Privacy

What we collect and why

Criteria, a Candy Jab product, collects only what's needed to run the tool. We don't sell your data, don't share it with advertisers, don't create marketing profiles.

Account and authentication

To use Criteria, you create an account with your email. Authentication is handled by Clerk (an independent provider), which stores your email. Criteria receives only an anonymous identifier linked to your account. We don't store your email directly.

Evaluations

When you submit an idea for evaluation, the text is sent to our AI providers for processing and is not retained by Criteria. We keep the evaluation result linked to your account.

Usage events

We collect anonymous events via PostHog (evaluation started, error, limit reached) to understand how the product is being used. We don't capture your IP address and don't create individually identifiable profiles.

Cookies

We use Clerk session cookies to keep you authenticated. The session expires automatically after 7 days of inactivity. We don't use cookies for advertising or cross-site tracking.

Your rights (Brazilian LGPD)

Under Brazilian Law 13.709/2018 (LGPD), you can:

• Request access to your data
• Correct inaccurate data
• Request deletion of your usage data (results and metrics linked to your account)
• Withdraw consent at any time

To exercise any of these rights, write to privacy@usecriteria.com. When you delete your account, we erase your usage data; invoice data is kept for as long as the law requires.

Providers we use

• Clerk: authentication
• Anthropic: artificial intelligence
• PostHog: anonymous usage events
• Turso: database

These providers have their own privacy policies and may store data in jurisdictions outside Brazil.

Changes

This policy may be updated as the product evolves. The last update date is shown at the bottom of this page.