Section 01
What we collect
When you use Calloy we collect information you provide (name, email, company, shipping address, billing info via Stripe), files you upload (CAD geometry, drawings, photos), and usage data (IP, device, pages visited, interactions). Payment card data is handled entirely by Stripe and never stored on Calloy servers.
Section 02
How we use it
- Operate the marketplace, instant-quote engine, and Work Dashboard.
- Route jobs to matched shops and facilitate payouts.
- Send transactional emails (order confirmations, shipping updates).
- Prevent fraud and abuse.
- Improve our pricing and matching using aggregated, de-identified data. Files you send to Cal-L are not used to train AI models.
Section 04
CAD files and IP
Your CAD files are stored encrypted and shared only with the shop matched to your order. We retain them for the duration of your account plus the warranty window (30 days post-delivery) for dispute purposes, then delete on request or after a standard retention period.
Section 06
Your rights
Downloads and requests
You can download your account settings from Account settings, and a shop’s owner can export the record of any Team Chat conversation they’re in from that conversation’s menu. To access, export, correct, or delete any other personal data, email privacy@calloy.app.
Team Chat messages
When a Team Chat message is edited, its earlier text stays in its edit history, which everyone in that conversation can read (in a marketplace inquiry, that includes the other business). When a message is removed or retracted, its original is kept in the shop’s record: the shop’s owner can read and export it in a team channel, job conversation or direct message they are in; anywhere else (an inquiry, a support chat, a conversation the owner isn’t in) it is kept but nobody can read it in Calloy. Team Chat also records who has read each message, and who has confirmed an announcement and when. The time someone read a message is kept only in team channels, job conversations and direct messages, and only the people in that conversation can see it; in an inquiry, the other business can see that a message was read, never when. A job’s conversation can be joined by anyone who can see that job, the shop’s owner included, even one that everyone has left. Once in it, they read everything in it from the start: earlier messages, edit histories and read times, and the owner can then read and export the originals of removed messages there.
Floor status and online times
Team Chat also keeps each person’s floor status (where they are, a machine, a job and a short note) and, for the online and away dots, when they were last online and last seen in each shop they’re in. Everyone in that shop can see these (a status naming a job only by people who can see that job). They are kept until the shop or the account is deleted, and your account settings download (Export Account Settings) includes your own in the shops you’re still in. After you leave a shop, your last status and last online and last seen times there stay visible to that shop and are not in your download; email us to have them removed.
California and EU residents
California (CCPA/CPRA) and EU (GDPR) residents have additional rights, including the right to know, the right to delete, and the right to opt out of sale (Calloy does not sell personal data).
Section 07
Children
The Service is not directed to anyone under 18. We do not knowingly collect information from minors.
Section 08
Security
Data in transit is TLS-encrypted; data at rest is encrypted in Supabase and Stripe. We use workspace-scoped Row-Level Security across every user-owned table. No system is perfect — contact us immediately if you suspect your account has been compromised.
Section 09
Changes
We'll post material changes here and, when appropriate, email account holders. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
Section 10
Contact
Privacy questions or requests: privacy@calloy.app.