Privacy Policy

At CandyScript Research Lab (operated by CandyScript Club Inc., accessible at candyscript.club), we are committed to safeguarding the digital privacy of researchers, academics, engineers, and site visitors. This Privacy Policy details our data governance protocols regarding the collection, processing, and protection of information when you interact with our website or request open scientific research materials.

1. Information We Collect

When you utilize our open research portal or request our 2026 Conversational AI & Facial Synthesis Benchmark Whitepaper, we may gather the following categories of information:

• Direct Contact Credentials: Full Name, Institutional / Corporate Email address, Direct Phone Number, and Primary Research Specialization provided voluntarily through our submission forms.
• Technical & Telemetry Data: IP address, browser user-agent string, device operating environment, referring URLs, and diagnostic session metrics to verify request authenticity and prevent distributed denial-of-service abuse.
• Voluntary Correspondence: Inquiries, collaboration proposals, or peer-review notes transmitted via our contact forms or official email channels.

2. Purpose and Legal Basis for Processing

CandyScript Research Lab processes collected information strictly under legitimate academic, organizational, and regulatory interests:

• To distribute requested scientific publications, benchmark repositories, and architectural evaluation tools at zero cost.
• To verify institutional identity and authenticate academic research credentials.
• To prevent automated bot scraping, unauthorized re-licensing, and malicious model interrogation.
• To respond promptly to technical questions, peer inquiries, and collaborative research initiatives.

3. Non-Sale of Personal Data (CCPA / CPRA Compliance)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents are entitled to explicit protections regarding their personal information.

CandyScript Research Lab DOES NOT SELL, RENT, LEASE, OR MONETIZE PERSONAL DATA. We do not engage in behavioral cross-context advertising data brokerage. All materials provided through this website are educational and scientific lead magnets intended solely for direct distribution to verified recipients.

4. Cookie Policy and Storage Protocols

Our web portal employs strictly necessary technical cookies and localized browser storage (`localStorage`) solely to record your cookie consent preferences and secure form submissions against replay attacks. You may configure your web browser to reject cookies; however, certain portal functions such as interactive dataset parameter calculation may experience degraded performance.

5. Data Retention & Erasure Protocols

We retain user contact information only as long as necessary to fulfill the research distribution request or satisfy lawful compliance and audit obligations. Users may submit a written verification request to have their personal contact records permanently expunged from our internal repository at any time.

6. Individual Rights Under GDPR and US State Laws

Depending on your geographic residency, you maintain enforceable rights regarding your personal records, including:

• Right to Access: You may request a verified transcript of the personal data we maintain associated with your email.
• Right to Rectification: You may correct inaccurate or obsolete institutional credentials.
• Right to Deletion: You may request the irrevocable removal of your contact record.
• Right to Restriction & Objection: You may object to further correspondence or telemetry analysis.

7. Data Security Measures

We implement rigorous technical safeguards including 256-bit TLS data transmission encryption, restricted administrative role-based access controls, and periodic security audits to defend against unauthorized infiltration, alteration, or compromise.

8. Contact Our Data Governance Officer

If you have any questions, regulatory inquiries, or wish to exercise your statutory privacy rights, please reach out to our legal and data protection team: