Privacy policy

Caltor Inc. ("Caltor", "we", "us") runs caltor.ai and is responsible for the personal information described on this page. Our address for this policy is Caltor Inc., 1875 Mission St, Ste 103-204, San Francisco, CA 94103-3561.

Questions about this policy go to .

When you send a message through the contact or RFP form, we receive your name, email address, company, the topic you chose and what you wrote.

When you email or call us, we receive your message or the details of the call and whatever you choose to include. What we receive when you apply for a role is set out under Applicants.

When you browse the site, the servers that deliver it record standard technical data: IP address, browser and device type, the page requested and the time. We use it to keep the site running and secure, not to build a profile of you.

The site sets no advertising or tracking cookies and loads no third-party analytics or advertising pixels. Our own measurement runs on our servers and records events such as an enquiry being sent and the topic chosen, never who sent it.

We do not buy personal information, and we do not sell it or share it for targeted advertising.

We use what you send us to reply, to scope and deliver work you ask us about, to consider your application, and to keep records of our business dealings.

Where a law such as the GDPR asks for a legal basis, ours are your request (to reply and prepare a proposal), a contract with you or your employer, our legitimate interest in running and securing the firm, and legal obligations such as tax and accounting records. We do not use your information for automated decisions that have legal or similarly significant effects on you.

A small number of service providers process information for us, only on our instructions: Cloudflare hosts the site and screens form submissions for spam, Resend delivers form submissions to our inbox, and Google Workspace hosts our email.

We share information beyond them only when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

We work from the United States and the United Arab Emirates, and our providers operate in several countries, so information you send may be processed outside the country you live in. Where the law requires it, those transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Enquiries that do not lead to work are kept for up to 24 months after our last contact and then deleted. How long we keep applications is set out under Applicants.

Client and contract records are kept for as long as the relationship lasts and then for as long as tax, accounting and legal obligations require. Server logs are kept for short periods for security and are not used to identify visitors.

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to receive a copy, to object to or restrict how we use it, and to withdraw any consent you gave. California residents have the right to know, delete and correct, and not to be treated differently for using those rights. We do not sell or share personal information as the CCPA defines those terms.

To make a request, write to . How deletion works is set out on our data deletion page. We confirm who you are before acting on a request and answer within the period the applicable law sets, usually 30 days. You can also complain to your local data protection authority.

When you apply for a role through its page on this site, we receive your name, email address, phone number and country; your city, LinkedIn profile and portfolio link if you give them; the files you attach, such as a CV and a cover letter; your answers to the role's questions, including the pay you expect if you choose to say; how you heard about us and the link that brought you to the role; the version of this notice you were shown; and whether you asked us to keep your details for future roles. When you apply by email, we receive the email and its attachments.

We use it to consider you for the role, to contact you about it, and to keep the record of applications that employment law requires. If you ask us to keep your details for future roles, we also use them to consider you when a new role opens. A person reads every application. No automated rule or model rejects anyone, and we never sell applicant information or use it for advertising. Where a law such as the GDPR asks for a legal basis, ours is the steps you asked us to take before a possible contract with you, our legal obligations and, for future roles, your consent.

Applications are stored on servers we own and run in Dallas, Texas, in the United States, and only the people at Caltor who handle hiring can open them. Every file is checked for malware before anyone opens it. Cloudflare carries the form and screens it for spam, and an application sent by email is also held in our Google Workspace mailbox.

We keep an application, its files and its answers for 12 months after the role closes, and then delete them. If you ask us to keep your details for future roles, we keep them for 24 months from our last contact with you, and that period starts again when you apply again or renew your agreement. You can withdraw that agreement at any time, after which we keep your application only for the 12 months above. If we hire you, your application becomes part of your employment record and is kept under the rules for those records.

You can ask what we hold about you, have it corrected, receive a copy, have it deleted before these periods end, or withdraw your agreement to be kept for future roles. Write to from the address you applied with. We act on a deletion request within 30 days, and you can also complain to your local data protection authority.

Access to personal information is limited to the people who need it, on managed devices with least privilege access, and our providers encrypt data in transit. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.

This site is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16, and if we learn that we have, we delete it.

When we change this policy we update the date at the top of the page. If a change materially affects how we use information we already hold, we tell the people affected where we have a way to reach them.

Write to , call , or send post to Caltor Inc., 1875 Mission St, Ste 103-204, San Francisco, CA 94103-3561.