Privacy-policy

Candata Global (“Candata,” “we,” “our,” or “us”) is committed to protecting the privacy and security of our customers’ data. This Privacy Policy describes how we collect, use, share, and safeguard information when you use our services, applications, and websites.

1. Information We Collect

We collect and process the following types of information:

Customer Data: Information you or your organization provides while using Candata applications, including data submitted through customs, logistics, or related workflows.
Account Information: Login credentials, contact details, and security tokens used to access our applications.
Technical Data: IP addresses, usage logs, and device/browser metadata necessary for performance and security monitoring.
Support Interactions: Information shared when contacting our support team.

We do not sell personal information. Customer data remains the property of the customer.

2. How We Use Information

We use the information we collect to:

Provide and maintain our applications and services.
Support and customize your use of our applications.
Secure our systems against unauthorized access, intrusion, or fraud.
Communicate about updates, issues, or service changes.
Meet regulatory, legal, or compliance obligations.

3. Data Hosting and Security

All customer data is hosted in Google Cloud Services within isolated Kubernetes containers (“code as infrastructure”)
CD-Information Security @ Candata Global
Data is encrypted at rest and in transit.
Access is managed via Google’s Single Sign-On (OAuth2) authentication standard
CD-Information Security @ Candata Global
Candata personnel access is strictly controlled and logged.
Google Cloud maintains compliance with international standards such as ISO/IEC 27001, 27017, 27018, and CSA STAR

For details on Google Cloud’s security practices, see:

4. Customer Responsibilities

Customers control access rights within their own applications.
Customers must protect their own credentials, API keys, and tokens from misuse.
Communications with Candata APIs must be encrypted (e.g., HTTPS).

5. Data Sharing and Disclosure

We do not share or disclose personal data except:

With your explicit consent.
As required to provide services (e.g., with Google Cloud infrastructure).
To comply with legal or regulatory requirements.
To protect the rights, property, or safety of Candata, our customers, or the public.

6. Data Breach Response

In the unlikely event of a data breach:

Google Cloud will notify Candata and begin a forensic investigation
CD-Information Security @ Candata Global
Candata will immediately evaluate the impact, notify affected customers, and share investigation updates until resolution.
Internal reviews will be conducted, and corrective actions documented.

For Google’s incident response, see: Google Cloud Incident Response.

7. Data Retention and Deletion

Backups are managed by Google Cloud with daily snapshots retained up to 7 days
CD-Information Security @ Candata Global
Candata employs point-in-time recovery and redundant storage across data centers.
Customer data deletion follows scheduled secure processes; recovery may be possible during retention windows to prevent accidental loss.

8. International Standards & Compliance

Google Cloud, our infrastructure provider, complies with:

ISO/IEC 27001 (Information Security Management)
ISO/IEC 27017 (Cloud Service Security)
ISO/IEC 27018 (PII Protection in Cloud Environments)
CSA STAR Certification
PCI DSS for infrastructure supporting payment data
CD-Information Security @ Candata Global

Candata reviews these certifications annually to ensure compliance.

9. Children’s Privacy

Our services are intended for business use only and are not directed to children under 13.

10. Updates to this Policy

We may update this Privacy Policy to reflect changes in technology, regulations, or our practices. We will notify customers of material changes via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy or our practices, please contact us:

Candata Global
1021 E Lincolnway
Cheyenne, Wyoming
United States 82001
‍admin@candata.com

Privacy policy