Privacy Policy - Candy AI Clone

Last updated: April 16, 2026

Website address: https://candyaiclone.co/
Business name: Candy AI Clone
Contact us: through the consultation form on our website.

This Privacy Policy explains how Candy AI Clone (accessible at https://candyaiclone.co/) collects, uses, stores, and protects information from visitors and prospective clients. Candy AI Clone is a development and consulting service that builds white-label AI companion platforms, NSFW AI chatbots, and AI GF / BF applications for business customers. We do not operate a consumer-facing AI companion product ourselves — this website exists to market our development services and to capture project inquiries.

By using this website or submitting a consultation request, you agree to the practices described below.

1. Who We Are

For the purposes of data protection law, the “Data Controller” is the team operating Candy AI Clone at https://candyaiclone.co/. You can reach us through the consultation form on our website for any privacy-related question, request, or complaint.

2. Information We Collect

We only collect information you voluntarily provide through our consultation / lead form, plus a small amount of technical metadata that helps us defend the site from automated abuse.

2.1 Information you give us

Full name — so we can address you personally in our reply.
Contact handle — a way to reach you back with our proposal and follow-ups. This is usually a WhatsApp or Telegram handle you provide in the form; if you also choose to share any other contact details in the “Project Details” field, we treat them the same way.
Country — helps us tailor compliance guidance (payment gateways, age-verification rules, adult-content licensing, etc.) to your jurisdiction.
Project details — the message you write in the “Project Details” field describing what you want to build, timeline, budget, and feature list.

2.2 Information collected automatically

Anti-spam metadata — on submission we record how long you spent filling the form, whether the hidden honeypot field was triggered, and your IP address (hashed where possible). This data is used only to score the submission and reject obvious bots.
Server logs — our hosting provider keeps short-lived access logs (IP, browser user-agent, requested URL, timestamp). These are typical web-server records used to investigate abuse or outages.
Browser storage — we store small flags in your browser’s sessionStorage (e.g. “you already closed the consultation popup”) so the popup does not nag you. This data never leaves your browser.

We do not ask for, and do not want, sensitive categories of data (financial account numbers, government IDs, biometric data, health records). Please do not send such data via our contact form.

3. How We Use Your Information

To reply to your consultation request with a custom proposal, scope, and quote.
To schedule a discovery call or chat on WhatsApp / Telegram if you provide a handle.
To send follow-up messages tied to your active inquiry (we do not send unsolicited marketing blasts).
To maintain an internal record of past projects and proposals for accounting and quality-assurance purposes.
To detect and block spam, fraud, or abusive use of our consultation form.

4. Legal Basis (GDPR)

If you are in the European Economic Area, the United Kingdom, or another GDPR-aligned jurisdiction, the legal bases we rely on are:

Consent — when you voluntarily submit the consultation form.
Legitimate interest — to secure the site against automated abuse and to maintain basic business records.
Contractual necessity — if you become a client, to deliver the development work you engaged us for.

5. Cookies and Tracking

Candy AI Clone does not use third-party advertising or behavioural-tracking cookies. We do not run Facebook Pixel, Google Ads remarketing, TikTok Pixel, or similar trackers on this site.

The only client-side storage we use is:

WordPress session cookies — set only if you log in to the admin dashboard as a staff member.
sessionStorage flags — to remember that you dismissed the consultation popup within the current browser tab.

YouTube videos embedded in our “AI Video Generation” section are loaded only when you hover the card. Once loaded, YouTube may set its own cookies under the youtube.com domain. Please review Google’s privacy policy for details.

6. Third-Party Services We Use

Google Fonts — web fonts served from fonts.gstatic.com. Google may log your IP and user-agent when fonts are fetched.
YouTube (by Google) — used to preview AI video models. Privacy policy: https://policies.google.com/privacy.
Our hosting provider — stores the database and files that power this site. Access is limited to authorised staff.
Messaging apps you choose to share (e.g. WhatsApp, Telegram) — if you give us a handle on these platforms, any follow-up conversation is subject to each platform’s own privacy policy.

7. Sharing Your Information

We do not sell, rent, or trade your personal data. We share it only in three situations:

Internal team members who need access to respond to your inquiry or deliver the engagement.
Service providers that host our site, deliver email, or process payments — each bound by confidentiality obligations.
Legal requirement — if we receive a valid legal request (court order, subpoena, or similar) we may disclose the minimum necessary data.

8. Data Retention

Consultation leads are retained while the inquiry is active and for a reasonable period after to support accounting and dispute handling. Records eligible for deletion (inactive for 35 days or more, by default) can be removed by our team at any time. If you want your record deleted sooner, submit a request through our consultation form with the subject line “Privacy Request – Delete My Record” and we will process it within 30 days.

