Privacy Policy
Effective July 7, 2026
This policy describes how Calsico handles information when you use calsico.com and app.calsico.com.
Introduction
Calsico ("we", "us", or "our") operates calsico.com (our marketing site) and app.calsico.com (the Calsico product). This Privacy Policy explains how we collect, use, and share information when you use our websites and services.
This policy was drafted by our team and is not legal advice. Entity details and governing law are placeholders until reviewed by a lawyer. If you have questions, contact us at calsicostudio@gmail.com.
Information we collect
We collect information you provide directly, information generated when you use the service, and limited technical data needed to operate the product.
- Account information: name, email address, password (stored in hashed form), and optional profile image when you create an account.
- Session information: session tokens, IP address, and browser user agent when you sign in.
- Google account linking: OAuth access and refresh tokens, granted scopes, and linked spreadsheet IDs and names when you connect Google for calculator building and execution.
- Calculator configuration: calculator names, descriptions, URL slugs, layout settings, and field mappings (labels, cell references, input types).
- Calculator runs: inputs submitted by visitors and outputs returned by your spreadsheet, stored each time a published calculator is submitted.
- Workspace data: organization name, member roles, and email addresses used for workspace invitations.
- Billing information: payment customer identifiers and subscription status managed through our payment provider. We do not store full payment card numbers on our servers.
How we use information
- Provide, operate, and maintain the Calsico service.
- Authenticate users and manage workspaces and permissions.
- Execute published calculators by writing inputs to and reading outputs from linked Google Sheets.
- Enforce plan limits on calculators, workspace members, and monthly runs.
- Process subscriptions and billing through our payment provider.
- Send transactional messages such as password reset emails and workspace invitations.
- Protect the security and integrity of our service and comply with legal obligations.
Controller and processor roles
For registered users and workspace data, Calsico acts as the data controller.
When someone uses a published calculator, the workspace owner who published that calculator is the data controller for visitor-submitted values. Calsico acts as a data processor on the publisher's behalf when storing run inputs and outputs needed to operate the calculator.
Google API Limited Use disclosure
Calsico's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve user-facing features of Calsico.
- We do not sell Google user data.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read Google user data except with your consent, for security purposes, to comply with applicable law, or when the data is aggregated and anonymized.
Third-party service providers
We use trusted third parties to help operate Calsico. They process data on our behalf under contractual obligations.
- Google: OAuth authentication and Google Sheets/Drive APIs for spreadsheet access and calculator execution.
- Dodo Payments: subscription billing and customer portal.
- Cloudflare: website and application hosting, content delivery, and infrastructure.
- Turso: database hosting for application data (stored in the AWS Asia Pacific South region).
Data retention
We retain account, workspace, calculator, and run data for as long as your account is active or as needed to provide the service.
Calculator run records are retained to support billing limits, debugging, and service reliability. In-product data deletion tools are not yet available; you may request deletion by contacting us.
Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing.
To exercise these rights, email us at the contact address below. We will respond within a reasonable timeframe. Self-service account deletion is not yet available in the product.
Children's privacy
Calsico is not directed at children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page shows when it was last revised. Continued use of Calsico after changes means you accept the updated policy.
Contact
Questions about this Privacy Policy or your data? Email calsicostudio@gmail.com.