cannedIQ is operated by AH Push It LLC ("we", "us", "our"). This policy explains what data we collect when you use the cannedIQ Chrome Extension and website (cannediq.com), how we use it, and your rights regarding it. We do not sell your personal data.
1. Information We Collect
Account & Profile Information
When you create an account or complete onboarding, we collect:
- Email address (required for authentication)
- Full name (optional, provided by you)
- Job title, company name, and company size (optional, collected at signup)
- Use case and referral source (optional, collected at signup)
- Phone number and billing address (collected by Stripe at checkout)
Payment & Billing Information
Payment details — including credit card numbers, billing address, and bank account information — are collected and processed directly by Stripe, Inc. We never see or store your raw payment credentials. We do store your Stripe Customer ID and subscription status so we can manage your plan.
Usage Data
We collect limited usage data to operate the service:
- Number of AI commands used per month (for quota enforcement)
- Last sign-in timestamp (for team management features)
- The commands, stacks, and categories you create and store in cannedIQ
We do not log the content of web pages you visit, the text fields you type into, or the specific responses you insert. Your canned responses are stored in your account to sync across devices, but are not read or analyzed by us.
Extension Permissions
The cannedIQ Chrome Extension requests the following permissions:
- activeTab — to detect the active text field and insert your selected response
- storage — to cache your commands locally for instant access
- contextMenus — to offer right-click shortcuts for inserting responses
The extension does not read the content of pages you browse, capture screenshots, or transmit browsing history.
2. How We Use Your Information
- To create and maintain your account
- To process payments and manage your subscription
- To enforce plan limits (free vs. Pro vs. Team)
- To provide team management features (if you are a team owner or member)
- To send transactional emails — account provisioning, password resets, billing receipts
- To improve the service through aggregated, anonymized analytics
- To respond to support requests
We do not use your data for advertising, and we do not share your data with third parties for their marketing purposes.
3. Third-Party Service Providers
We use the following sub-processors to operate cannedIQ. Each is bound by their own data processing agreements and privacy policies.
Stripe
Payment processing, subscription billing, invoicing, and the customer portal. Stripe stores your payment method and billing address.
Supabase
Database, authentication, and backend infrastructure. Your account data, commands, and stacks are stored in Supabase (hosted on AWS us-east-1).
Resend
Transactional email delivery. Used to send account provisioning emails, password resets, and other service notifications.
We may also use Google OAuth as an optional sign-in method, subject to Google's Privacy Policy.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g., billing records are retained for 7 years as required by law).
Your Stripe billing records are retained by Stripe according to their policies and applicable financial regulations.
5. Data Security
We take reasonable technical and organizational measures to protect your data:
- All data is transmitted over TLS/HTTPS
- Passwords are hashed and never stored in plaintext
- Database access is governed by Row-Level Security policies so users can only access their own data
- Payment data never touches our servers — it goes directly to Stripe
No method of transmission or storage is 100% secure. If you discover a security issue, please contact us at security@cannediq.com.
6. Team Accounts
If you use cannedIQ as part of a team, your team owner has the ability to:
- Provision your account (create it on your behalf)
- See your name, email, and last active date within the team dashboard
- Remove you from the team
- Reset your temporary password (if your account was provisioned by them)
Team owners cannot see your personal canned responses, only responses shared to the team library.
7. Cookies & Local Storage
The cannedIQ website uses minimal cookies — only those necessary for authentication sessions. We do not use tracking or advertising cookies. The Chrome Extension uses chrome.storage.local to cache your commands and session data on your device; this data does not leave your device except to sync with your account.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and associated data
- Portability — export your commands and stacks as a JSON file at any time from the Settings tab
- Objection — object to certain processing of your data
To exercise these rights, contact us at privacy@cannediq.com. We will respond within 30 days.
9. Children's Privacy
cannedIQ is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact
If you have questions about this policy or your data:
AH Push It LLC
Email: privacy@cannediq.com
Website: cannediq.com