Data Protection

Privacy Policy

Last updated: July 9, 2025

This Privacy Policy applies to the website www.calima.ai, published by CALIMA AI, LLC. At Calima, we believe that automation should never come at the expense of privacy. We are committed to respecting GDPR (EU 2016/679), UK GDPR, the Data Protection Act 2018, and the Google API Services User Data Policy.

Our Commitment

  • ✓ No resale of your data
  • ✓ No advertising use
  • ✓ No unnecessary sharing with third parties
  • ✓ Human access only in strictly necessary cases

Who are we?

CALIMA AI, LLC
131 Continental Dr, Suite 305
Newark, Delaware 19713, United States
📩 contact@calima.ai or support@calima.ai

Data provided by you

  • • Name, first name
  • • Email address
  • • Company name
  • • Content added to your Calima platform (texts, files, notes)
  • • Data entered into agents (texts, files, questionnaire responses)
  • • Payment information (via our secure providers)

Automatically collected data

  • • IP address, browser type, device
  • • Connection and error logs
  • • Platform usage data (logs, interactions with agents)
  • • Cookies (see Cookie Policy)

Data from Google

When you connect your Google account, we only request the necessary scopes:

  • → gmail.readonly – reading selected emails to feed an agent
  • → gmail.send – sending emails via an agent
  • → gmail.compose – creating drafts that you can manually validate

We do not access your contacts, Drive, or other services without explicit consent.

Processing purposes

We use your data to:

  • • Provide CALIMA.AI services (creation and execution of agents)
  • • Optimize your user experience (personalization, suggestions)
  • • Provide customer support (human or AI)
  • • Improve the platform (usage analysis, debugging)
  • • Comply with our legal obligations
  • • Perform certain automations at your request via Google APIs

Who has access to your data?

Your data is accessible only to:

  • • You, via your personal account
  • • Our technical team (only in case of support or debugging)
  • • Our GDPR-certified subcontractors (payment, hosting, analytics)

We never sell your data to third parties.

Security

We implement technical and organizational measures to protect your data:

  • • TLS encryption in transit, encryption at rest
  • • Secure storage of keys and OAuth tokens
  • • Role-based access controls and principle of least privilege
  • • Audit logs and continuous monitoring
  • • Backups and redundancy
  • • Regular audits, partial anonymization of sensitive content

Your rights

Under GDPR and UK GDPR, you have the following rights:

Right of access

Obtain a copy of your data

Right to rectification

Correct inaccurate data

Right to erasure

Request deletion of your data

Right to portability

Retrieve your data in a standard format

Right to object

Object to certain processing

Right to withdraw consent

Withdraw your consent at any time

📩 To exercise your rights: contact@calima.ai

Deletion and revocation

  • • Delete your data directly in the platform or by email
  • • Revoke Google access at any time from your Google account (Security → Third-party access)
  • • Delete your Calima account → we delete your data within 30 days maximum

For any request to delete your personal data, contact us at contact@calima.ai