Data kept and retention
What Elsin stores, how long each kind is kept, and how to export or delete it.
Fixed periods
| Data | Kept for |
|---|---|
| Raw network address of an applicant or offer signer | 90 days, then only a keyed hash |
| Unsubmitted résumés and orphaned files | 2 days |
| In-app notifications | 180 days |
| Sent candidate status emails | 90 days, or 30 if never sent |
| Webhook deliveries | 30 days, 60 at most |
| Integration events | 180 days |
| Billing events | 400 days |
| Activity log and API call log | 2 years by default; 1, 2 or 5 years in Settings |
Verification data has its own schedule, in biometrics. A daily job applies every period.
Closed candidates
By default Elsin keeps candidates until you delete them. In Settings, Data retention, you can have candidates deleted 180, 365 or 730 days after every one of their applications was rejected or withdrawn. Anyone with an open or hired application is never touched.
Exporting
An owner can download the whole workspace as a ZIP: every table as JSON and CSV, plus every file up to 1 GB, with stored credentials withheld. Elsin asks them to sign in again first if they have not in the last 15 minutes.
Deleting
- A candidate: recruiters and above, after typing the candidate's name. Only a record that the deletion happened is kept.
- The workspace: an owner, after signing in again and typing the slug. It is deleted 30 days later, any owner can cancel until then, and billing stops renewing.
- A candidate's own account: from their portal.
Protection
- Row-level security in the database keeps each workspace's rows to its own members.
- Integration keys are stored encrypted and never shown again.
- Identifiers compared across employers are keyed hashes or fingerprints whose key only the Elsin server holds.
- Settings changes and every API and MCP call are logged for admins.
Signing in
Continue with Surf, Continue with Google, or email with a password of at least 8 characters or a one-time link. Email links work once and expire after an hour. Changing a password needs a fresh email sign-in.
Two-factor sign-in is not available yet.
Legal
The privacy policy, terms, data processing addendum, sub-processors and security overview set out the commitments in full.