Privacy Policy

Overview

CandexAI (“CandexAI,” “we,” “us,” or “our”) provides a CandexAI platform that helps businesses manage omnichannel conversations, AI voice calling, CRM, campaigns, and automation across channels such as WhatsApp, Instagram, Facebook Messenger, web chat, email, and voice.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using candexai.com, our dashboard, APIs, widgets, or related services (collectively, the “Services”), you agree to the practices described here.

Information we collect

We collect information in three broad categories: account and billing data, platform usage data, and end-customer conversation data processed on your behalf.

• Account information — name, email, company name, role, password (hashed), and team membership details when you register or are invited to a workspace.
• Billing information — plan selection, payment method details (processed by our payment provider; we do not store full card numbers), invoices, and usage such as voice minutes and conversation volume.
• Configuration data — AI agent settings, knowledge-base uploads, CRM fields, automation rules, channel connections, and integration credentials you authorize.
• Conversation data — messages, call metadata, recordings or transcripts where enabled, contact profiles, tags, and campaign delivery logs generated through connected channels.
• Technical data — IP address, browser type, device identifiers, log files, cookies, and analytics events when you visit our website or use the dashboard.
• Support communications — emails, chat transcripts, and call notes when you contact our team.

How we use information

• Provide, operate, and improve the Services, including AI replies, voice calls, inbox routing, and analytics.
• Authenticate users, enforce role-based access controls, and maintain workspace security.
• Process billing, measure plan usage (e.g., included voice minutes), and send service-related notices.
• Train and tune AI features only where permitted by your plan settings and applicable law — we do not use your private knowledge-base content to train public models without consent.
• Detect abuse, fraud, spam, and violations of channel policies (including Meta WhatsApp Business policies).
• Respond to support requests and communicate product updates, security alerts, and optional marketing (you may opt out of marketing emails).
• Comply with legal obligations and enforce our Terms of Service.

AI, voice, and third-party processors

CandexAI uses AI and telephony infrastructure to power chat and voice experiences. Depending on your configuration, conversation content may be processed by subprocessors such as large-language-model providers, speech synthesis partners (including ElevenLabs for voice features), cloud hosting providers, and messaging channel APIs (e.g., Meta, Google).

We select subprocessors that maintain appropriate security standards. A current list is available on request at tech@candexai.co.in. Where you enable outbound AI calling or live voice demos, phone numbers and call scripts you submit are used solely to deliver that session.

When we share information

We do not sell personal information. We share data only as needed to run the Services:

• With subprocessors and infrastructure partners under contractual data-protection terms.
• With messaging and social platforms you connect (e.g., to deliver WhatsApp or Instagram messages on your behalf).
• With your authorized team members according to workspace roles and permissions.
• When required by law, regulation, legal process, or to protect rights, safety, and integrity of CandexAI and users.
• In connection with a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

Data retention

We retain account and billing records for as long as your subscription is active and for a reasonable period afterward to comply with tax, audit, and legal requirements.

Conversation and CRM data are retained according to your workspace settings and plan. You may export or delete much of this data from the dashboard; contact us for workspace deletion requests.

Free Spark accounts that remain inactive for an extended period may be archived or deleted after notice.

Security

We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, audit logging, and environment isolation for production workloads. Enterprise customers may receive additional controls such as dedicated support and custom onboarding under agreed SLAs.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact tech@candexai.co.in immediately.

Your rights and choices

• Access, correct, or export personal data associated with your account by emailing tech@candexai.co.in.
• Request deletion of your account, subject to legal retention requirements.
• Manage cookie preferences through your browser; essential cookies are required for authentication.
• Opt out of marketing emails via the unsubscribe link in any promotional message.
• If you are in the EEA, UK, or similar jurisdictions, you may have additional rights (access, portability, restriction, objection, and complaint to a supervisory authority).

International transfers

CandexAI may process and store information in countries other than where you reside. Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may be communicated by email or in-product notice.

Contact us

For privacy questions, data subject requests, or subprocessors list: tech@candexai.co.in

CandexAI · https://candexai.com