Version 2. Last updated August 10, 2026. Replaces the policy dated June 19, 2026.
This Privacy Policy explains what information Caddie ("Caddie," "we," "us," or "our"), operated by Curious Frog, collects, how we use it, and the choices you have. It applies to getcaddie.now, app.getcaddie.now, and the Caddie Watch companion tools including the Caddie Watch Chrome extension, and should be read alongside our Terms of Service.
The Caddie Watch Chrome extension reads Whatnot live stream chat messages in real time while you are actively streaming. Specifically, it collects:
The extension does not collect browsing history, data from non-Whatnot pages, or any information from streams you are not actively monitoring. Data collected by the extension is sent exclusively to your own Caddie account, and is used to detect buyer requests in chat, match them against your inventory, display a live intent feed in your dashboard, and generate post-show analytics about viewer demand. It is associated with your Caddie account only and is not shared with other sellers.
We do not sell your personal information, and we do not use your inventory content or buyer and viewer data to train models on behalf of, or for the benefit of, anyone outside of providing you the Service.
Caddie uses Anthropic's Claude models to power several features:
The specific content each feature needs (a photo, a search query, a chat message, your stream's activity data) is sent to Anthropic's API to generate that feature's output, and is handled under Anthropic's own API data-use terms. We don't otherwise share your account, inventory, or buyer data with Anthropic beyond what each feature requires.
We share information with the service providers that help us run Caddie, each acting on our behalf and only for the purpose listed:
We do not sell, rent, or share your data with advertisers or data brokers. We may disclose information if required by law, to protect the rights, safety, or property of Caddie or others, or in connection with a merger, acquisition, or sale of assets, in which case we'd give notice as described in our Terms.
When you use Caddie Watch, you are the one collecting your viewers' chat activity from the livestream you're running. Caddie processes that data on your behalf to provide the matching feature. Your viewers have not agreed to Caddie's Terms or this Policy; they've agreed to the livestreaming platform's own terms. You're responsible for using this feature in a way that complies with applicable law and with that platform's rules regarding your viewers' data.
We keep your account and inventory content for as long as your account is active. If you cancel or your account is terminated, we delete Your Content within 30 days, consistent with our Terms.
Buyer and viewer chat data collected through Caddie Watch (usernames, messages, match outcomes) is retained for as long as your account is active, since it powers your ongoing analytics and buyer history. It is deleted on the same 30-day schedule as the rest of your account data if you cancel.
Backups. We take a nightly backup of the production database and keep it for 30 days. Data you delete disappears from the live Service immediately, but can persist in a backup for up to 30 days after that, including after account deletion. Backups are used for disaster recovery only.
Support access records are an exception, and deliberately so. Entries in your support-access record are not deleted on request while your account exists. A record whose entries can be removed on request is not a record, and the whole point of it is that it holds up in a dispute about what happened. Those entries are deleted along with the rest of your account data if you close your account. The fingerprints already published to Hedera cannot be deleted by anyone, including us, and this is explained in Section 8 and Section 12.
We use industry-standard measures to protect your information, and we would rather describe them precisely than in general terms.
Your item photos are stored in a Backblaze B2 bucket and delivered to your browser and to your streaming overlay as direct storage addresses, rather than being passed through Caddie. This is a real architectural fact with consequences, and we would rather state them than let you assume otherwise:
The practical consequence, stated plainly: don't upload a photo containing something you would not want fetchable by anyone who was given its address. Photos of collectible items, which is what Caddie is built for, are not a concern. A photo that happens to include a shipping label, a document, or personal paperwork would be.
No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
Section 9 of our Terms of Service describes how support access works: only you can turn it on, you choose how long it lasts, it expires on its own, and certain things (your password, your email, your billing, your API keys and capture tokens) are blocked in code even while it is active. This section covers the privacy side of the record it produces.
Every action taken inside your account during a support session is written to a record you can read in your own Settings panel and download as a machine-readable file. Refused attempts are recorded too. The actor is recorded as "Caddie Support," never an individual's name.
Each entry carries a SHA-256 fingerprint of its own contents, taken when the entry was written. Those fingerprints, and only those fingerprints, are published to a public Hedera Consensus Service topic on the Hedera mainnet, topic 0.0.10802877. What is published is a 64-character hexadecimal digest. It is one-way and cannot be reversed into the entry it came from. No inventory data, no photos, no email addresses, no chat, no buyer information, and no personal information of any kind is sent to that topic.
Two things about the topic are worth knowing before you grant access. It was created with no administrative key, which on Hedera is permanent and publicly checkable: nobody can modify or delete it, including us, and including if we were ordered to. And it is a public network, so a published fingerprint is readable by anyone, anywhere, permanently. That permanence is the entire point of publishing it, and it is also the reason nothing but a one-way digest goes there.
The record is tamper-evident. It is not tamper-proof, and we will not describe it that way. Publishing a fingerprint proves the fingerprinted content existed at a consensus time and has not been altered since, including by us. It does not prove the content was true when it was written. What it defends against is a record being rewritten after a dispute begins.
How to check a record yourself, without our help and without a Caddie account, is published at app.getcaddie.now/verify.
You can access and update most of your account and inventory information directly in the Caddie dashboard, and export your inventory as a CSV or spreadsheet file at any time. To request a copy of your data, ask us to correct it, or ask us to delete your account and associated data, email support@getcaddie.now. We'll respond within a reasonable time.
Three limits on a deletion request, stated up front rather than discovered later: deleted data can persist in a backup for up to 30 days (Section 6); entries in a support-access record are not removed piecemeal on request while your account exists, though they go when the account does (Section 6); and fingerprints already published to Hedera cannot be deleted by anyone, though they contain no personal information (Section 8).
Caddie uses the minimum necessary to keep you signed in and the Service working, such as your session and authentication token. We don't use third-party advertising trackers and we don't sell data to ad networks. Sentry, listed in Section 4, is used only for error monitoring, not behavioral tracking. If you use the in-app support chat, Crisp sets its own cookie so a conversation can continue across visits.
Caddie is not directed at, and is not intended for use by, anyone under 18, consistent with the eligibility requirement in our Terms. We don't knowingly collect personal information from children.
Caddie's infrastructure and service providers are based in the United States, and information is processed and stored there.
The one exception is the fingerprint publication described in Section 8. Hedera is a public, globally distributed network, so those fingerprints are stored and readable worldwide and permanently. They are one-way digests and contain no personal information.
We may update this Privacy Policy from time to time. If we make material changes, we'll provide reasonable notice, such as an email or an in-app notice, before they take effect. Changes are posted on this page with an updated version and date.
Questions about this Policy, or a request about your data? Reach us at support@getcaddie.now.