Privacy Policy
Effective date: August 21, 2026
Candor (“we”, “us”, “our”) is operated by Nick Langat, trading as Candor, and provides the customer support platform at usecandor.cc. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and your rights in relation to it.
By using the Service you agree to the collection and use of information as described here.
1. Data We Collect
Account and workspace information
When you register, we collect:
- Full name and email address
- Password (stored as a bcrypt hash, we never store plain text passwords)
- Workspace name and the roles of everyone you invite to it
Conversation data
When your customers reach out through a channel connected to your workspace, we store:
- Messages and attachments sent through your embedded widget, connected email address, or WhatsApp
- The customer's name, email, and country if they provide one
- Internal notes, labels, and assignment history your team adds to a conversation
Feedback and Knowledge Base content
Feedback items, votes, comments, and Knowledge Base articles are stored as you and your customers create them, along with the customer name or email attached to a feedback submission if given.
AI Voice Agent data
When a customer talks to your AI Voice Agent, we store:
- A transcript of the call and, if enabled, an audio recording
- The customer's name and a contact method, if they give one before the call is escalated to your team
- Call duration, used to track your workspace's voice-minutes usage against your plan
Billing information
Payments are processed by Paddle.com, our Merchant of Record. We store only your subscription plan, billing cycle, and payment status. We do not store raw card numbers or full payment card data.
Usage and technical data
We automatically collect:
- Browser type, IP address, and pages visited within the Candor dashboard
- Widget embed domain and configuration
- API request metadata for debugging and abuse prevention
2. How We Use Your Data
We do not sell your personal data to third parties.
3. Data Retention
You can request earlier deletion of your account and associated data by contacting us at privacy@usecandor.cc.
4. Third-Party Services
We share data with the following processors only to the extent necessary to provide the Service:
We do not share your conversation data or call recordings with advertisers or data brokers.
5. Security
We implement the following controls to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher (HTTPS)
- Passwords are hashed using bcrypt
- Widget and webhook secrets are stored server-side and never exposed to the browser
- Access to production systems is restricted to authorized personnel
- Regular security reviews and dependency updates
No system is perfectly secure. If you discover a vulnerability please disclose it responsibly at security@usecandor.cc.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention obligations)
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Restriction: Request that we restrict processing in certain circumstances
To exercise any of these rights, contact privacy@usecandor.cc. We will respond within 30 days.
If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.
7. Cookies
We do not use advertising or third-party tracking cookies.
8. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you by email at least 14 days before material changes take effect. The current version is always available at usecandor.cc/legal/privacy.
10. Contact
Candor Privacy Team
Email: privacy@usecandor.cc