CalibratedAgentsPrivacy
Draft
Privacy, in plain words.
The short version first — corrected the way we'd correct an AI's answer. The full policy follows.
We keep your customers' questions, documents and answers scores, verdicts and counts.
Their text is stored by default only if you switch it on — and deleted after the retention period you choose.
Signing in asks Google for access to your account your name and email address — nothing else.
Your API keys are kept as you typed them only as a one-way hash, shown to you once.
Who we are
CalibratedAgents [legal entity name, registered address]. Contact: [email protected].
What we collect
Your Google account name, email and profile picture when you sign in; what you tell us during onboarding (your role and, if you choose, your company); your workspace, projects, API keys — stored only as a one-way hash — and usage counts.
What we don't keep
By default we do not store the questions, context or answers you send for checking. We keep scores, verdicts, token counts and timing. Text is stored only if your workspace turns it on, and is deleted after the retention period you choose.
Who processes it for us
[Confirm before publishing] Supabase (account data), Cloudflare (network and API gateway), Modal (verification compute), Google (sign-in; Gemini for part of the check), and other model providers where used.
Where it is processed
[State regions truthfully — shared hosting today; India-only processing once it is available.]
How long we keep it
Account data while your workspace exists. Usage records for [period]. Opt-in text for the retention period set in your workspace.
Your rights
Access, correction and deletion of your data, and withdrawal of consent, under India's Digital Personal Data Protection Act, 2023 and other applicable law. [Grievance officer details.]
Changes
We will post changes here and note the date at the top.