Privacy Policy
This policy explains how Candao collects, uses, protects, shares, retains, and deletes information across Candao, AI Ghosts, Discovery, Delivery, marketplace, wallet, and related services.
Information we collect
- Account and profile information, including name, username, email, photo, role, location, preferences, and content you provide.
- Marketplace, project, asset, event, offer, pricing, activation, and related metadata.
- AI Ghost activity, including missions, prompts, interviews, generated drafts, Discovery results, Delivery approvals, and instructions.
- Wallet, payment, subscription, transaction, and entitlement information.
- Device, browser, IP address, session, error, cookie, authentication, and security information.
- Communications sent to Candao, other users, support, or through approved Delivery workflows.
How we use information
- Provide and personalize accounts, profiles, marketplace, Discovery, Leads, Delivery, subscriptions, credits, and AI Ghost workflows.
- Prepare, rank, score, and explain potential matches, leads, introductions, outreach, drafts, and next actions.
- Process payments, wallet actions, subscriptions, offer activation, and platform entitlements.
- Secure the service, prevent abuse, investigate errors, maintain reliability, and comply with legal obligations.
- Improve Candao features and product quality. Google Workspace API data is excluded from generalized AI model training.
Google user data and Gmail Delivery
When you connect Google for Delivery, Candao requests your connected account email and Gmail send access. An optional control requests read-only Gmail access to synchronize replies matched to active Delivery conversations.
- Send: Candao uses Gmail send access only after you review a prepared Delivery message and choose Approve and send.
- Read: When enabled, reply sync is limited to active Delivery threads with a known recipient and a verifiable relationship to Candao's latest sent Gmail message. Archived, blocked, reported, and deleted threads are excluded.
- Stored data: Candao stores the connected email, granted scopes, encrypted OAuth credentials and, for matched replies, the reply text, sender, subject, received time, and Gmail message and thread identifiers. Attachments are not imported.
- AI processing: Matched reply text and the related Delivery context are processed by Candao's contracted AI provider to prepare a follow-up draft for your review. External email content is treated as untrusted conversation data and cannot bypass system controls or user approval.
- Sharing: Google user data is shared only with contracted infrastructure, security, and AI-processing providers required to operate Delivery under confidentiality and data-protection obligations, when you direct a message to its recipient, or when legally required.
- Prohibited uses: Candao does not sell Google user data, use it for advertising, retargeting, surveillance, credit decisions, or train generalized AI models with it.
- Retention and deletion: Credentials remain while connected. Disconnecting requests Google revocation and deletes stored Delivery credentials. Settings provides a separate control to delete synchronized Gmail replies and drafts derived from them. Deleting a Delivery conversation removes its synchronized Gmail content. Account deletion removes credentials and imported reply content, except where retention is legally required.
More detail is available in Google Data Use.
Google API Limited Use
Candao's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI Ghosts, Discovery, and Delivery
Candao may use your profile, selected mission, listings, instructions, and approved context to identify opportunities and prepare communication. AI output can be imperfect. Delivery drafts can be edited, regenerated, or rejected, and email is sent only after the user approves the send.
Sharing and disclosure
- With other users when you publish, communicate, approve outreach, or use marketplace features.
- With providers supporting hosting, databases, analytics, AI processing, email, payments, blockchain infrastructure, security, and support.
- When required by law, legal process, safety obligations, fraud prevention, or protection of Candao, users, or the public.
- During a business transfer subject to appropriate protections and any consent required by applicable policy.
Retention and security
We retain information as needed to provide the service, meet legal obligations, resolve disputes, and protect the platform. Candao uses access controls, encryption for protected credentials, monitoring, data minimization, and organizational safeguards. No internet service can guarantee absolute security.
Your choices
- Update account, profile, listing, and marketplace information within Candao.
- Choose what to publish, which missions to run, and which Delivery messages to approve.
- Disconnect Google or delete synchronized Gmail data from Settings.
- Request account deletion, access, or privacy help through Candao Support.
- Some public blockchain records cannot be deleted by Candao.
Children and international use
Candao is not intended for people under 18. Information may be processed in countries other than where you live, subject to applicable safeguards.
Changes and contact
We may update this policy as Candao evolves and provide notice when changes are material. Privacy questions can be sent to support@candao.io.