Privacy Policy

Last updated: 2026-10-05

1. Who we are

CandorVoice ("CandorVoice", "we", "us") provides an employee and frontline feedback platform. Our website and application are available at https://candorvoice.com. For any privacy question or request, contact [email protected].

2. Scope

This policy covers the CandorVoice website, the CandorVoice application (including administrator and customer accounts), the public employee feedback submission pages reached by QR code or link, our blog, and any support or contact interaction with us.

3. Our role: controller and processor

Depending on the circumstances and applicable law, CandorVoice acts in different roles:

  • We are generally the controller of data we collect for our own website, customer accounts, billing, security, service operation and our own marketing.
  • For employee or frontline feedback that an organization collects through its CandorVoice workspace, that customer organization generally determines why and how the feedback is used. In that context the customer is typically the controller (or "business"), and CandorVoice generally acts as a processor (or "service provider") on the customer's instructions.

4. Employee and frontline feedback

An employer or organization creates a CandorVoice workspace and provides feedback channels (for example, a QR code posted at a workplace). Employees and frontline staff may submit feedback anonymously, or by name, where the organization enables those options.

  • We process submitted feedback to deliver the service to that organization.
  • Anonymous feedback is not intentionally associated with a name unless the person chooses to identify themselves.
  • We do not claim that anonymity is technically impossible to defeat. We process ordinary technical information (such as IP address, timestamps and basic device information) for security, abuse prevention, service reliability and legal compliance, and we minimize what is retained.
  • Customers control their own organizational decisions and responses to feedback.
  • CandorVoice does not make hiring, firing, promotion, discipline, compensation or other employment decisions.
  • AI-generated insights are assistive and must not be treated as automatic employment decisions (see section 8).

5. Data we collect

  • account identity and contact details (name, email address, role);
  • organization and workspace details, including the locations you configure;
  • subscription and billing metadata (plan, status, and identifiers provided by our payment processor);
  • authentication and security data (sessions, sign-in events, IP address, timestamps);
  • browser and device information in server logs;
  • usage and activity data within the application;
  • support and contact communications;
  • feedback content submitted through a workspace, the location it relates to, poll responses, and the actions or follow-ups taken by the organization;
  • the submitter's name or contact details only where the person chooses to provide them;
  • AI-generated classifications, summaries and signals derived from the feedback;
  • images or files you upload, where the feature is used;
  • blog and administrative content for CandorVoice's own marketing.

We do not use third-party advertising or analytics cookies, and we do not sell personal information.

6. Sensitive information

Feedback may describe sensitive matters such as health, disability, race or ethnicity, religion, union membership, sexual orientation, harassment or alleged misconduct. Please avoid including unnecessary sensitive details. Customer organizations are responsible for collecting and using that information lawfully, and CandorVoice processes the submitted content as necessary to provide the service. AI features must not be used to make employment decisions.

7. Why we process data and our legal bases

Where the GDPR or similar law applies, we rely on: performance of a contract (providing the service); legitimate interests (running, securing and improving the service and preventing abuse); legal obligation (for example, tax and accounting records); and consent where we specifically ask for it. Consent is not our universal basis.

8. AI-assisted features

CandorVoice uses AI to assist with classification, summarization, pattern detection and the generation of marketing content. AI output is assistive and may be imperfect or incomplete. CandorVoice does not make employment decisions on behalf of customer organizations, and customers should apply human judgment to any consequential decision. Where we use third-party AI providers, content may be sent to those providers to perform the requested task; the providers we use are listed in section 9.

9. Service providers and subprocessors

  • Hosting provider - servers and storage that run CandorVoice.
  • DeepSeek - AI text generation (assistive analysis and content).
  • OpenAI - AI image generation where enabled.
  • bundle.social - publishing to connected social accounts for CandorVoice's own marketing.
  • Email delivery - transactional and notification emails.
  • Payment processor - when you subscribe or buy a plan.

We do not list vendors we do not use. A current subprocessor list is available on request from [email protected].

10. International transfers

Some providers may process data outside your country, including outside the EEA or the UK. Where required, we rely on the safeguards those providers make available, such as standard contractual clauses. Contact us for more information.

11. Retention

  • Account data: while the account is active, plus a reasonable period for legal, security and dispute purposes.
  • Billing and legal records: for the period required by applicable law.
  • Workspace content (including feedback): according to the customer's settings and instructions and the applicable contract.
  • Logs and security records: for a limited operational and security period.
  • Backups: rotated on a regular schedule and deleted as they age out.

12. Security

We use administrative, technical and organizational safeguards designed to protect personal data, including encryption in transit, secure session cookies, access controls, tenant isolation between customer workspaces, least-privilege access, logging and backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

To help protect Feedback channels from repeated misuse, CandorVoice may use pseudonymous network and device identifiers and temporarily retain an encrypted network address. These security signals are used only for abuse prevention, they are not displayed to ordinary managers, and they are removed when the applicable retention period ends.

13. Your rights

Where applicable law provides them, you may request access to, correction of, or deletion of your personal data, or ask us to restrict or object to processing, request portability, or withdraw consent. Contact [email protected]. You may also complain to your local supervisory authority. Where a request concerns employee feedback controlled by a customer organization, we may need to direct you to that organization, and we will tell you if we do.

14. US state privacy laws

If a US state privacy law applies to you, you may have rights to know/access, delete, correct, and to opt out of sale or sharing, and to limit certain uses of sensitive information, without discrimination. CandorVoice does not sell personal information and does not share it for cross-context behavioral advertising. Where an opt-out preference signal is required, we honor it. Requests: [email protected].

15. Children

CandorVoice is a business and workplace service. It is not directed to children and is not intended for use by them.

16. Changes

We may update this policy as the service changes. We will revise the "last updated" date above, and material changes will be communicated through the service or on this page.

17. Contact

Privacy questions and requests: [email protected]. We will respond within the period required by applicable law.