Privacy Policy

From Clients who sign up for the platform:

• Business name, service category, phone number, work address, and logo
• Account email and password (managed by our authentication provider)
• Payment details, processed and stored directly by Stripe, our payment processor. We never receive or store full card numbers
• Service-area preferences: target/exclude locations, job types, and capacity

From Leads who submit a form through a Client’s funnel:

• Name, phone number, and address
• Answers to qualifying questions about the job (type, timeline, budget signal)
• Marketing attribution data (UTM parameters, referring campaign) used to measure which ad drove the submission

• To operate Client accounts: billing, campaign setup, and the dashboard
• To deliver Lead submissions to the specific Client whose form was submitted
• To send booking confirmations and, where consented to, text message notifications
• To measure and improve ad performance through our advertising partners

• The Client whose funnel a Lead submitted through, so that Client can follow up on the inquiry. This is the core service a Lead is requesting when they submit a form, not a sale, we do not sell Lead information to any other Client or unrelated business
• Stripe, payment processing for Client billing
• Supabase, database and authentication hosting
• Meta (Facebook/Instagram), advertising delivery and measurement for Client campaigns. Lead form submissions that opt in to marketing feedback may be shared with Meta in de-identified or hashed form to improve ad targeting, consistent with Meta’s own policies

We do not sell personal information to data brokers or other unrelated third parties.

Clients can optionally connect their Google Calendar so that White Candle can show Leads real available time slots and book confirmed calls directly onto the Client’s calendar. This requires access to:

• Free/busy availability, to determine which time slots are open
• Calendar event creation, to add a confirmed booking once a Lead books a call
• The Client’s Google account email, to identify which calendar is connected

We never read the titles, descriptions, guests, or any other details of a Client’s existing calendar events, only whether a given time is free or busy. A Client can disconnect Google Calendar at any time from their dashboard, which revokes this access immediately.

White Candle’s use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use industry-standard security procedures to protect the confidentiality of your data, including encryption of data in transit (HTTPS/TLS) and at rest, access controls that limit who can view sensitive information, and service-role-only database access for operations like billing and payment details, never exposed through client-facing access. Payment details are handled directly by Stripe, our PCI-compliant payment processor, and are never stored on our own servers.

We retain account and lead data for as long as needed to provide the service, and as required for billing, tax, and legal recordkeeping. You can request deletion at any time, see below.

To request that your personal information be deleted, see our Data Deletion Instructions page.

White Candle is not directed at, and does not knowingly collect information from, anyone under 13 years old.

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Questions about this policy can be sent to vancecompanyteam@gmail.com.