Privacy Policy

At CandyArc Flow ("we," "our," or "us"), accessible via candyarcflow.com, we are committed to maintaining the trust and confidence of our visitors and professional research subscribers. This Privacy Policy details the types of personal and technical data we collect, how it is processed and protected, and your statutory rights under applicable privacy legislation, including the California Consumer Privacy Act (CCPA/CPRA) and General Data Protection Regulation (GDPR) standards.

1. Information We Collect

When you interact with candyarcflow.com, we may collect the following categories of information:

• Directly Provided Information: When you submit a request for our free technical research blueprint, architectural whitepaper, or contact us, you voluntarily provide your full name, corporate email address, and professional phone number.
• Automated Usage Data: When navigating our site, our servers and analytics automatically record technical connection data, including IP address, operating system, browser type, referring URLs, time spent per page, and interaction events.
• Cookies & Tracking Identifiers: We utilize essential session tokens and analytics cookies to measure site performance and retain user preferences.

2. Purpose and Lawful Basis for Processing

We process your personal information exclusively for legitimate, transparent business purposes:

• To generate and deliver the requested independent AI research blueprints and benchmarks.
• To verify professional inquiry authenticity and avoid automated spam submissions.
• To diagnose technical server errors and optimize client-side computational tooling.
• To comply with binding legal, regulatory, and tax compliance obligations.

3. Google Ads & Third-Party Disclosure Policy

In strict compliance with Google Ads Transparency & Data Collection Policies:

• No Sale of Personal Data: We do not sell, rent, monetize, or trade your personal data to data brokers or unrelated third parties.
• Targeting Transparency: When paid advertising campaigns are active on Google Ads, data is collected solely to attribute legitimate user interactions. We do not use sensitive personal categories or prohibited remarketing lists.
• Service Providers: Information is only shared with authorized hosting infrastructure (e.g., enterprise cloud servers) acting strictly as data processors under contractual confidentiality.

4. California Privacy Rights (CCPA / CPRA Notice)

If you are a California resident, you possess specific rights regarding your personal information under California Civil Code Section 1798.100 et seq.:

• Right to Know: You may request disclosure of the specific pieces and categories of personal data we have gathered about you over the preceding 12 months.
• Right to Delete: You have the right to request deletion of your personal data collected by us, subject to statutory exceptions.
• Right to Opt-Out: Because we do not sell or share personal data for cross-context behavioral advertising, no opt-out is required; however, you can submit a formal non-sharing request at any time.
• Right to Non-Discrimination: We will not deny you research publications or alter service levels for exercising your privacy statutory rights.

5. Data Retention & Security Architecture

We employ industry-standard transport layer security (TLS 1.3 encryption) and hardened cloud storage controls to prevent unauthorized access, alteration, or interception of user data. Information provided via download forms is retained only as long as necessary to fulfill the research delivery and maintain audit compliance, after which it is securely anonymized or destroyed.

6. Cookies & Consent Management

You can adjust your cookie settings through the banner provided on our website or through your web browser preferences. Rejecting non-essential analytics cookies will not restrict your access to our free benchmarks, research papers, or calculator tools.

7. Contact Information and Data Protection Officer

If you have questions, inquiries, or wish to exercise your data protection rights under CCPA or GDPR, please contact our compliance desk directly: