Privacy Policy
Effective Date: January 1, 2026 | Last Updated: October 2026
1. Introduction & Scope
This Privacy Policy governs the manner in which CandyArcFlow AI ("Company", "we", "our", or "us"), operating the website candyarcflow.com, collects, uses, maintains, and discloses personal information collected from users ("User", "you") of our website, phone consultation channels, and callback services.
We are fully committed to ensuring user privacy, transparency, and data protection in accordance with United States federal and state regulations, including the California Consumer Privacy Act (CCPA/CPRA), CalOPPA, and applicable Google Ads destination policies.
2. Information We Collect
We only collect personal information that is voluntarily provided by you or automatically collected during standard web interaction:
- Direct Contact Data: When you call our hotlines, submit an Instant Callback request, or complete our contact form, we collect your name, direct telephone number, email address, and any specific architectural notes you choose to share.
- Phone Consultation Data: If you speak with our engineers, we may record basic technical notes to provide accurate architecture advice. Any voice recordings for quality assurance are announced prior to call initiation.
- Technical Web Log Data: Non-personally identifiable information such as browser type, operating system, IP address, referral sources, and pages viewed, collected via standard server logs.
- Cookies & Local Storage: We use local storage and essential cookies solely to remember your site preferences (such as cookie consent dismissal).
3. How We Use Collected Information
CandyArcFlow AI uses your information exclusively for legitimate commercial purposes:
- To fulfill requested telephone consultations and deliver promised callbacks within 10 minutes.
- To evaluate technical feasibility and send follow-up architecture outlines to your email.
- To diagnose technical server errors and maintain website integrity.
- To prevent fraudulent activity and comply with legal requirements.
4. Zero Sale of Personal Data (CCPA Compliance)
We do not sell, rent, trade, or monetize your personal information to third parties or data brokers. We have not sold personal information in the preceding 12 months. Your telephone number and contact details are used strictly to communicate directly with our engineering team.
5. Telephone & Communications Consent (TCPA Disclosure)
By entering your phone number on our website forms and clicking the callback button, you provide express written consent for CandyArcFlow AI to contact you via telephone call or transactional SMS strictly related to your consultation request. We do not use automated robo-dialers for unsolicited telemarketing. Standard mobile carrier call and message rates may apply.
6. Data Security & Storage
We implement stringent industry-standard data collection, storage, and processing practices, including SSL/TLS 256-bit encryption for all data in transit. Access to contact and project data is strictly restricted to authorized engineering personnel under non-disclosure obligations.
7. Your Privacy Rights
Depending on your jurisdiction (including California residents under CCPA/CPRA):
- Right to Know / Access: You can request a copy of the personal information we hold about you.
- Right to Delete: You can request the permanent deletion of your phone number and records from our consultation logs.
- Right to Opt-Out: You can revoke consent for phone communication at any time by telling the engineer on the call or emailing our privacy officer.
8. Contact Information
If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact our Compliance Officer:
CandyArcFlow AI
Address: 500 Howard Street, Suite 400, San Francisco, CA 94105, United States
Telephone: +1 (415) 798-2834
Corporate Email: [email protected]
Website: candyarcflow.com