Privacy Policy

Last updated: April 10, 2026  ·  Candle Docs

Overview

Candle Docs ("we", "our", or "us") provides an AI-powered document analysis platform. This policy explains what data we collect, how we use it, and the choices you have. We take your privacy seriously and do not sell your data to third parties.

Information We Collect

We collect only what is necessary to provide the service:

  • Account information — username and hashed password when you register.
  • Documents you upload — files you add to your folders are stored on our servers to enable search and analysis. You control when they are deleted.
  • Chat and quiz history — conversations and quiz sessions are saved so you can revisit them. These are private to your account.
  • Usage data — token usage and quiz counts per day, used only to enforce plan limits.

Google Drive Integration

If you choose to connect your Google Drive account, Candle Docs will request read-only access to your Drive files. Specifically:

  • We access Drive only when you initiate an import — we do not scan, index, or read your Drive in the background.
  • When you select a file to import, we download a copy of that file to your Candle Docs folder. After the download completes, we no longer access your Drive for that file.
  • We do not store your Drive file list, share your Drive contents with any third party, or use Drive data for training AI models.
  • Your Google OAuth tokens are stored securely and used solely to fulfill your import requests. You can disconnect Google Drive at any time from the Docs page, which permanently removes your tokens from our system.

Our use of data obtained from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Your Data

  • To provide and improve the Candle Docs service
  • To generate AI responses and quizzes from your documents
  • To enforce plan usage limits
  • To allow you to review your chat and quiz history

We do not use your documents or conversations to train AI models, and we do not sell or share your data with advertisers.

Data Retention & Deletion

Your documents, conversations, and quiz history are retained until you delete them or close your account. You can delete individual documents and folders from the Docs page at any time. To request full account deletion, contact us at the address below.

Third-Party Services

Candle Docs uses the OpenAI API to generate AI responses. Text from your documents is sent to OpenAI to fulfill your requests, subject to OpenAI's privacy policy. We do not share identifying account information with OpenAI.

Security

Passwords are hashed and never stored in plain text. API keys and OAuth tokens are stored server-side and never exposed to the browser. We use HTTPS to encrypt data in transit.

Contact

If you have questions about this policy or want to request data deletion, contact us at: privacy@candledocs.com