Privacy Policy

1. Introduction

Callabash ("we", "us", or "our") operates the website at callabash.ai and related services (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Account Information

When you sign up via social login (Google, LinkedIn, or Apple), we receive your name, email address, and profile picture from the authentication provider. We do not receive or store your password.

Usage Data

We collect information about how you interact with the Service, including:

• Topics you create and your content preferences
• Digest interactions (opens, clicks, feedback signals)
• Time spent engaging with content
• Custom RSS feed URLs you add

Technical Data

We automatically collect standard technical information such as browser type, device type, IP address, and referring URLs. This data is used for security, debugging, and service improvement.

3. How We Use Your Information

We use your information to:

• Provide and personalize your content digests
• Generate AI-powered summaries and relevance insights
• Improve content matching and recommendation quality
• Send email digests on your chosen schedule
• Process payments and manage your subscription
• Maintain security and prevent abuse

4. AI Processing

Your topic descriptions and preferences are processed by AI services (Anthropic Claude and Voyage AI) to generate content embeddings, relevance scores, and personalized summaries. This processing is done to provide the core functionality of the Service. We do not use your personal data to train third-party AI models.

5. Data Sharing

We do not sell your personal information. We share data only with:

• Auth0 (authentication provider)
• Stripe (payment processing)
• Knock (email delivery)
• Anthropic & Voyage AI (AI processing for content matching)
• Railway (cloud hosting)
• Sentry (error monitoring)

Each provider processes data only as necessary to provide their service and under their own privacy policies.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS), secure credential storage, HMAC-signed inter-service communication, and regular security audits. However, no method of transmission or storage is 100% secure.

8. Cookies

We use essential session cookies to maintain your login state. We do not use third-party advertising or tracking cookies.

9. Your Rights

You have the right to:

• Access, correct, or delete your personal data
• Export your data in a portable format
• Opt out of non-essential email communications
• Request information about how your data is processed

To exercise these rights, contact us at hello@callabash.ai.

10. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such data, please contact us so we can promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, contact us at hello@callabash.ai.