The Candidate's Toolbox
Last updated: June 9, 2026 · Effective date: June 9, 2026
In short. We collect the information you give us and a limited amount of technical data needed to run the Service. We use it to operate The Candidate's Toolbox, process payments, and improve the product. We do not sell your personal information, and we do not use your content to train third-party AI models. You have rights over your data — see Sections 7 and 8.
This Privacy Policy explains how The Candidate's Toolbox ("TCB," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our website, applications, the AI assistant "Sam," and related services (the "Service").
This Policy is incorporated into our Terms of Service. By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.
When you subscribe, payment is processed by our third-party payment processor, Stripe. Stripe collects your payment-card and billing details directly. We do not receive or store your full payment-card number. We receive limited information such as the last four digits of your card, card brand, billing status, and subscription state. Stripe's handling of your data is governed by Stripe's own privacy policy.
We use personal information to:
To generate responses, the Service sends relevant portions of your inputs and campaign data to AI model providers that process it to produce output for you. We take steps to limit what is shared to what is needed to provide the feature.
We do not use Your Content to train third-party foundation models, and we do not sell Your Content. We may use aggregated or de-identified data — which does not identify you — to understand usage and improve the Service. AI output may be inaccurate; how to treat it is described in our Terms of Service.
We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you cancel and request deletion, we delete or de-identify your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention and recordkeeping.
We use reasonable technical and organizational safeguards designed to protect personal information, including encryption in transit, hashed passwords, and access controls that isolate each workspace. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
To exercise any of these rights, contact us through the options on our website. We will verify your request before acting on it and will respond within the time required by applicable law. You may use an authorized agent where the law permits.
If you are a California resident, the California Consumer Privacy Act, as amended, provides the rights described in Section 7. Below are the categories of personal information we collect, the purposes for collection, and our sharing practices.
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Username, email, IP address | Operate the Service, authenticate, secure accounts |
| Customer records | Billing status, last 4 of card (via Stripe) | Process subscriptions and renewals |
| Commercial information | Subscription plan, transaction history | Provide and manage your subscription |
| Internet activity | Usage data, feature interactions, device/browser info | Operate, secure, and improve the Service |
| User content | Campaign data, documents, notes, Sam conversations | Provide AI features and store your work |
We collect these categories from you directly and automatically as you use the Service. We disclose them to service providers for the business purposes described in Section 5. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not knowingly collect personal information from anyone under 18.
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
We operate in the United States and use service providers that may process data in the United States and other countries. If you access the Service from outside the United States, you understand your information may be transferred to and processed in the United States and other jurisdictions that may have different data-protection laws than your own.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Policy with a new "Last updated" date or by notifying you through the Service. Your continued use after changes take effect constitutes acceptance of the updated Policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us through the options available on our website at thecandidatestoolbox.com.