Privacy policy

Last Updated: September 18 2026

ImageFlow-AI is a product of CandorLight LLC ("CandorLight," "we," "us," "our"). This policy explains how we collect, use, and share information in connection with imageflow-ai.com and the ImageFlow-AI visual search service (the "Service"). It applies to two groups of people: Business Customers, who register for an account and embed the widget on their own site, and End Users, who use the widget on a Business Customer's site.

Information We Collect

From Business Customers: account and contact information (name, email, company), billing information, and the product catalog data you provide or connect (product names, codes, image URLs, and product page URLs).

From End Users, through the widget: any photo you upload for matching, and — only if you choose to submit the inquiry form — your full name, email address, company name, company website, phone number, and any message you include.

From all visitors to our marketing site: standard analytics data (such as pages viewed and general location) via Google Analytics, delivered through the Site Kit by Google plugin.

How We Use Information

We use this information to: operate the visual matching service and return results; deliver uploaded photos and inquiry-form submissions to the specific Business Customer whose widget generated them; manage Business Customer accounts and billing; maintain and improve the Service; and comply with legal obligations.

We store only what's needed to run matching for a Business Customer's catalog: the product images, names, codes, and page links they provide. We do not hold other information about a Business Customer's catalog on our systems.

How We Share Information

This is the commitment at the center of this policy, and it's binding: an End User's uploaded photo and any contact details they submit are shared only with the Business Customer operating the site where the widget was used. We do not sell this information, share it with other third parties, or use it for our own marketing.

We share information with service providers who help us operate the Service, including Microsoft Azure for hosting and infrastructure, under obligations to protect it and use it only for that purpose.

We may disclose information where required by law, legal process, or to protect the rights, safety, or property of CandorLight, our customers, or others.

Once We Deliver a Lead, the Business Customer Is Responsible for It

When we deliver an End User's photo and contact details to a Business Customer as a lead, that Business Customer becomes responsible for how they handle that information under applicable law. Our commitments in this policy govern CandorLight's handling of the data — they don't extend to what a Business Customer subsequently does with a lead they've received. Business Customers should have their own privacy practices for how they use inquiry leads.

Data Retention

We retain Business Customer catalog data for as long as the account is active. Following account termination, we retain catalog data, End User photos, and lead records for up to twelve (12) months, after which they are deleted. Business Customers may request earlier deletion of their data at any time by contacting support@candorlight.com, and we will provide an export of their data if requested.

Your Rights

Depending on where you're located, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at support@candorlight.com. A Data Processing Addendum is available on request for Business Customers who need one for their own compliance.

Cookies and Analytics

Our marketing website uses cookies and similar technologies for analytics purposes. using Google Analytics via Site Kit. You can control cookies through your browser settings.

Security

We take reasonable technical and organizational measures to protect the information we collect, though no method of transmission or storage is completely secure.

Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal information from children.

International Users

The Service is currently offered to Business Customers and End Users in the United States and Canada. We plan to expand to Europe in the future; when we do, additional safeguards for international data transfers (such as Standard Contractual Clauses) will apply, and this policy will be updated accordingly.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by a new "Last Updated" date, and we'll take reasonable steps to draw attention to significant changes.

Contact

Questions about this policy: support@candorlight.com.