are no full-page pop-ups. On the pricing page it makes a one-time, IP-based country lookup to show prices in your likely currency and keeps that choice in your browser's local storage; neither is used to track you. If we add further analytics or trackers, we will update our policies first.

Contact

For anything about data protection, write to privacy@recruiterdesk.io. To raise a data-protection grievance, use dpdp.grievance@recruiterdesk.io. By post: N53 Techworks LLP, N53 Techworks LLP, 19th Floor, Tower-B, Alphathum, Sector-90, Noida, Uttar Pradesh 201305, India.