Privacy Policy

Effective date: March 26, 2026

1. Introduction

Caldera PBC (“Caldera,” “we,” “us,” or “our”) is a Delaware public benefit corporation that builds AI-powered software products for government agencies and public-sector organizations. This Privacy Policy describes how we collect, use, share, and protect personal information obtained through our website at calderapbc.com (the “Site”).

This policy applies to the Site and communications initiated through it. It does not apply to data processed within Caldera's software products on behalf of government clients, which is governed by separate data processing agreements with obligations specific to each customer relationship.

2. Information We Collect

Information You Provide

When you submit an inquiry through our contact form or communicate with us via email, you may provide:

  • Name
  • Email address
  • Organization name and type (e.g., city, county, state agency)
  • Job title
  • The content of your message, including any description of your technology needs

Information Collected Automatically

When you visit the Site, we may automatically collect certain technical information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referring URL and pages visited on the Site
  • Date, time, and duration of your visit

We use this information in aggregate to understand how visitors use the Site and to improve its performance. We do not use third-party advertising trackers or sell any data collected through the Site.

3. How We Use Your Information

We use personal information collected through the Site to:

  • Respond to your inquiries and evaluate potential engagements
  • Communicate with you about our services, where you have expressed interest or consented to such communications
  • Maintain and improve the functionality, security, and performance of the Site
  • Comply with applicable legal obligations, including responding to lawful requests from public authorities
  • Protect our rights, privacy, safety, or property, and that of our users and the public

We do not use personal information collected through the Site for automated decision-making or profiling.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

  • Service providers. We use a limited number of third-party service providers to operate the Site and process communications (for example, our email delivery provider). These providers are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate security measures.
  • Legal requirements. We may disclose your information if required to do so by law, regulation, or valid legal process (e.g., subpoena, court order, or government request).
  • Protection of rights. We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of these Terms, suspected fraud, or situations involving potential threats to the safety of any person.
  • Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the Site of any such change in ownership.

5. Data Security

We implement technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit via TLS, access controls limiting data access to authorized personnel, and regular review of our security practices.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain personal information collected through the Site for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Contact form submissions and related correspondence are generally retained for two years from the date of last communication, unless the inquiry results in a product subscription, in which case retention is governed by the applicable subscription agreement.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

  • Access. You may request a copy of the personal information we hold about you.
  • Correction. You may request that we correct inaccurate or incomplete personal information.
  • Deletion. You may request that we delete your personal information, subject to certain legal exceptions.
  • Opt-out. You may opt out of receiving communications from us at any time by following the unsubscribe instructions in our emails or contacting us directly.

To exercise any of these rights, please contact us at contact@calderapbc.com. We will respond to verified requests within 30 days.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your privacy rights. As noted above, we do not sell personal information.

8. Cookies and Similar Technologies

The Site may use cookies and similar technologies for essential functionality (such as maintaining session state) and analytics. We do not use cookies for advertising or cross-site tracking. You may configure your browser to reject cookies, though this may affect the functionality of certain features of the Site.

9. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

The Site is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Government Client Data

This Privacy Policy applies only to information collected through the Site. Data that government agency customers input into or generate through Caldera's software products is handled in accordance with the terms of our agreements with those customers, which may include requirements under FISMA, FedRAMP, CJIS, or other applicable federal, state, or local regulations. Customer data is not commingled with Site data and is subject to enhanced security controls as specified in the applicable agreement.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us at contact@calderapbc.com.

For general information about our services, please see our homepage or use our contact form.