Privacy Policy

1. Introduction

Candyblocks, Inc. (“TractionBaby,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our services, including the Traction SDK and Traction Validation Tool.

2. Information We Collect

2.1 Information You Provide

• Account registration information (name, email address, password)
• Organization and team information
• Payment information (processed securely through Stripe)
• Business information for validation tool (business ideas, target audience)
• Communication preferences and support inquiries

2.2 Information We Collect Automatically

• Usage data and analytics (clicks, page views, feature usage)
• Device information (browser type, operating system, IP address)
• Campaign performance metrics and advertising data
• SDK implementation data from customer websites
• Cookies and similar tracking technologies

2.3 Information from Third Parties

• Authentication information from Google OAuth
• Advertising platform data (Meta, TikTok, Pinterest, Snapchat, Amazon)
• Payment and billing information from Stripe

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and manage subscriptions
• Create and manage advertising campaigns on your behalf
• Analyze performance and provide insights
• Send transactional emails and important updates
• Respond to support requests and inquiries
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations

4. Information Sharing and Disclosure

We share your information only in the following circumstances:

4.1 Service Providers

• Google (authentication services)
• Stripe (payment processing)
• PostHog (analytics)
• Loops (email services)
• Neon (database hosting)

4.2 Advertising Partners

To run campaigns on your behalf, we share necessary data with:

• Meta (Facebook/Instagram)
• TikTok
• Pinterest
• Snapchat
• Amazon Advertising

4.3 Other Disclosures

• With your consent or at your direction
• To comply with legal obligations or court orders
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your personal information for as long as you maintain an active account with us and as necessary to provide our services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate business interests.

Account deletion requests will be processed within a commercially reasonable timeframe. Some information may be retained in our backup systems or as required by law.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request information about your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Objection: Object to certain processing activities

To exercise these rights, contact us at legal@candyblocks.com. We will respond to your request within a reasonable time.

7. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

10. SDK and Customer Website Data

When customers implement our SDK, we collect analytics and user behavior data from their websites to optimize advertising campaigns. This data is processed in accordance with this policy and our customer agreements. End users of our customers' websites should refer to those websites' privacy policies.

11. Updates to This Policy

We may update this privacy policy periodically. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

For privacy-related questions or concerns, contact us at: