Privacy Policy

The Service is intended for working professionals and organizations and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a minor has provided us information, contact us at privacy@candova.ai and we will delete it.

We collect the following categories of information:

• Information you provide: name, email, password, and profile details such as your role, company, and experience level; communications you send us; and survey or support submissions.
• Billing information: when you purchase a paid plan, our payment processors collect your payment details. We receive limited billing data (such as the last four digits of a card and billing contact), not full card numbers.
• Your Content and inputs: the prompts, documents, data, and real work you submit to lessons and to Cando in order to receive guidance and Output.
• Information collected automatically: device and browser type, IP address, approximate location, pages and lessons viewed, feature usage, and similar analytics, collected via cookies and similar technologies (see our Cookie Policy).
• Information from third parties: if you sign in through a single sign-on (SSO) or social login, or are enrolled by your employer on a Team or company plan, we may receive account and membership details from those parties.

We use personal information to:

• Provide, operate, secure, and improve the Service, including delivering lessons and generating guidance through Cando;
• Create and manage your account, process payments, and provide customer support;
• Personalize your learning experience and recommend relevant skills and content;
• Communicate with you about your account, updates, security, and, where permitted, marketing (which you can opt out of);
• Analyze usage to understand and improve the Service; and
• Detect, prevent, and respond to fraud, abuse, security incidents, and legal obligations.

We process Your Content (including prompts and the work you bring into lessons) to operate AI features and generate Output through Cando. We may use service providers, including third-party AI model providers, to process this content on our behalf under contractual confidentiality and security obligations.

We do not sell Your Content, and we do not use it to train third-party foundation models for their own purposes without your permission. We may use de-identified or aggregated data, which does not identify you, to analyze and improve the Service.

We share personal information only as described here:

• Service providers: vendors who host, process payments, send communications, provide analytics, or provide AI processing on our behalf, bound by confidentiality and security obligations;
• Your organization: if you use Candova on a Team or company plan, your administrators may access your account status, learning progress, and associated content;
• Legal and safety: when required by law, to respond to legal process, or to protect the rights, safety, and security of Candova, our users, or the public; and
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws.

We and our providers use cookies, web beacons, and similar technologies to operate the Service, remember your preferences, measure performance, and understand usage. For details and your choices, see our Cookie Policy.

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. You may request deletion of your account and associated data as described below.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and support for single sign-on. You are responsible for keeping your credentials confidential. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and request a copy;
• Correct inaccurate information or update your profile in account settings;
• Delete your account and associated personal information;
• Opt out of marketing emails using the unsubscribe link or by contacting us; and
• Object to or restrict certain processing, where applicable.

To exercise these rights, email us at privacy@candova.ai. We will respond consistent with applicable law and may need to verify your identity.

Residents of California and certain other U.S. states have rights to know, access, correct, and delete their personal information, to opt out of the “sale” or “sharing” of personal information and targeted advertising, and to not be discriminated against for exercising these rights. As noted above, we do not sell or share personal information for cross-context behavioral advertising.

California’s “Shine the Light” law allows California residents to request information about disclosures to third parties for their direct marketing purposes; we do not share personal information with third parties for their own direct marketing. To make a request, contact privacy@candova.ai.

Candova is based in the United States, and we process and store information in the United States and other countries where we or our providers operate. If you access the Service from outside the United States, you understand your information may be transferred to and processed in countries whose data-protection laws may differ from yours. Where required, we use appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

Because there is no common industry standard for “Do Not Track” signals, we do not currently respond to them. You can manage tracking through the cookie controls described in our Cookie Policy.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “last updated” date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.

For privacy questions or requests, contact us at privacy@candova.ai, or by mail to Candova, Inc., [company mailing address].