Privacy Policy
Candl (“we”, “our”, or “us”) is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy explains what data we collect, how we use it, and your rights in relation to that data.
1. Who We Are
Candl is a digital platform designed to help individuals advance their careers through strategic preparation. Our services include tools to reflect on your experiences, prepare for interviews, track career objectives, and receive AI-powered insights tailored to your goals.
If you have questions or want to exercise your rights, you can contact us at: 📩 [email protected]
2. What Information We Collect
We only collect information you intentionally provide. The information we collect includes:
2.1. Account Information
- Name
- Email address
This information is required to register an account and communicate with you about your activity on Candl.
2.2. Professional Information
- Work experience
- Career preferences
- Professional social links (e.g., LinkedIn, GitHub)
- Uploaded resume or CV (optional)
You control the information you provide in your profile. You can update or remove it at any time.
2.3. AI Interaction Data
- Inputs you submit to generate insights (e.g., answers to prompts, past experience)
- Outputs generated by AI models based on those inputs
We store these outputs to help you revisit your past sessions and improve your experience.
2.4. Usage Data (Limited)
We collect minimal technical data (e.g., time of use, session activity) solely to improve our services. We do not use cookies, fingerprinting, or third-party trackers.
3. How We Use Your Information
We use your data to:
- Create and manage your Candl account
- Provide tailored insights and preparation tools for your career growth
- Generate and store AI-powered reflections or interview prep guidance
- Respond to your inquiries or support requests
- Improve our platform based on aggregate usage patterns (not identifiable data)
We do not:
- Sell your data
- Share your information for advertising
- Use third-party marketing integrations
Your data is never used to make automated decisions that have legal or similarly significant effects.
4. Legal Basis for Processing
Under GDPR, we process your data based on one or more of the following legal grounds:
- Consent – when you register, use our services, or upload documents
- Contractual necessity – to provide the service you signed up for
- Legitimate interests – to improve our platform and ensure security
- Legal obligations – if we are required to comply with applicable laws
5. Your Rights
You have the following rights regarding your personal data:
5.1. Right to Access
You can request a copy of your personal data held by us.
5.2. Right to Rectification
You can ask us to correct any inaccurate or incomplete information.
5.3. Right to Erasure (“Right to Be Forgotten”)
You may request the deletion of your personal data. If you delete your account, we will remove your identifiable information within 30 days.
5.4. Right to Restrict Processing
You may request that we limit how we process your data (e.g., if it’s being contested or verified).
5.5. Right to Object
You may object to how we process your data based on our legitimate interests. You may also object to direct communications, and we will stop immediately.
5.6. Right to Data Portability
You can request your data in a structured, commonly used format.
5.7. Right to Complain
You can submit a complaint to a supervisory authority. In Portugal, this is the CNPD (Comissão Nacional de Proteção de Dados).
6. Data Retention
We retain your data:
- For as long as your account is active
- For up to 30 days after account deletion, unless legal obligations require longer retention
- AI outputs are stored anonymously unless linked to active user sessions
You may delete your account at any time. Some anonymized data may be retained for platform improvement, but it cannot be traced back to you.
7. Data Security
We take appropriate technical and organizational measures to protect your personal data, including encryption in transit and access controls. We also monitor for unauthorized access and commit to notifying you in the event of a security breach that could affect your information.
8. International Data Transfers
Your information may be stored and processed in countries outside your country of residence. Where applicable, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.
By using Candl, you consent to the possible transfer of your personal data to jurisdictions that may not have the same level of data protection laws as your own.
9. Children’s Privacy
Candl is not designed for or marketed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe someone under 16 is using the platform, please contact us so we can take appropriate action.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page. If the changes are significant, we’ll notify you and request renewed consent where required.
The current version is always available at getcandl.io/privacy
11. Contact Us
If you have questions or requests related to this policy, reach out to:
[Insert contact email] Subject line: Privacy Request
Ready to advance your career?
Join thousands of professionals using Candl to prepare for their next career move.