Privacy Policy — Candoor

1. Information We Collect

When you use Candoor we collect:

Account information — name, email address, and hashed password when you create an account.
Property searches — addresses you submit for report generation.
Payment information — processed by Stripe. We do not store card numbers.
Usage data — report history, plan type, and report usage counts.
Consent records — timestamp of your agreement to these terms.

2. How We Use Your Information

We use collected data to:

Generate and deliver property intelligence reports.
Manage your account and subscription.
Send report delivery emails and product updates (you may unsubscribe at any time).
Comply with legal obligations.

We do not sell your personal information to third parties.

3. Third-Party Services

Candoor uses the following third-party services to operate:

ATTOM Data Solutions — property records, permits, liens, foreclosure data.
FEMA National Flood Hazard Layer — flood zone classification.
First Street Foundation — flood factor scores.
GreatSchools — school rating data.
Google Maps — address geocoding.
Stripe — payment processing.
Resend — transactional email delivery.
Vercel — application hosting and infrastructure.

Each provider is bound by their own privacy policy. Property addresses you search are transmitted to ATTOM and related data providers solely to generate your report.

4. Data Retention

Reports and account data are retained for as long as your account is active. If you delete your account, your personal information and report history will be removed within 30 days, except where retention is required by law.

5. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and data.
Unsubscribe from marketing emails at any time via the link in any email we send.

To exercise these rights, email support@candoor.ai.

6. Security

Passwords are hashed using bcrypt and never stored in plaintext. Data is transmitted over HTTPS. We use Vercel's managed infrastructure which provides industry-standard security controls. No system is perfectly secure; use a strong, unique password.

7. Cookies

Candoor uses an HTTP-only session cookie to maintain your authenticated session. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email. Continued use of Candoor after changes constitutes acceptance of the updated policy.

9. Contact

Privacy questions or data requests: support@candoor.ai
Candoor · McKinney, TX