Legal

Privacy Policy

Last updated: November 17, 2026

Calculyx AI ("we", "us", "our") is committed to protecting your privacy. This GDPR-inspired policy explains what we collect, why we collect it, how we use it, and the rights you have. This page is maintained by the Calculyx AI team and is not an independent legal certification.

1. Data controller

The controller of your personal data is Calculyx AI, based in Visakhapatnam, India. For any privacy request, contact balaji04@calculyxai.online.

2. Information we collect

  • Email addresses — when you subscribe to the newsletter, sign up, or contact us.
  • Contact form submissions — your name, email, subject, and message.
  • Newsletter subscriptions — email, source of signup, and opt-in timestamp.
  • Authentication data — hashed credentials or OAuth identifiers, when you create an account.
  • Usage analytics — aggregated, anonymised information about which pages and calculators are used.
  • Cookies & local storage — for authentication, preferences, and calculator caching (see Cookie Policy).
  • Device & browser information — user-agent, screen size, timezone.
  • Log data — IP address, request timestamps, and error traces for security and reliability.

3. How we use your information

  • To operate and improve the Service (calculators, AI copilot, stocks).
  • To send transactional and newsletter emails via Resend.
  • Product analytics — to understand which features are used and how to improve them.
  • Customer support — replying to your questions and bug reports.
  • Security monitoring — detecting abuse, prompt-injection attempts, and unauthorised access.
  • Fraud and misuse prevention.
  • Complying with legal obligations.

4. Legal bases (GDPR)

  • Consent — newsletter subscriptions and optional cookies.
  • Performance of a contract — providing calculators, AI, and account features you request.
  • Legitimate interests — security monitoring, product analytics, service improvement.
  • Legal obligation — responding to lawful requests from authorities.

5. Third-party services

We rely on trusted service providers that process limited data on our behalf to deliver the Service:

  • Groq — AI inference (LLM) for the AI copilot and stock analysis.
  • Finnhub — global market data (quotes, fundamentals, news).
  • Indian market data provider — Indian stock quotes, indices, and corporate data.
  • Resend — transactional and newsletter email delivery.
  • Vercel / Cloudflare — hosting, edge functions, and CDN.
  • Supabase — managed database and authentication.

Each provider processes only the minimum data required for its function (e.g. your email for Resend; your prompt for Groq). We do not sell your personal data to any third party.

6. Cookies

See our dedicated Cookie Policy. In short:

  • Essential cookies — authentication, session, CSRF.
  • Preference cookies — theme, country, currency.
  • Analytics cookies — aggregated usage stats (only where used and disclosed).

7. Data storage & international transfers

Data is stored with our managed backend and hosting providers, which may operate data centres outside your country. All data in transit is encrypted via TLS. Data at rest is encrypted using industry-standard mechanisms provided by the underlying platforms. Access to production data is limited to the app owner.

8. Retention

  • Account data — retained while your account is active and up to 30 days after deletion for backups.
  • Newsletter subscribers — retained until you unsubscribe.
  • Contact form messages — retained up to 24 months for support history.
  • Logs — typically 30–90 days.

9. Your rights

Under the GDPR and similar laws you have the right to:

  • Access — request a copy of your personal data.
  • Correction — ask us to correct inaccurate data.
  • Deletion — request erasure of your data ("right to be forgotten").
  • Data portability — receive your data in a machine-readable format.
  • Withdraw consent — for newsletter or optional processing at any time.
  • Object — to processing based on legitimate interests.
  • Lodge a complaint — with your local data protection authority.

To exercise any right, email balaji04@calculyxai.online. We aim to respond within 30 days.

10. Security

We use TLS, hashed credentials, rate limiting, input validation, monitoring, and least-privilege access to protect your data. See our Security Statement. No system is 100% secure — we cannot guarantee absolute security.

11. Children's privacy

Calculyx AI is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with a new "Last updated" date.

13. Contact for privacy requests

For questions about this page, write to balaji04@calculyxai.online.

Calculyx AI
Visakhapatnam, Andhra Pradesh, India