Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Last updated: January 15, 2025
Table of Contents
Overview
Legal Basis for Processing (GDPR)
Information We Collect
Children's Privacy (COPPA Compliance)
How We Use Technical Data
Data Retention
Information Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your information only in these limited circumstances:
- • Service Providers: Trusted third parties who assist in operating our service (hosting, analytics, email delivery)
- • Legal Requirements: When required by law, court order, or government request
- • Safety & Security: To protect our rights, property, or safety, or that of users or others
- • Business Transfers: In connection with a merger, acquisition, or sale of assets
- • Your Consent: When you explicitly authorize sharing
All service providers are contractually bound to maintain confidentiality and use data only for specified purposes.
International Data Transfers
Your personal information may be transferred to and processed in countries other than your own, including the United States. We ensure adequate protection through:
- • Standard Contractual Clauses (SCCs) approved by the European Commission
- • Adequacy decisions by relevant data protection authorities
- • Appropriate safeguards and security measures
- • Regular assessments of third-country data protection laws
EU residents have the right to obtain information about safeguards governing international transfers.
Data Security
We implement industry-standard technical and organizational security measures:
- • Encryption: TLS 1.3 encryption for data transmission, AES-256 for data at rest
- • Access Controls: Multi-factor authentication, role-based access, principle of least privilege
- • Security Monitoring: 24/7 monitoring, intrusion detection, security incident response
- • Regular Audits: Annual security assessments and penetration testing
- • Employee Training: Regular data protection and security awareness training
- • Data Backup: Secure, encrypted backups with tested recovery procedures
Despite these measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.
Data Breach Notification
In the event of a data breach that poses risks to your rights and freedoms, we will:
- • Notify relevant supervisory authorities within 72 hours (GDPR requirement)
- • Inform affected users without undue delay if high risk is determined
- • Provide details about the breach, potential consequences, and mitigation measures
- • Offer guidance on steps you can take to protect yourself
- • Maintain records of all data breaches for regulatory compliance
Your Privacy Rights (GDPR & CCPA)
GDPR Rights (EU Residents):
- • Right to Access: Obtain confirmation of processing and access to your personal data
- • Right to Rectification: Correct inaccurate or incomplete personal data
- • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- • Right to Restrict Processing: Limit how we process your data
- • Right to Data Portability: Receive your data in a structured, machine-readable format
- • Right to Object: Object to processing based on legitimate interests
- • Right to Lodge a Complaint: File complaints with your local supervisory authority
CCPA Rights (California Residents):
- • Right to Know: Know what personal information is collected, used, shared, or sold
- • Right to Delete: Request deletion of personal information
- • Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
- • Right to Non-Discrimination: Not face discrimination for exercising privacy rights
To exercise these rights, contact us at privacy@calchub.dev or use our Privacy Rights Portal. We will respond within 30 days (GDPR) or 45 days (CCPA).
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. See our Cookie Policy for detailed information.
Cookie Categories:
- • Strictly Necessary: Essential for website functionality (always active)
- • Performance: Anonymous analytics and performance monitoring
- • Functional: Remember preferences and enhance features
- • Marketing: Personalized content and advertising (with consent)
Manage cookie preferences through our Cookie Settings or your browser settings. Note that disabling certain cookies may affect website functionality.
Automated Decision-Making
We may use automated systems to:
- • Detect and prevent fraud or security threats
- • Provide personalized calculator recommendations
- • Analyze usage patterns for service improvements
- • Optimize website performance and user experience
These systems do not make decisions that significantly affect you without human oversight. You have the right to request human review, express your point of view, and contest automated decisions.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@calchub.dev
Data Protection Officer: dpo@calchub.dev
CCPA Requests: ccpa@calchub.dev
Address: CalcHub, Inc., 1234 Innovation Drive, San Francisco, CA 94105, USA
Phone: +1 (555) 123-4567