Privacy policy
Last updated October 20, 2026
CandidateInbox is run by CandidateInbox LLC (“we”). It gives job seekers an email address for their job search, forwards every email sent to it to their own inbox, and matches each email to the application it is about. This policy explains what we collect, why, who it is shared with and how long we keep it. Questions: support@candidateinbox.com.
How you get an address
Most people get a CandidateInbox address through an app they use for their job search, such as ApplyRunner (“your app”). Your app asks for your agreement, then creates the address with us and tells us where to forward your mail. For that mail, we act on your app's behalf, and your app's own privacy policy also applies.
What we collect
| What | Details | From |
|---|---|---|
| Your address details | Name, your @candidateinbox.com address, the email we forward to, and when you agreed to the address being used for hiring-site accounts | Sent by the app you signed up through, or entered by you |
| Your applications | Company, role and date for the applications your app sends us, so emails can be matched to them | The app you signed up through |
| Email sent to your address | Sender, subject, text, links and the full original message | The people and sites who email you |
| What we work out | Whether an email is a verification email, its kind (received, interview, rejection and so on), the application it matches and a one-line summary | Us |
| Waitlist | Your email address, if you request access | You |
| Account and technical | For accounts created at candidateinbox.com: a hashed password. For everyone: delivery records and server logs | You and our systems |
How we use it
- To forward every email sent to your address to your own inbox, in full
- To pass hiring-site verification links to your app, so it can finish creating accounts you agreed to
- To sort each email and match it to one of your applications, and tell your app the result
- To retry failed deliveries, keep the service running, and prevent abuse
- To tell you when access opens, if you joined the waitlist
We do not sell your information, use it for advertising, or send email from your address. We never send job applications or replies to employers on your behalf.
Who it is shared with
Your app receives the emails sent to your address (sender, subject, text and links), the verification links, and how each email was sorted and matched. Each app sees only its own users.
Service providers process it for us, under contract, only to run CandidateInbox:
| Provider | What for |
|---|---|
| Amazon Web Services (United States) | Hosting and sending forwarded email (Amazon SES) |
| MongoDB Atlas (United States) | Database |
| Cloudflare | Receiving email for candidateinbox.com |
| Anthropic | Sorting emails: reads the subject and text of an email to say what kind it is and which application it is about. Never attachments |
We may also disclose information when the law requires it.
How long we keep it
| Item | Kept |
|---|---|
| Full original message | Only until it has been forwarded to you |
| Email content (subject, text, links) | 90 days, then deleted |
| What we work out (kind, matched application) | Until your address is closed |
| Your address | While your account with the app you signed up through is active, and for 12 months after the last application sent with it. Then it is closed and mail to it is refused |
| Everything | Deleted at once when you, or the app you signed up through, delete your account |
Security
Email is received and sent over encrypted connections where the other server supports it, our systems are reached only over HTTPS, and access to stored data is limited to the people who run the service.
Your choices and rights
- Close your address at any time through your app, or by writing to us. Mail to a closed address is refused
- Ask for a copy of your information, or for it to be corrected or deleted
- Depending on where you live, you may have further rights, such as to object or to complain to a regulator
Write to support@candidateinbox.com. We answer within 30 days.
Where it is stored
Your information is stored and processed in the United States.
Children
CandidateInbox is not for anyone under 16.
Changes
We will post any change here with a new date, and tell you through your app or by email before a significant change takes effect.