Calto ("we") is a product of Orelia Capital, a sole proprietorship in India owned by Vaibhav Sharma (trade name: Orelia Capital), 22, Mahadev Nagar, Gandhipath, Vaishali Nagar, Jaipur, Rajasthan, India 302021. Orelia Capital is the data fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023.
Who can use Calto
Calto is only for people aged 18 or older. You confirm this before any account is created.
What we collect
- Your email address, to sign you in and send emails you have not turned off.
- What you type or say into Calto: brain dumps, tasks, dates, notes and plans.
- Your settings, such as timezone, week days and morning-email preferences.
- The date and version of the terms and privacy policy you accepted, and your 18+ declaration.
- The days you open Calto, so the morning email can adapt to how you use it.
- Feedback you choose to send us, with the screen you were on, device type, browser and app version. Never your task content.
- Technical error records (error type, where it happened, browser and device type, app version, time, and your user ID if signed in). These never include your task text, brain dumps, email address, codes or keys.
We do not use advertising, third-party analytics or tracking pixels, and we do not track whether you open emails.
How we use it
- To run Calto: organise what you write, show your plan and send sign-in codes.
- To send a short morning email (on by default; change or turn it off anytime in Settings).
- To fix problems and improve Calto, using error records and your feedback.
- To protect Calto from abuse, such as bots requesting sign-in codes.
Who processes your data for us
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database and sign-in | Mumbai, India |
| Anthropic (Claude) | Organising your brain dumps and suggesting your Top 3 | Outside India |
| Resend | Sending emails | Outside India |
| Lovable / Cloudflare | Hosting the app and running its server code on a global network | Global |
| Cloudflare Turnstile | Bot protection on sign-in | Global |
| Your browser's speech service | Turning speech into text, if you use the microphone | Depends on your browser |
When Calto organises a brain dump, only that text plus your timezone, current date and week settings is sent to Anthropic, never your email address or task history.
Some browsers process speech on their provider's servers, and voice may not work offline. Calto never stores audio.
How long we keep it
- Raw brain-dump text: 30 days, then permanently deleted. Tasks keep the short phrase they came from.
- Deleted tasks: removed from view immediately and permanently erased within 1 hour.
- Error records: 30 days.
- Email send records (no email content): 90 days.
- Sign-up attempts never confirmed with a code: deleted after 7 days.
- Everything else: until you delete it or your account.
Your rights
- Access and export: download a CSV of your tasks and a JSON file of all your data from Settings.
- Correction: edit anything in the app.
- Erasure: delete your account from Settings. This removes your data, including your feedback. AI usage records (counts and costs only, no text) are kept without any link to you.
- Grievances: contact our grievance officer below.
Security
Each person's data is isolated with database row-level security, secret keys never reach your browser, and we have a documented process for responding to security incidents.
Changes
If we change this policy in a meaningful way, we'll ask you to review and accept the new version.
Contact and grievance officer
Vaibhav Sharma, Orelia Capital: vaibhav@centraligence.com