Privacy Policy

Who we are

Caldris makes an AI platform for Wealth Management teams. This policy covers the personal information we handle when you visit caldrisai.com, request a demo, use the Caldris product at app.caldrisai.com, or contact us.

“Caldris”, “we” and “us” mean Caldris AI, based in New York.

What we collect

• Information you give us. When you book a demo we ask for your name, work email, firm, role and firm type, and an optional note. When you write to us, we keep your message and how to reach you.
• Account information. When your firm gives you a Caldris account, we hold your name, work email, role and sign-in details. Passwords are stored only in a scrambled form that cannot be read back.
• Usage information. When you use the site or the product, we record the pages you visit, what you click, your browser and device, and the time. Session recordings hide the text on the page and everything you type.
• Connected accounts. If you connect an email account, we bring in the messages your firm needs, as section 05 describes.

How we use it

We use personal information to:

• answer demo requests and questions;
• set up and run accounts, and keep them secure;
• provide, fix and improve the site and the product;
• tell you about changes to the service;
• meet our legal obligations and enforce our terms.

We do not sell personal information, and we do not use it for advertising.

Your firm’s data

Firms use Caldris to work with information about their clients: households, entities, accounts, holdings, documents and correspondence. Your firm decides what goes into Caldris and stays in charge of it. In privacy law, your firm is the controller of this data and Caldris processes it on your firm’s behalf, under our agreement with your firm.

If you are a client of a firm that uses Caldris, please contact that firm about your information. We will help it answer you.

Google user data

If you connect a Gmail account, Caldris asks Google for permission to read your mail and its labels. It cannot send, change or delete anything in your mailbox.

• How we use it. Caldris reads new messages to find the ones about your firm’s clients, and saves those, with their attachments, as documents in your firm’s Caldris workspace, where you can search and cite them. Messages that are not about client work are skipped.
• How it is stored. Saved messages are kept in your firm’s workspace, in the United States, encrypted in transit and at rest.
• Who sees it. The people at your firm who use the workspace. We share it only with the providers that run Caldris for us, our AI model provider among them, and only to provide the service. Nobody at Caldris reads your mail unless you ask us to for support, we need to for security, or the law requires it.
• AI models. Google user data is never used to train AI models.
• Disconnecting. You can disconnect at any time on the Connections page, or in your Google Account under third-party connections. Caldris then stops reading your mail, and you or your firm can ask us to delete what it brought in.

Caldris’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI models

Caldris uses AI models from Anthropic, through Anthropic’s commercial service, to answer questions, draft reports and run agents. The information a task needs is sent to the model to produce its answer.

Under its commercial terms, Anthropic does not train its models on that information, and we never train models on your firm’s data. Anthropic keeps it only for a limited time under those terms, and then deletes it.

Who we share it with

We share personal information only:

• with the companies that run Caldris for us: Vercel (hosting), Neon (database), Google (file storage, and the spreadsheet our team uses to follow up on demo requests), Anthropic (AI models), PostHog (product analytics) and Slack (demo requests to our team), each bound to use it only on our behalf;
• when your firm tells us to;
• when the law requires it, or to protect our users and Caldris;
• in a merger or sale of our business, with notice to you.

Cookies and analytics

The site and the product use cookies and similar storage to keep you signed in, remember your settings and understand how they are used. Our analytics run through our own domain, and we use no advertising cookies.

If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, the site asks before it uses analytics cookies, and starts them only if you accept. You can change your answer at any time.

You can also block or delete cookies in your browser settings. The product needs its sign-in cookie to work.

How long we keep it

We keep personal information only as long as we need it for the purposes in this policy, and then delete it. Your firm’s data is kept as our agreement with your firm sets out. When the agreement ends, or your firm asks, we delete it, and it leaves our backups as they cycle.

Security

We protect information with encryption in transit and at rest, and access limited to the people who need it. No service can promise perfect security. If a breach affects your information, we will tell you and the authorities as the law requires.

Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, correct it, delete it, receive a copy, object to or limit how we use it, and withdraw consent you have given. California residents have these rights under the CCPA, and the right not to be treated differently for using them. We do not sell or share personal information for advertising.

To make a request, write to ask@caldrisai.com. We may need to confirm who you are, and we will answer within the time the law allows. You can also complain to your local data protection authority.

International transfers

Caldris is based in the United States, and our providers store information there. If you are outside the United States, your information is transferred to it. Where the law requires, we protect those transfers with safeguards such as the European Commission’s Standard Contractual Clauses.

Children

Caldris is a service for professionals and is not meant for children. We do not knowingly collect personal information from anyone under 16.

Your firm’s data may include information about clients’ family members, minors among them. It is handled as your firm’s data, as section 04 describes.

Changes to this policy

When we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will tell you before it takes effect.

Contact us