Privacy

What we collect and why

Criteria, a Candy Jab product, collects only what's needed to run the tool. We don't sell your data, don't share it with advertisers, don't create marketing profiles.

Account and authentication

To use Criteria, you create an account with your email. Authentication is handled by Clerk (an independent provider), which stores your email. Criteria receives only an anonymous identifier linked to your account. We don't store your email directly.

Evaluations

When you submit an idea for evaluation, the text is sent to Anthropic (the AI provider) for processing and is not retained by Criteria after the response. We keep only the result (tier, performance metrics) linked to your anonymous identifier.

Usage events

We collect anonymous events via PostHog (evaluation started, error, limit reached) to understand how the product is being used. We don't capture your IP address and don't create individually identifiable profiles.

Cookies

We use Clerk session cookies to keep you authenticated. The session expires automatically after 7 days of inactivity. We don't use cookies for advertising or cross-site tracking.

Your rights (Brazilian LGPD)

Under Brazilian Law 13.709/2018 (LGPD), you can:

• Request access to your data
• Correct inaccurate data
• Request deletion of your usage data (results and metrics linked to your account)
• Withdraw consent at any time

To exercise any of these rights, write to privacy@usecriteria.com. Deleting your Clerk account also removes the link between your email and your anonymous identifier in Criteria.

Providers we use

• Clerk: authentication
• Anthropic: artificial intelligence
• PostHog: anonymous usage events
• Turso: database

These providers have their own privacy policies and may store data in jurisdictions outside Brazil.

Changes

This policy may be updated as the product evolves. The last update date is shown at the bottom of this page.