Privacy Policy

This Privacy Policy explains how Highline Beta Inc. ("Highline Beta", "we", "us") collects, uses, and protects information when you use Candor (the "Service"), available at runcandor.com. By using the Service, you agree to the practices described here.

Information we collect

We collect the following categories of information:

• Account information. When you sign up, we collect your name, email address, and authentication identifiers. If you sign in with Google, we receive your name, email, and profile picture from Google — nothing else.
• Workspace content. Study definitions, uploaded documents, research inputs, generated personas, interview transcripts, and any other content you create or upload to the Service.
• Usage data. Logs of Service activity (requests, errors, timestamps, IP address, browser/device metadata) for reliability, security, and product improvement.
• Billing information. If and when paid plans are offered, payment data is handled by our payment processor; we do not store full card numbers.

How we use information

• To provide, maintain, and improve the Service.
• To authenticate you and secure your account.
• To run the AI and search components of the Service on your behalf (e.g. generating personas, answering interview prompts).
• To communicate with you about the Service, including updates and support.
• To detect, prevent, and address fraud or abuse.
• To comply with legal obligations.

Third-party service providers

The Service relies on a small number of subprocessors to function. Each receives only the data needed to perform its role:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting and edge delivery.
• Google — Sign-in with Google (OAuth).
• Anthropic — large-language-model inference used to generate personas, run interview simulations, and synthesize research outputs. Prompts and outputs are processed by Anthropic under their API terms and are not used to train their models.
• Voyage AI — text embeddings for document search.
• Tavily — web search used to ground generated evidence.
• Inngest — background job orchestration.
• Resend — transactional email delivery.

A complete, versioned list with data-residency and legal-entity detail is maintained at /subprocessors.

How we share information

We do not sell your personal information. We share information only: (i) with the subprocessors listed above, to operate the Service; (ii) with other users of your workspace, to the extent you add them or share content with them; (iii) when required by law, valid legal process, or to protect the rights, property, or safety of users or the public; and (iv) as part of a business transfer (merger, acquisition, or asset sale), in which case we will notify you.

Data retention

We retain account and workspace content for as long as your account is active. You may delete studies, personas, and uploaded documents at any time from the app. On account deletion, we remove your personal information and workspace content within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention and dispute resolution.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email us at ben@highlinebeta.com.

Security

We use industry-standard measures to protect your information, including encryption in transit, encrypted storage at rest via our infrastructure providers, and role-based access controls. No service can guarantee absolute security.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children.

International users

The Service is operated from Canada and the United States. If you access the Service from outside those countries, your information will be transferred to and processed in those jurisdictions.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

Contact

Questions about this Privacy Policy? Email ben@highlinebeta.com.