Last revised: August
This Privacy Notice explains how en-candy-ai.com (“Provider,” “we,” “us”) collects, uses, and discloses personal data from Members who visit the Platform, and the choices available to you. By continuing to use the Platform, you confirm you have read and accept this Notice as it may be updated from time to time; continued use after an update means you accept the revised version. If you disagree, please stop using the Platform. Where required by law, we will make reasonable efforts to notify you of material changes, including by email if you’ve provided one.
Information We Collect
Information you give us: if you contact us (e.g., at [email protected]), we collect what you submit, such as your name and email address. Usage data: collected automatically, including IP address, browser type and version, pages viewed, time spent, and device identifiers. Cookies: we use cookies and similar technologies to track activity and store certain information on the Platform.
How We Use Your Information
We use data you submit when contacting us to respond to your inquiry and pursue our legitimate interest in doing business with you. We use automatically-collected data (usage data, cookies, tracking technologies) for our legitimate interest in operating, securing, and improving the Platform, including analytics, troubleshooting, and statistics. You can configure your browser to reject cookies, though parts of the Platform may not work properly as a result.
Cookies and Tracking Technologies
We use cookies for several purposes. Essential/security cookies enable core site functions, authentication, and fraud prevention, and generally can’t be disabled without breaking functionality. Analytics/performance cookies help us understand usage and improve the Platform. Preference/advertising cookies personalize content and ads based on your browsing. Most browsers let you block, warn about, or delete cookies, though doing so may limit your experience.
How We Share Your Information
We may share data with service providers (analytics, hosting, advertising, support) under confidentiality agreements; with a buyer or successor in a merger, acquisition, or asset sale (with notice beforehand); with business partners for joint offers or promotions; with law enforcement or public authorities when legally required; and otherwise when we believe in good faith it’s necessary to comply with law, protect our rights or property, investigate wrongdoing, or protect user or public safety.
Children’s Privacy
The Platform is not intended for anyone under 18, and we do not knowingly solicit or market to children as defined by applicable law (13 in the US, 16 in the EEA). We may request proof of age at any time. If you believe a child has shared data with us, contact us at [email protected] so we can delete it.
How Long We Keep Your Data
We retain personal data only as long as needed for the purposes in this Notice, including to meet legal obligations, resolve disputes, and enforce our agreements. Usage data is generally kept for a shorter period unless needed for security, functionality improvements, or longer legal retention requirements.
International Data Transfers
We may store or process data in the EEA or elsewhere. If you access the Platform from outside the EEA, your data may be transferred to and processed in other countries. For EEA residents, we take appropriate steps to ensure adequate protection upon transfer; where consent to transfer is required, your acceptance of this Notice serves as that consent.
Data Security
We maintain industry-standard technical and administrative safeguards to protect your data from unauthorized access or use. No internet transmission is ever 100% secure, however, and we cannot guarantee against unauthorized access; we make no warranty to that effect. Contact us at [email protected] if you believe your data has been mishandled or the Platform misused.
Changes to This Notice
We may amend this Notice at our discretion at any time; updates are posted immediately with a revised effective date and take effect upon posting unless stated otherwise. Continuing to use the Platform after changes are posted means you accept them.
Rights for EU/EEA Members (GDPR)
For EEA individuals, we process data only where we have a legal basis: to perform a contract with you, to pursue a legitimate interest not outweighed by your rights, with your consent, or to meet a legal obligation. You have the right to access, correct, object to, or request erasure of your data; request portability of data you provided under consent or contract; and withdraw consent at any time (which may limit certain features). These requests are normally free unless manifestly unfounded, repetitive, or excessive, and we aim to respond within one month. Contact [email protected] to exercise any of these rights.
Categories of Data (California & Virginia)
Under CCPA/CPRA, we may have collected the following categories of personal data in the past 12 months: Identifiers (name, address, email, IP address, account name): Yes. Records under Cal. Civ. Code § 1798.80(e) (signature, SSN, financial or medical info): Yes. Protected classifications (age, race, religion, disability, etc.): No. Commercial data (purchase/consideration history): Yes. Biometric data: No. Internet/network activity (site interaction): Yes. Geolocation: No. Sensory data: No. Professional/employment data: No. Non-public education data: No. Inferences drawn from other data: No. Sensitive personal data (government IDs, precise geolocation, account credentials, etc.): No.
CCPA, CPRA & VCDPA Rights
California and Virginia residents may: request notice of categories collected and their purpose; request disclosure of the categories, sources, business purpose, and specific pieces of data we hold; opt out of the sale or sharing of personal data; opt out of targeted advertising or profiling (Virginia); request correction of inaccurate data; limit use of sensitive personal data; request deletion (subject to exceptions such as completing a transaction, security, legal compliance, or internal lawful use); and not be discriminated against for exercising these rights. We do not sell data of consumers under 16 without opt-in authorization from the consumer (13–16) or a parent/guardian (under 13). Submit any request to [email protected].
Do Not Track, Minors & Other Rights
The Platform does not respond to “Do Not Track” browser signals, though you can configure your own browser preferences. We do not knowingly collect data from anyone under 13; if we learn we have, we delete it promptly. California residents may also invoke the “Shine the Light” law to request information about disclosures made for direct marketing purposes, by writing to [email protected].