Privacy policy

• Waitlist. Your email address, and your name if you give it. To stop abuse we also keep short-lived rate-limit records keyed to your email address and to a hash of your IP address.
• Your account. Your email address and a hash of your password (our authentication provider never stores the password itself). If you sign in with Google or GitHub, we receive the name, email address, profile picture and account ID that service shares. From Google we ask only for your basic profile and email address.
• Work you connect. When you connect GitHub through the Cantara GitHub App, we read your recent commits, the pull requests you authored, and the merged pull requests and releases on the repos your team installs it on, with read-only access: messages, titles, descriptions, file paths and line counts. We never store code diffs. Integration tokens are stored encrypted.
• What you create. Drafts, edits, approvals and the posts you publish through Cantara, plus the metrics LinkedIn and X report for those posts.
• Technical data. Our hosting providers process IP addresses and request logs to deliver and secure the service.

We use this information to run the waitlist and tell you about early access, to draft posts from your work, to show you how your posts perform, and to keep the service secure. Nothing is posted without its author's approval. We don't sell personal data, we don't use it for advertising, and our sites don't load third-party analytics or ad trackers.

We use the name, email address and profile picture from Google sign-in to create and secure your Cantara account and to show your profile to your teammates. Cantara's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share data only with the providers that run Cantara for us: Supabase (database and authentication), Cloudflare (hosting and security), Google and GitHub (sign-in and the integrations you connect), LinkedIn and X (to publish the posts you approve and read their metrics), Slack (if your team connects it for Boost to team), and our email delivery provider (account and product emails). AI drafting isn't live yet; before it sends any of your work to an AI model provider, we'll name that provider here and update the date above. We may also disclose information when the law requires it.

This site doesn't use tracking cookies. The Cantara app keeps your sign-in session in your browser's local storage so you stay signed in.

We keep account data while your account is active and delete it when you ask. Waitlist entries stay until early access opens or you ask to be removed. Rate-limit records are deleted automatically after two days and are used only to slow down abuse.

Email hello@usecantara.com to see, correct, export or delete your data, or to leave the waitlist. To remove Cantara's access to GitHub, uninstall the Cantara GitHub App from your GitHub settings and email us to delete the GitHub tokens we stored. You can remove Cantara's access to your Google account from your Google Account permissions page.

Every connection to Cantara uses HTTPS, integration tokens are encrypted, and database access is restricted so each person can reach only their own workspace's data.

Cantara is a tool for work and isn't directed to children under 16.

When this policy changes we'll update the date at the top of this page, and we'll email account holders about material changes.

Questions about privacy go to hello@usecantara.com.