Privacy

How CandidAccess handles personal data. This is a placeholder outline; the full privacy notice will be published before launch.

Last updated: 28 October 2026 (draft)

Placeholder. This page is a draft outline, not the final legal text. It will be replaced before launch. TBD

This website

This website doesn’t use cookies, analytics or third-party trackers.
It doesn’t load fonts, scripts or images from other websites.
Our hosting provider processes standard technical data, such as IP addresses, to deliver pages and protect the site. TBD: hosting provider and log details
If you email us, we use your message and address only to reply about CandidAccess.

To be completed before launch. It will cover: TBD

who the data controller is, and how to contact us TBD: contact address
what we collect for agency accounts and team members
what we collect when scanning client websites (public pages only; no full-page copies or screenshots by default; findings include short code excerpts of the affected elements)
where data is hosted: EU data centers (Frankfurt, Germany), with encrypted backups in the EU
who can access reports: members of your organization, plus a small number of CandidAccess operators where needed to run and support the service
how long we keep data: reports expire on a schedule TBD: retention wording
subprocessors, data processing terms, export and deletion TBD
your rights and how to exercise them