Privacy Policy

What we collect on this website

candlohq.com is a read-only site. You do not need an account to use it, and it has no login.

• →Your email address, only if you type it into an essay signup form. We store it with the essay you signed up from and the country your visit came from.
• →Anonymous visit counts: which page was opened, the country, whether the device was a phone or a computer, and a one-way hash that lets us tell that two events came from the same visitor on the same day. The hash changes every day and cannot be turned back into an address or followed across days.
• →Which Candlo product you clicked through to, so we know which links work.

What we do not collect here

• →Passwords, card numbers or bank details. Payments never touch this site.
• →Advertising or cross-site tracking identifiers. There are no third-party ad or analytics trackers on candlohq.com.
• →Your name, unless you put it in an email you send us.

Candlo products and accounts

Candlo is a set of products: the Trader Profiler, the Academy, the Curriculum, Mirror and the Store. Some of them have accounts or take payments. Each one collects what it needs to run and nothing else, and the rules below apply to all of them.

• →Account details: your email address and the way you sign in. If you sign in with Google, Google confirms who you are and shares your email address and basic profile with us. We do not receive your Google password.
• →What you create in a product: quiz answers, trades you log, paper trades, lesson progress and settings. It belongs to you and is shown back to you.
• →Payments: handled by Stripe or Payhip. They receive your billing details. We receive only the identifiers needed to know what you bought.
• →The Trader Profiler has its own policy with extra detail at profile.candlohq.com/privacy. Where a product publishes its own policy, that policy governs for that product.

Who else processes it

A small number of providers handle data for us. Each one gets only what it needs to do its job. We do not sell your data and we do not share it for anyone else's advertising.

• →Vercel hosts the sites and delivers them to you.
• →Supabase and Neon store the databases behind the website and the products.
• →Clerk handles sign-in for the Academy.
• →Google handles sign-in if you choose Sign in with Google.
• →Stripe and Payhip process payments.
• →Resend sends emails you asked for, such as a result breakdown.

How long we keep it

Email addresses from essay signups are kept until you ask us to remove them. Anonymous visit data is kept as counts so we can see what is working. Account data stays while your account exists and is removed when you delete it. Payment records are kept by Stripe and Payhip under their own rules, which tax law often requires.

Your choices

• →Ask for a copy of your data or ask us to delete it. Email hello@candlohq.com and we will do it. Deletion cannot reach into records a payment processor is legally required to keep.
• →Unsubscribe from any email with the link in it.
• →Depending on where you live you may have extra rights under laws such as the GDPR or the CCPA. Ask and we will honor them.

Security

Traffic is encrypted in transit and databases sit behind access controls. No service is perfectly secure and we will not pretend otherwise. If a breach affects your data we will tell you.

Children

Candlo is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a minor has given us their details, email us and we will remove them.

Changes

If this policy changes in a way that affects how your data is used, we will change the date at the top and email anyone who has an account.

Contact

Questions, data requests or deletion: hello@candlohq.com. Candlo is run by Nathanael Simeon.