Privacy Policy

a. Account Information

When you create an account, we collect your name, email address, and password (stored as a secure hash — we never store your plain-text password).

b. Usage Data

We automatically collect information about how you interact with the Service: features and tools used, actions taken within the platform, session duration and frequency, device type, browser, operating system, IP address, and approximate location (country/region level).

c. User Content

Content you create, upload, or generate using the Service — including text documents, essays, slide content, study materials, uploaded images, audio, video, PDF files, AI prompts, and generated outputs.

d. Communications

If you contact us for support or feedback, we collect the content of your messages.

We use your information to:

• Provide and operate the Service
• Process AI requests on your behalf
• Improve the Service using aggregated, anonymized usage data
• Send important service communications
• Respond to support requests
• Detect fraud and enforce our Terms of Service
• Comply with legal obligations

We do not use your personal User Content (your actual documents, images, or files) to train AI models without your explicit opt-in consent.

When you use AI-powered features, your inputs are sent to AI processing systems to generate outputs.

• We may use third-party AI providers (such as Anthropic) to power AI features. These providers process your inputs under their own data processing agreements and privacy policies.
• We minimize what is sent — only the content necessary to fulfill your request.
• We do not share your content with AI providers for the purpose of training their general models (subject to their applicable terms).
• AI requests are not permanently stored beyond what is needed to deliver results and maintain security logs.

Your data is stored in two ways:

• Locally: Some data (projects, preferences) may be stored in your browser's local storage or session storage for performance. This data stays on your device.
• On our servers: Account data and uploaded files are stored on secure cloud infrastructure.

We use industry-standard encryption in transit (HTTPS/TLS) and at rest where applicable.

We do not sell your personal data.

We may share data only in these limited circumstances:

• AI API providers (e.g., Anthropic): To process your AI requests
• Hosting/infrastructure providers: To operate the Service
• Authentication providers (e.g., Clerk): To manage your login
• Analytics providers: Aggregated, anonymized usage data only
• Legal authorities: If required by law, court order, or to protect our rights
• Business transfer: If Calari Studio is acquired or merges, your data may transfer — we will notify you in advance

All third-party providers are contractually required to protect your data and use it only as directed by us.

We use cookies and similar technologies to keep you logged in, remember your preferences, and analyze usage patterns.

• Essential cookies: Required for the Service to function. Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Service. You may opt out via your browser settings.

We do not use third-party advertising cookies or sell data to advertising networks.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt-out of marketing: Unsubscribe from promotional emails at any time

To exercise any of these rights, email us at legal@calaristudio.com with the subject line "Privacy Request". We will respond within 30 days.

Some data may need to be retained to comply with legal obligations or resolve disputes.

Calari Studio is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13 without verified parental consent, we will delete it promptly.

For users aged 13–17: We collect only the minimum data necessary to provide the Service and do not use it for targeted advertising or behavioral profiling.

For educational institutions: If you are deploying Calari Studio in an educational context and have compliance requirements (e.g., FERPA, COPPA), please contact us to discuss a data processing agreement.

We retain your data for as long as your account is active or as needed to provide the Service.

• Account data: Retained while your account exists, plus up to 90 days after deletion to allow recovery
• User Content: Deleted within 30 days of account deletion upon request
• Logs and analytics: Retained for up to 12 months in identifiable form, then aggregated or deleted

You can request early deletion at any time by contacting us.

We implement reasonable and industry-standard technical safeguards to protect your data, including HTTPS/TLS encryption for data in transit, encryption at rest for sensitive data, and access controls limiting internal data access.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

The Service may link to or integrate with third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before sharing your information with them.

Calari Studio is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you via email or in-app notice.

Continued use of the Service after the effective date means you accept the updated policy.

For questions, concerns, or privacy requests:

Email: legal@calaristudio.com

For data deletion or access requests, use the subject line: "Privacy Request"