Server logs and anti-spam metadata are rotated on a short schedule (typically 7–30 days, depending on the hosting plan) and then permanently deleted.

9. Security Measures

We protect your data with a layered approach:

TLS / HTTPS encryption on every page, including the consultation form.
Honeypot fields and time-traps to silently reject automated spam submissions.
Rate limiting (per-IP submission caps) to prevent form flooding.
Disposable-email detection to filter obvious throwaway addresses.
WordPress nonce tokens on every sensitive admin action.
Access-controlled leads dashboard protected by a staff password gate.

No system is 100% secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority within the timeframes required by applicable law.

10. International Data Transfers

Our servers and service providers may be located outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the provider’s equivalent regional framework.

11. Your Rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, and similar laws), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Delete your data (“right to be forgotten”).
Restrict or object to processing.
Port your data to another service in a machine-readable format.
Withdraw consent at any time.
Opt out of sale / sharing of personal information (CCPA). We do not sell personal information, so this right is effectively automatic.
File a complaint with your local data-protection authority.

To exercise any of these rights, submit a request through our consultation form with “Privacy Request” in the Project Details field. We verify your identity before acting on data-subject requests.

12. Age Restriction

Candy AI Clone provides development services for adult-content platforms. This website is intended for business visitors aged 18 or older (or the age of legal adulthood in your jurisdiction, whichever is higher). We do not knowingly collect information from minors. If you believe a minor has submitted data to us, contact us immediately and we will delete the record.

13. Adult-Content Context

Because we help build NSFW / adult AI companion platforms, potential clients sometimes share explicit product concepts, character descriptions, or screenshots via the “Project Details” field. This information is treated with the same confidentiality as the rest of your inquiry, stored in our leads database, and viewed only by the internal team members working on your proposal. Do not upload third-party copyrighted or illegal content to our form — we are not equipped to act as a custodian for such material.

14. Terms & Conditions

Use of this website and the services offered through it is additionally governed by our Terms & Conditions. Key points that intersect with this policy:

Submitting the consultation form does not create an attorney-client, fiduciary, or employment relationship. It starts a sales conversation.
Proposals, quotes, scope documents, and sample code shared during the sales process remain the property of Candy AI Clone until an engagement contract is signed.
Clients are solely responsible for complying with the laws of the jurisdictions in which their end-user platform operates — including adult-content licensing, age verification, tax, and payment regulations.
Engagements begin only after a signed statement of work (SOW) and the agreed deposit have been received. Verbal or email agreements alone are not binding.
Timelines are best-effort estimates provided in the SOW. Delays caused by missing client input, scope changes, or third-party service outages may push delivery dates.

If you need the full terms before signing an engagement, request them through our consultation form.

15. Disclaimer

The content on https://candyaiclone.co/ is provided for informational and marketing purposes only. By visiting or using this website you acknowledge the following:

No legal, tax, or financial advice. Nothing on this website constitutes legal, tax, accounting, or investment advice. Always consult qualified professionals in your own jurisdiction before launching an adult-content platform, accepting payments, or structuring a business.
No affiliation with third-party brands. Names like “Candy AI”, “Kling”, “Wan 2.7”, “Hailuo”, “CCBill”, “Segpay” and similar trademarks mentioned on this site belong to their respective owners. References are made purely for comparative or illustrative purposes. Candy AI Clone is not affiliated with, endorsed by, or sponsored by any of those companies.
Development service, not an end-user product. Candy AI Clone builds and licenses white-label platforms to business clients. We do not operate a consumer-facing chat product. Any screenshots, demos, or sample characters shown on this website are illustrative only.
No guarantee of outcomes. We cannot guarantee specific revenue, user-acquisition, traffic, ranking, or business outcomes. Case studies, performance figures, and screenshots describe past results of past clients and are not a promise of future performance for your project.
18+ content context. Platforms we build are intended for legally adult audiences. Clients are responsible for age-verification, content moderation, and compliance with their target market’s obscenity, data-protection, and consumer-protection laws.
External links. This website may link to third-party resources (YouTube previews, payment-gateway sites, policy pages, etc.). We do not control and are not responsible for the content, privacy practices, or availability of those external sites.
“As-is” basis. This website and its contents are provided “as is” without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose, or non-infringement. Use of the information here is at your own risk.

If any provision of this Disclaimer is found unenforceable, the remaining provisions continue in full force and effect.

16. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, the services we use, or applicable law. The “Last updated” date at the top of this page always shows when the current version took effect. Material changes will be communicated on the homepage or directly to active clients through their preferred channel.

17. Contact Us

For any question about this Privacy Policy, to exercise your data-protection rights, or to report a privacy concern, please reach us through:

Consultation form: book a consultation on our website and mention “Privacy Request” in the Project Details field.
Website: https://candyaiclone.co/

We aim to respond to every legitimate request within 30 days.