Privacy
A plain-language summary of what Cander collects, why, who it goes to, and how long we keep it.
This page describes how the product actually works today. It is not a substitute for a reviewed legal privacy policy; the operator should have one checked against the rules that apply to their users.
What we collect
- Account: your email, display name, username, and optional profile details and picture.
- Calls: when you agree before a call, a text transcript is saved and scored. Without that consent a call isn’t saved or scored.
- Audio recordings: not stored unless you tick a separate box before a call. Team assessments never store audio.
- Scores and ratings derived from your calls, and the achievements you earn.
- Usage: anonymous counts of what happens in the product (calls started, scores shown, failures) to find bugs and understand what works. These never contain what you said.
- Where you came from: on your first visit we set one first-party cookie (30 days) holding the campaign words from the link you clicked (such as
utm_source), the website that sent you, and the page you landed on. It contains no ID or email and is not shared. If you sign up it is copied to your account so we can tell which sources lead to people who use the product.
Who handles it
- OpenAI — Runs the live voice conversation. Your voice is streamed to OpenAI during a call.
- Anthropic — Scores your call. Your saved transcript and the scenario are sent to Anthropic's Claude to write your scorecard.
- Supabase — Stores your account, calls, transcripts, scorecards and (if you opt in) recordings.
- Stripe — Handles payments. Your email is sent to create your billing account; card details go straight to Stripe and never touch Cander.
We don’t sell your data and we don’t send what you said to advertising services.
Who can see what
- Your transcripts, scorecards and recordings are private to you. Sharing a score or a video is always your explicit choice, and a shared score shows only the score, never the transcript.
- Your public profile and leaderboard entry exist only if you turn them on, and you choose which parts show.
- Team assessments: if an employer invites you, they see your name, scores and how you handled objections — never your transcript — and you’re told this before you start.
- Cander staff can view a transcript or scorecard only to investigate a problem, give support, or look into abuse. Every view is recorded in an access log.
How long we keep it
| Your account, profile, transcripts, scorecards, ratings and achievements | Until you delete them or your account. |
| Audio recordings (only if you opted in before a call) | 90 days, or until you delete them — whichever comes first. |
| Team-audit results you took part in | Until you delete your account or the audit owner deletes theirs. Only the audit owner sees them. |
| Subscription status (plan, renewal date) | Until you delete your account. Payment details and invoices are held by Stripe, our payment processor, as the law requires. |
| Product usage events (funnel and reliability counts, no conversation content) | 400 days, then deleted. Your account link is removed when you delete your account. |
| Per-call usage and cost records | 400 days, then deleted (and with your account). |
| Payment-event delivery log | 90 days. |
| Admin access log (which staff member viewed or changed what) | 2 years. It holds ids and actions, not the content that was viewed. |
Accounts aren’t deleted automatically for inactivity.
Your controls
- Delete your account and its data, any time, in Settings.
- Download a copy of your data from the same page.
- Delete recordings one at a time on a call’s page, or all at once in Settings.
- Choose whether your profile is public and what it shows.