1. Who we are
Candara is an AI-powered company research platform. It produces structured reports on public and private companies, covering business model, competitive position, financial health, valuation and key risks, to help users evaluate a company quickly. Candara provides research only and does not give financial or investment advice.

2. What data we collect
If you create an account, we collect your name, email address, and a hashed password (we never see your raw password). We also store your report history — the companies you researched and the AI-generated reports produced. We do not collect payment information, health data, or any other sensitive personal data.

3. Why we collect it
Your name and email are used to create and manage your account. Your report history is stored so you can revisit past reports. We do not sell your data or use it for advertising, and we do not share it with third parties other than the service providers we use to run Candara, described in section 4.

4. How it is stored
All account data is stored securely on Firebase (firebase.google.com), Google's cloud platform. Data is encrypted in transit (HTTPS) and at rest. Access rules ensure your data is only accessible by you. We also use Google Analytics to understand how visitors use Candara, such as pages viewed and reports run. Google Analytics uses cookies and collects usage data such as your approximate location, device and browser; it does not receive your name or email address. Google's use of this data is governed by its Privacy Policy (policies.google.com/privacy), and you can opt out using your browser's privacy settings or Google's opt-out add-on (tools.google.com/dlpage/gaoptout).

5. Your Rights
You have the right to access, correct, and withdraw consent for the use of your personal data. You may request deletion of your account and all associated data at any time via the Account menu on Candara.

6. Data retention
We retain your data for as long as your account is active. When you delete your account, all your personal data and report history is permanently deleted within 30 days.

7. Cookies
We use essential session cookies required for authentication, and Google Analytics cookies to understand how Candara is used (see section 4). We do not use advertising cookies.