Privacy Policy

Calypr is operated by Tracey Wong, trading as Calypr Co., based in Malaysia. We decide how the personal data described here is used. For anything in this policy, email support@calypr.co.

• Account: your name, email address and profile picture from Google or GitHub when you sign in.
• Your work: projects and the graphs in them, prompts and settings, chat transcripts and run history, files you upload, and media your agents generate.
• Usage and billing: runs, the models used, token counts and credit costs, your plan, and your Stripe customer and subscription IDs. Card details go straight to Stripe; we never see or store them.
• Keys and connections: API keys you add and tokens for apps you connect (such as Notion or GitHub). These are stored encrypted.
• Analytics: pages visited and actions taken in the app (for example “opened the code view”), with browser, device and approximate location derived from your IP address.
• Messages: your email address if you join the updates list, and anything you send us by email.

• to run Calypr: sign you in, save your work, run your agents and show the results;
• to meter credits, take payments and enforce plan limits;
• to keep the service secure and prevent abuse;
• to understand how Calypr is used so we can improve it;
• to email you about your account, billing and important changes.

When an agent runs, its inputs (your messages, prompts, uploaded images and the context it retrieves) are sent to the AI provider for that block, and the output comes back to Calypr. On our keys that means OpenAI for text, image and voice, and fal for 3D and video. If you add your own key for another provider, such as Anthropic or Moonshot, your inputs go to that provider under your own account with them.

Tools and connected apps work the same way: a Notion or GitHub step reads from and writes to that service using the access you granted.

We don’t use your content to train AI models, and we don’t sell it. Providers process it under their API terms, which for the providers we use exclude training on API data by default.

We use these service providers, who process data only to provide their service to us:

• Vercel — hosts the website and stores uploaded and generated files (United States)
• Railway — runs the Calypr API that executes your agents (United States)
• Neon — our database: accounts, projects, transcripts and usage (United States)
• Stripe — takes payments and manages subscriptions
• Google and GitHub — sign-in, when you choose to use them
• OpenAI — text, image and voice models when your agents run on our keys
• fal — 3D and video generation when your agents run on our keys
• PostHog — product analytics (United States)

Share links are public: anyone with a link you create can run that agent and see what it returns. Revoke a link to stop that.

We may also disclose data if the law requires it, or to protect people from harm. If Calypr is sold or merged, your data would move to the new owner under this policy, and we’d tell you first.

• Agent memory (what an agent remembers mid-conversation) is kept for 7 days on Free and 30 days on paid plans, then deleted.
• Projects, transcripts and files are kept until you delete them or your account.
• Deleting your account (Settings → Account) cancels any subscription and removes your access straight away. Your data is then permanently deleted after a 7-day grace period, in case the deletion was a mistake.
• Billing records are kept for as long as tax and accounting law requires, even after you delete your account.
• Analytics are kept by PostHog under its standard retention.

• Delete projects, transcripts and files at any time, or your whole account.
• Remove an API key or disconnect an app in Settings.
• Ask us to take you off the updates list at any time.

Depending on where you live, you may also have the right to access, correct, export or restrict the use of your personal data, or to object to it. Email support@calypr.coand we’ll respond within 30 days. You can also complain to your local data protection authority.

We use cookies to keep you signed in and to remember small preferences, such as which workspace is open and whether the sidebar is collapsed. PostHog stores an identifier in your browser to count visits and actions. We don’t use advertising cookies or sell data to advertisers.

Data is sent over HTTPS. API keys and connector tokens are encrypted at rest, and each account’s data is kept separate from every other’s. No system is perfectly secure; if a breach affects your data, we’ll tell you as the law requires.

Our servers and most of our providers are in the United States, so your data is processed there even if you live elsewhere. Where the law requires it, we rely on our providers’ standard safeguards for these transfers.

Calypr isn’t for anyone under 16. If you believe a child has given us personal data, email support@calypr.coand we’ll delete it.

We’ll update this policy when what we collect or who processes it changes, and email you about significant changes. The date at the top shows when it last changed. See also our Terms of Service.