Privacy Policy

Caluvexa is a workspace for developers to manage clients, projects and tasks. This policy explains what personal data we collect when you use Caluvexa, why we collect it, and what rights you have. If you have any questions, contact us at mauro.bubble@gmail.com.

• Account data: your email address and password when you sign up. Your password is stored only in encrypted (hashed) form, and we can never see it.
• Profile data: your name and, if you choose to add them, a profile photo, date of birth, country, city, phone number and job title.
• Workspace content: the clients, projects, tasks, calendar entries, messages and other information you add to Caluvexa. When a workspace owner invites a team member or a client, they give us that person's email address, and we send them an invitation.
• Billing data: when you pay for a plan, Stripe collects your card details, billing name and address, and your VAT number if you give one. We never see your full card number. We keep only your plan, whether it is paid, when it renews, and the references Stripe gives us for your billing account and subscription.
• Technical data: basic information your browser sends, such as your IP address, browser type and the time of your visit. Our hosting and sign-in providers use it to run the service and keep it secure.

• To create your account, sign you in and keep your workspace available to you.
• To keep Caluvexa secure and to prevent abuse.
• To contact you about your account, such as email confirmation or password reset.
• To suggest a project with the AI Builder, when you ask it to.
• To charge for a paid plan and keep the invoices the law requires.

If you are in the European Union, we process your data because it is necessary to provide the service you signed up for (performance of a contract), and for our legitimate interest in keeping Caluvexa secure and working. We keep invoices because tax and accounting laws require it (legal obligation). Where the law requires your consent, we ask for it first.

We share data only with the providers we need to run Caluvexa:

• Supabase stores your account and workspace data and handles sign-in.
• Cloudflare hosts the website and delivers it to your browser.
• Google Fonts delivers the font our pages use. To load it, your browser connects to Google's servers, which receive your IP address and browser details.
• OpenAI powers the AI Builder. Only when you use it, we send OpenAI what you write in the AI Builder, the names and industries of your clients, the names of your team members and today's date, so it can suggest a project. Under OpenAI's terms for business customers, this data is not used to train their models.
• Stripe handles payments for paid plans: the payment page, your card, invoices and VAT. Stripe receives your email address and the details you enter when you pay.

Some of these providers may process data outside the European Union. In that case the transfer is protected by safeguards approved by the EU, such as Standard Contractual Clauses.

We do not sell your data and do not share it with advertisers. If we add new features that use other providers, such as sign-in with Google, we will update this policy before they go live.

We use only what is needed for Caluvexa to work. In your browser we store:

• your sign-in session, so you stay signed in,
• a cookie that remembers whether the app sidebar is open,
• whether you prefer to see lists as cards or as a table,
• your unfinished AI Builder conversation, so you can continue it later. It is removed when you choose "Start over".
• the paid plan you picked on our pricing, until you have signed up and reached the payment page (at most one day).

We do not use advertising or tracking cookies.

We keep your data while your account is active. When you delete your account, we delete your personal data, except where the law requires us to keep it longer, such as invoices, which are kept for as long as tax and accounting laws require. Copies in backups are removed when those backups expire.

You can ask us to:

• show you the personal data we hold about you,
• correct data that is wrong,
• delete your data,
• give you a copy of your data in a common format,
• limit or stop certain uses of your data.

To use any of these rights, email us at mauro.bubble@gmail.com. You can also file a complaint with your local data protection authority. In Croatia, this is the Personal Data Protection Agency (AZOP).

Caluvexa is not meant for children under 16, and we do not knowingly collect their data.

If we change this policy, we will update the date at the top of this page. For important changes, we will also let you know by email or in the app.