Privacy Policy

Last Updated: 2 June 2026

Introduction

This document sets out the privacy policy of Kandid Pro. Pty Ltd (referred to in this privacy policy as "we", "us", or "our"). We take our privacy obligations seriously and we've created this privacy policy to explain how we store, maintain, use and disclose personal information.

We are committed to preventing serious invasions of privacy and ensuring the protection of your personal information, so you can contact us using the details below if you have any questions or concerns.

By providing personal information to us, you consent to our storage, maintenance, use and disclosing of personal information in accordance with this privacy policy.

We may change this privacy policy from time to time by posting an updated copy on our website and we encourage you to check our website regularly to ensure that you are aware of our most current privacy policy.

Types of Personal Information We Collect

The personal information we collect may include the following:

name;
mailing or street address;
email address;
social media information;
telephone number and other contact details;
credit card or other payment information;
information about your education, work experience and employment history;
information about your business or personal circumstances;
information in connection with client surveys, questionnaires and promotions;
your device identity and type, I.P. address, geo-location information, page view statistics, advertising data and standard web log information;
information about third parties; and
any other information provided by you to us via our website or our online presence, or otherwise required by us or provided by you.

How We Collect Personal Information

We may collect personal information either directly from you, or from third parties, including where you:

contact us through our website;
receive goods or services from us;
submit any of our online sign up forms;
communicate with us via email, telephone, SMS, social applications (such as LinkedIn or Facebook) or otherwise;
interact with our website, social applications, services, content and advertising; and
invest in our business or enquire as to a potential purchase in our business.

We may also collect personal information from you when you use or access our website or our social media pages. This may be done through use of web analytics tools, "cookies" or other similar tracking technologies that allow us to track and analyse your website usage. Cookies are small files that store information on your computer, mobile phone or other device and enable and allow the creator of the cookie to identify when you visit different websites. If you do not wish information to be stored as a cookie, you can disable cookies in your web browser.

Use of Your Personal Information

We collect and use personal information for the following purposes:

to provide goods, services or information to you;
for record keeping and administrative purposes;
to provide information about you to our contractors, employees, consultants, agents or other service providers who process personal information on our behalf;
to improve and optimise our service offering and customer experience;
to comply with our legal obligations, resolve disputes or enforce our agreements with third parties;
to send you marketing and promotional messages and other information that may be of interest to you and for the purpose of direct marketing (in accordance with the Spam Act). In this regard, we may use email, SMS, social media or mail to send you direct marketing communications. You can opt out of receiving marketing materials from us by using the opt-out facility provided (e.g. an unsubscribe link);
to send you administrative messages, reminders, notices, updates, security alerts, and other information requested by you; and
to consider an application of employment from you.

We may disclose your personal information to cloud providers, contractors and other service providers who process it on our behalf for the purpose of operating and providing the platform, located inside or outside of Australia. We do not sell your personal information or disclose it to third parties for any other purpose, except where required by law or with your consent. Where we disclose personal information to an overseas recipient, we will take reasonable steps to ensure that recipient has similar legal safeguards and handles it consistently with this policy.

Security

We take reasonable steps to ensure your personal information is secure and protected from misuse or unauthorised access. Our information technology systems are password protected, and we use a range of administrative and technical measures to protect these systems. However, we cannot guarantee the security of your personal information.

Third-Party Logins

If you choose to create an account or log in to the Platform using a third-party account (such as Sign-in with Google, LinkedIn or GitHub), we use the respective provider's OAuth authentication service to verify your identity.

Google Calendar Integration (optional): If you separately choose to connect your Google Calendar, Kandid.pro will request additional OAuth permission to access your Google Calendar. This is a separate, optional consent step and is not required to use Kandid.pro. See the "Google Calendar Integration" section below for full details of what data is accessed, stored, and how to disconnect.
Information We Receive: These identity providers share limited profile information with us, typically consisting of your unique provider user ID, verified email address, first name, last name and profile picture URL.
How We Use It: We use this information solely to create your Kandid Pro. account, authenticate your secure login sessions and populate your user profile dashboard.
No Ongoing Access or Tracking: We do not request, store, or retain access tokens or refresh tokens from Google, LinkedIn, or GitHub. We do not have ongoing access to your external accounts, we cannot view data stored within your other services and we do not make post-login API calls to these providers.

Calendar Integration (Google Calendar & Microsoft Calendar)

Kandid.pro offers optional calendar sync with Google Calendar and Microsoft Calendar. Connecting either provider is entirely voluntary and can be disconnected at any time. Each provider can be configured independently with its own sync direction.

What data Kandid.pro reads from your calendar

When you enable calendar sync, Kandid.pro reads the following data from your connected calendar: event title, start date and time, and end date and time. Kandid.pro does not read event descriptions, attendee lists, video call links, or any other event fields.

What data Kandid.pro writes to your calendar

Calendar events you create in Kandid.pro (such as interview appointments) are pushed to your connected calendar, including the event title, description, location, date and time, and any recurrence settings you have configured.

How access tokens are stored

To enable ongoing sync, Kandid.pro stores your OAuth access token and refresh token, encrypted at rest using AES-256 encryption, in Kandid.pro's secure database. These tokens are used solely to read and write calendar events on your behalf and for no other purpose.

How calendar data is used

Calendar data accessed by Kandid.pro is used exclusively to display your events alongside your Kandid.pro job application events in the Kandid.pro calendar view. This data is never sold, used for advertising, or provided to any AI or language model, and is not shared with third parties other than the infrastructure providers that host and process it on our behalf.

