Scope
Free local prompt protection uses none of these providers. Prompt checks run on your device, and the extension does not send prompt text, detected values, file contents, page addresses or browsing history to CandidLoom or to any provider below.
The providers below run the separate Plus checkout, activation and licence renewal service, and the customer pages. The privacy policy describes each flow in full. Where a region is not stated in the privacy policy, the table says "See provider"; that provider's own terms describe where it processes data.
Providers
| Provider | Purpose | Data handled | Region |
|---|---|---|---|
| Supabase | Hosts authentication (emailed sign-in codes through Supabase Auth), the billing function and the billing database. Receives licence renewal requests from the extension. | Verified buyer email, account identifier, internal customer reference and verification time; accepted terms version and time; plan, subscription, payment and event references, status and paid period; activation records; for renewal, the licence key, the extension version and when each key was last used. No card numbers or CVVs. | Sydney, Australia (ap-southeast-2) |
| Google Cloud KMS | Signs Plus entitlements and protects activation-code envelopes. | Signing and encryption operations for entitlements and activation codes. | Sydney, Australia (australia-southeast1) |
| Resend | Sends activation emails from activation@notify.candidloom.com. | Buyer email address, the activation email (activation ID and code) and delivery events. | See provider |
| Cloudflare (Pages and Turnstile) | Pages serves the customer pages and, with GitHub Pages, this documentation. Turnstile checks sign-in requests for automated abuse. | Request metadata such as IP address and browser information. | See provider |
| Razorpay | Processes live checkout and payments for the Plus subscription. | Checkout and payment-method information, and contact details you enter at checkout. | See provider |
Changes
The privacy policy is updated before new collection or sharing is introduced, and this page is updated with it. Questions go to loomcandid@gmail.com.