Privacy Policy

The controller of personal data of Candy Lab platform users is [registration details to be completed], contact: hello@candylab.io.

This policy describes what data we process in connection with the platform, for what purpose and on what legal basis.

Account data: email address, name, credentials stored as an irreversible hash.

Integration data: git account credentials and AI provider keys — stored encrypted and never returned to the browser.

Usage data: technical logs, IP addresses, pipeline events, agent conversation history and Project content.

Delivering the service and billing — Art. 6(1)(b) GDPR (performance of a contract).

Security, diagnostics and abuse prevention — Art. 6(1)(f) GDPR (legitimate interest).

Accounting and tax obligations — Art. 6(1)(c) GDPR.

Analytics and marketing beyond what is necessary — Art. 6(1)(a) GDPR (consent, which can be withdrawn).

We use the following providers, to whom we entrust data processing:

Anthropic — language-model provider; processes Project and conversation content as needed to carry out an agent task.

GitLab — hosting for code repositories, including company repositories and backup copies.

DigitalOcean — server infrastructure running the platform and its databases.

The current list is available on request at hello@candylab.io.

If the Client places personal data in a Project (for example in a test database, an import file or the code), the Client remains its controller and the Provider processes it solely on the Client's instructions, as a processor.

Such processing requires a separate data processing agreement (Art. 28 GDPR). We conclude one at the Client's request — contact: hello@candylab.io.

The “Report a bug” form collects: the bug's title and description, the selected application and severity, the address of the page the report came from, your browser, operating system, window size and language, optional screenshots and — only if you provide it and tick the consent box — your e-mail address. We do not store your IP address; we keep an irreversible hash of it to limit abuse.

Purpose: reproducing and fixing the bug (Art. 6(1)(f) GDPR — legitimate interest in keeping the service working) and, with your consent, a message with the report number and a notice once it is fixed (Art. 6(1)(a)). You can withdraw consent by writing to hello@candylab.io.

A report becomes a task in our One House system, where our staff and AI agents work on it (model providers are listed in the section on processors). Your e-mail address is never put into the task.

Retention: reports recognised as spam are deleted after 30 days; 12 months after a report we delete the e-mail address, the browser data and the IP hash. The report text and screenshots stay with the task as part of the fix history.

Account data — for the duration of the agreement and until claims become time-barred.

Technical logs — up to 12 months.

Repository backup copies — until the Client disables the copy or the Project is deleted.

Billing documents — for the period required by tax law.

You have the right to access your data, rectify it, erase it, restrict processing, port it and object to processing based on legitimate interest. You may withdraw consent at any time.

You also have the right to lodge a complaint with the supervisory authority.

Some providers process data outside the European Economic Area. Transfers rely on standard contractual clauses or another mechanism provided for in Chapter V GDPR.

We use cookies necessary for the site to work and — subject to consent — analytics cookies. You manage consent in the cookie banner and in your browser settings.

For matters concerning personal data: hello@candylab.io.