Sync directions

Kandid.pro offers three sync directions you can configure in Settings for each provider:

Kandid.pro → Calendar (Push only): Events created in Kandid.pro are pushed to your external calendar. Any changes you make to these events in your external calendar will automatically sync back to Kandid.pro.
Kandid.pro ← Calendar (Pull only): Events from your external calendar are imported into Kandid.pro. Only the event title and time are imported — descriptions are not included. Events created in Kandid.pro will not be pushed to your external calendar.
Kandid.pro ↔ Calendar (Bidirectional): Full two-way sync. Events created in Kandid.pro are pushed to your external calendar, and events from your external calendar are imported into Kandid.pro.

When switching from a mode that imports external events to push-only, you will be prompted to keep or delete previously imported events.

Data retention

Imported calendar event data is stored in your Kandid.pro account for as long as you remain connected or until you request deletion. Upon disconnecting a calendar provider, your OAuth tokens are immediately revoked and deleted from Kandid.pro's database. You have the option at the time of disconnection to permanently delete all calendar events previously imported from that provider. You may also request deletion of imported events at any time through the Calendar Sync settings page.

Disconnecting

You can disconnect either calendar provider at any time from Settings → Integrations. Upon disconnection, Kandid.pro will revoke your OAuth tokens, and you will retain full control over whether previously imported event data is deleted. Disconnecting one provider has no impact on the other.

Google API Services User Data Policy

Kandid.pro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Browser Extension

This is an optional browser extension for Chrome and Microsoft Edge that allows you to import job listings and professional profile information from supported websites directly into your Kandid.pro account.

Supported Platforms

The extension operates on the following websites:

LinkedIn (linkedin.com) — job listings and professional profiles
Seek (seek.com.au, seek.co.nz, seek.com) — job listings
Indeed (indeed.com, au.indeed.com) — job listings

Data Collected

Job Listing Data. When you choose to import a job, the extension extracts the following information from the page you are viewing:

Company name
Job title
Job description
Location
Employment type
Salary information (if available)
Job posting URL

LinkedIn Profile Data. When you choose to import a LinkedIn profile, the extension extracts:

Full name
Professional headline
Location
Profile URL
About/summary text
Work history (job titles, companies, dates, and descriptions)
Education history (institutions, qualifications, and dates)

Configuration Data. The extension stores the following data locally in your browser using Chrome's sync storage:

Your API key (used to authenticate with Kandid.pro)
Extension preferences and settings

How Data Is Collected

The extension loads supporting scripts on supported websites listed above. However, no data is extracted or transmitted until you explicitly initiate an import action through the extension popup. The extension does not collect data passively or in the background.

How Data Is Used

Extracted job and profile data is transmitted securely (HTTPS) to the Kandid.pro backend API using your personal API key. Imported data is stored in your Kandid.pro account and used solely for job application tracking and contact management. We do not sell extension-collected data, and we do not share or disclose it to third parties except the service providers (such as our cloud hosting provider) who process it on our behalf to operate Kandid.pro, as described under 'Use of Your Personal Information' above. We do not collect usage analytics, employ tracking pixels, or use third-party analytics tools within the extension.

API Key Security

Your API key is stored locally in your browser's encrypted sync storage. On our servers, API keys are stored as SHA-256 hashes only — we do not retain your key in plain text. You may revoke your API key at any time through the Kandid.pro web application.

Browser Permissions

The extension requests the following browser permissions, each necessary for its operation:

Storage — to save your API key and extension settings locally in your browser.
Active Tab — to access the content of the current tab when you initiate an import.
Scripting — to inject content scripts on supported job sites for data extraction.
Notifications — to display browser notifications confirming import success or failure.
Alarms — to schedule periodic checks such as API key validation.
Web Navigation — to detect page changes on single-page applications (e.g., LinkedIn) so the extension can respond when you navigate between job listings.
Host Permissions — the extension has access to pages on LinkedIn, Seek, Indeed, and api.kandid.pro only. It does not access any other websites.

Data Retention

Temporary job and profile data held within the extension is cleared after each import. The extension does not cache or persistently store job listings or profile information locally. Imported data stored in your Kandid.pro account is subject to the retention practices described elsewhere in this policy.

Removing Extension Data

You may clear your API key at any time from the extension's settings page. Uninstalling the extension removes all locally stored data. To delete imported data from your Kandid.pro account, manage your records through the Kandid.pro application or contact us at support@kandid.pro.

Disconnection

You may uninstall the extension at any time. Upon uninstallation, all locally stored data (API key, settings, and preferences) is automatically removed by your browser. Data previously imported into your Kandid.pro account will remain until you delete it.

Links

Our website may contain links to other websites. Those links are provided for convenience and may not remain current or be maintained. We are not responsible for the privacy practices of those linked websites and we suggest you review the privacy policies of those websites before using them.

Requesting Access or Correcting Your Personal Information

You can access and download all of the personal information we hold about you at any time directly from your account by going to Settings → Account and selecting the Export Your Data option. If you would prefer to request access another way, please contact us using the contact details set out below, including your name and contact details. We may need to verify your identity before providing you with your personal information. In some cases, we may be unable to provide you with access to all your personal information and where this occurs, we will explain why. We will deal with all requests for access to personal information within a reasonable timeframe.

If you think that any personal information we hold about you is inaccurate, please contact us using the contact details set out below and we will take reasonable steps to ensure that it is corrected.

Complaints

If you wish to complain about how we handle your personal information or believe your privacy has been seriously invaded, please contact us using the details provided below with your name and contact details. We will investigate your complaint promptly and respond within a reasonable timeframe.

Contact Us

For further information about our privacy policy or practices, or to access or correct your personal information, or make a complaint, please contact us using the details set out below:

Name: Kandid Pro Pty Ltd Email: support@kandid.pro

Our privacy policy was last updated on 2 June 2026.