Privacy Policy

Candoor is operated by MAAE Media ("we," "us," or "our"). This Privacy Policy applies to the Candoor website and application. Linked products and external services have their own privacy practices.

We collect the following categories as needed to operate Candoor:

• Account and profile information: name, email, authentication and account identifiers, profile image if provided, and workspace membership or job title when available.
• Workspace content: People and contact information such as names, email addresses, phone numbers, mailing addresses, relationship roles, tags, and notes when entered; Property addresses and context; Person–Property roles; milestones and progress; and optional property photos.
• Subscription and transaction information: if paid billing is enabled, plan, billing status, and payment metadata. Payment card details are handled by the payment processor rather than stored directly by Candoor, when applicable.
• Technical, usage, and security information: IP address, browser and device information, authentication and security events, timestamps, diagnostic logs, and page or request metadata reasonably needed to operate, secure, and debug the service.
• Support information: information you include when contacting us for help.

We use information to provide, authenticate, and secure Candoor; create and manage workspaces; make workspace data available to authorized members; provide support and troubleshoot problems; improve reliability and usability; administer accounts and billing when applicable; prevent fraud, abuse, and security incidents; comply with law and enforce our Terms; and send service or transactional communications.

Information entered into a workspace is visible to other authorized members of that workspace according to product permissions. Do not enter personal information you are not authorized to share with your team.

When team invitations become available, the Account owner will control team membership.

We share information with vendors and processors only as reasonably necessary to operate Candoor, including providers of hosting, database, authentication, storage, email, diagnostics, payment processing when enabled, support, and security.

We may also disclose information in response to valid legal process; to protect safety, rights, or service security; as part of a financing, merger, acquisition, reorganization, or asset sale; or at your direction or with your consent.

We do not sell personal information. Candoor does not currently use workspace content for third-party targeted advertising.

Candoor currently uses Supabase for authentication, database, and storage infrastructure. We may change or add service providers over time while requiring appropriate protections for information they process for us.

We use essential cookies, local storage, and similar session technologies for authentication, security, preferences, and normal application operation. Candoor currently does not use third-party advertising cookies.

We retain information while an account or workspace is active and as needed to provide the service, protect security, and meet legal, accounting, and dispute-resolution obligations. Deleted records may remain temporarily in backups or logs until routine expiration.

We use administrative and technical safeguards designed to protect information, including authenticated access, workspace-level isolation and access policies, and private storage for property photos. No system can guarantee absolute security, and you are responsible for protecting account credentials and devices.

Business users are responsible for lawfully collecting and entering third-party contact information. Any privacy notices, permissions, or other obligations owed to clients, contacts, and vendors remain the user's or organization's responsibility where applicable.

Depending on location and applicable law, individuals may have rights to access, correct, delete, or obtain a copy of information, or to object to or restrict certain processing. These rights are not universal and may be subject to exceptions.

Candoor account users may initiate a request through the Help area. A third party whose data was entered by a real-estate team may need to contact that team or workspace because Candoor processes the information on the team's behalf. We may need to verify identity and authority before responding.

Candoor is intended for business users aged 18 and older. It is not directed to children under 13 or to minors, and we do not knowingly invite them to create accounts.

Information may be processed in the United States and other locations where our cloud providers operate. Where required, we use appropriate safeguards for transfers across jurisdictions.

We may update this Policy as Candoor and legal requirements evolve. We will update the effective date and provide notice of material changes when appropriate or required.

Questions about this Privacy Policy or privacy requests may be submitted through the Help area in Candoor. A public support and privacy contact will be published before paid public launch.