Privacy Policy
Last updated: April 11, 2026
Caidance ("we," "us," or "our") operates the website caidance.ai. This Privacy Policy explains how we collect, use, and protect your information when you use our services.
1. Information We Collect
Account Information: When you create an account, we collect your name, email address, and password. This is stored securely in our WordPress database hosted on Kinsta.
Assessment Data: When you take an industry assessment, we collect your responses, calculated Caidance Discovery Index (CDI), band placement, and identified priority fixes. This data is stored in your user profile.
Payment Information: Payments are processed by Stripe. We do not store credit card numbers, bank account details, or other sensitive payment data on our servers. Stripe handles all payment data in accordance with PCI-DSS standards.
Website URL: If you subscribe to monitoring, we collect a website URL that you provide for health check purposes (uptime, SSL, page speed, SEO, form reachability).
Usage Data: We track fix completion progress, checklist states, and implementation statuses to provide your dashboard experience and calculate your Caidance Discovery Index (CDI).
2. How We Use Your Information
We use your information to:
- Provide and maintain our services (assessments, toolkits, monitoring)
- Calculate and track your Caidance Discovery Index (CDI)
- Run automated health checks on your website (monitoring subscribers only)
- Generate AI-powered recommendations using the Anthropic Claude API
- Send weekly email reports via Brevo (monitoring subscribers only)
- Process payments through Stripe
- Communicate with you about your account and our services
3. AI-Powered Features
We use the Anthropic Claude API to generate personalized recommendations and power our AI advisor chat. When generating recommendations, we send your industry, score, fix statuses, and health check results to the API. We do not send your name, email, payment information, or other personally identifiable information to the AI service.
4. Third-Party Services
We use the following third-party services:
- Stripe — payment processing (PCI-DSS compliant)
- Kinsta — website hosting (SOC 2 compliant)
- Cloudflare — CDN, DNS, and security
- Brevo — transactional email delivery
- Anthropic (Claude API) — AI-powered recommendations
- Gravity Forms — assessment questionnaires
Each service processes data in accordance with their own privacy policies.
5. Data Retention
We retain your account data for as long as your account is active. Assessment and toolkit data is retained to provide your dashboard experience. Health check data and CDI history are retained to show trends over time. You can request deletion of your account and associated data at any time by contacting us.
6. Email Communications
If you subscribe to monitoring, you will receive weekly email reports summarizing your CDI, health status, and priorities. You can unsubscribe from these emails at any time by canceling your monitoring subscription or contacting us. We do not sell or share your email address with third parties for marketing purposes.
7. Cookies
We use essential cookies required for authentication and site functionality (WordPress session cookies). We use Cloudflare cookies for security and performance. We do not use third-party advertising or tracking cookies.
8. Data Security
We implement appropriate security measures including SSL/TLS encryption, secure hosting on Kinsta, Cloudflare security layer, and WordPress security best practices. Payment data is handled entirely by Stripe and never touches our servers.
9. Your Rights
You have the right to access, update, or delete your personal information. You can update your account information through your dashboard, or contact us to request data export or deletion. If you are located in the EU, you have additional rights under GDPR including the right to data portability and the right to restrict processing.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at [email protected].