Privacy Policy

1. Introduction

Caldera PBC (“Caldera,” “we,” “us,” or “our”) is a Delaware public benefit corporation that builds AI-powered software products for government agencies and public-sector organizations. This Privacy Policy describes how we collect, use, share, and protect personal information obtained through our website at calderapbc.com (the “Site”).

This policy applies to the Site, communications initiated through it, and the account and usage information described in Section 11. It does not apply to the data our customers put into Mesa, Caldera’s software platform, which we process on their behalf under our Customer Terms of Service and Data Processing Addendum, or under the customer’s separately negotiated agreement with us.

2. Information We Collect

Information You Provide

When you request a demo, contact us, or communicate with us by email, you may provide:

• Your name and work email address
• Your job title and organization
• The products you’re interested in
• The content of your message, including any description of your technology needs

When you request a whitepaper or case study, you provide your name, work email address, and organization, and we email the document to you.

If you apply for a job with us, we collect the information you send, such as your résumé and correspondence, and use it to evaluate your application.

Information Collected Automatically

When you visit the Site, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Referring URL and pages visited on the Site
• Date, time, and duration of your visit

We use this information in aggregate to understand how visitors use the Site and to improve its performance. Our analytics are provided by Cloudflare, our hosting provider, and don’t use cookies. We also use the LinkedIn Insight Tag, an advertising cookie described in Section 8, which lets LinkedIn record visits to the Site by LinkedIn members.

3. How We Use Your Information

We use personal information collected through the Site to:

• Respond to your inquiries and evaluate potential engagements
• Communicate with you about our services, where you have expressed interest or consented to such communications
• Maintain and improve the functionality, security, and performance of the Site
• Show relevant advertising on LinkedIn to people who have visited the Site, and measure how well that advertising works
• Comply with applicable legal obligations, including responding to lawful requests from public authorities
• Protect our rights, privacy, safety, or property, and that of our users and the public

We do not use personal information collected through the Site for automated decision-making that produces legal or similarly significant effects on you.

4. How We Share Your Information

We do not sell, rent, or trade your personal information for money. We may share your information in the following limited circumstances:

• Service providers. We use a limited number of third-party service providers to operate the Site and process communications (for example, our hosting provider and our email delivery provider). These providers are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate security measures.
• Advertising partners. When you visit the Site, the LinkedIn Insight Tag sends LinkedIn information about your visit, such as the pages you view, your IP address, and your browser, which LinkedIn may associate with your LinkedIn account. LinkedIn uses this information under its own privacy policy. We receive only aggregated reports and audiences, not the identities of individual visitors.
• Legal requirements. We may disclose your information if required to do so by law, regulation, or valid legal process (e.g., subpoena, court order, or government request).
• Protection of rights. We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our Website Terms of Service, suspected fraud, or situations involving potential threats to the safety of any person.
• Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the Site of any such change in ownership.

5. Data Security

We implement technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit via TLS, access controls limiting data access to authorized personnel, and regular review of our security practices.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain personal information collected through the Site for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Contact form submissions and related correspondence are generally retained for two years from the date of last communication, unless the inquiry results in a product subscription, in which case retention is governed by our agreement with the customer.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may request that we correct inaccurate or incomplete personal information.
• Deletion. You may request that we delete your personal information, subject to certain legal exceptions.
• Opt-out. You may opt out of receiving communications from us at any time by following the unsubscribe instructions in our emails or contacting us directly.

To exercise any of these rights, please contact us at contact@calderapbc.com. We will respond to verified requests within 30 days.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your privacy rights. You also have the right to opt out of the “sharing” of personal information for cross-context behavioral advertising, which under the CCPA may include the LinkedIn Insight Tag described in Section 8. To opt out, enable Global Privacy Control in your browser, which the Site honors automatically, or contact us at contact@calderapbc.com.

8. Cookies and Similar Technologies

The only cookies on the Site are those set by the LinkedIn Insight Tag, which we use for advertising. Our analytics don’t use cookies.

The LinkedIn Insight Tag sets cookies that let LinkedIn recognize visitors who are LinkedIn members, so that we can show them ads on LinkedIn, see aggregated information about the kinds of professionals who visit the Site (such as job titles and industries), and measure the results of our LinkedIn ads. LinkedIn does not share the identities of individual visitors with us. See LinkedIn’s Cookie Policy and Privacy Policy for how LinkedIn handles this information.

You can opt out of advertising cookies in several ways:

• Enable Global Privacy Control in your browser. When the Site detects this signal, it does not load the LinkedIn Insight Tag.
• Adjust the advertising settings in your LinkedIn account to limit how LinkedIn uses data from other websites to show you ads.
• Configure your browser to block or delete cookies.

The Site doesn’t respond to “Do Not Track” browser signals, which have no common standard. It does honor Global Privacy Control, as described above.

9. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children’s Privacy

The Site is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Mesa Accounts and Customer Data

When an organization gives you an account on Mesa, we collect information to set up and run that account, such as your name, email address, job title, and organization, and information about how you use Mesa, such as log data, IP address, browser and device information, and diagnostic data. We use this information to provide, secure, support, and improve Mesa, to communicate with you about the service, and to administer our agreement with your organization. We share it only with service providers that help us operate Mesa, under contracts that limit their use of it, and as described in Section 4. We keep it while your account is active and afterward only as long as needed for the purposes above or as required by law.

The documents, records, and other content that organizations put into Mesa belong to them. We process that content only on their behalf, under our Customer Terms of Service and Data Processing Addendum or the organization’s agreement with us, and we never use it to train AI models. If you have a question about information about you in an organization’s content, please contact that organization.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We post each new version on this page with the date it takes effect, and where appropriate we provide additional notice. Earlier versions remain available on this page.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us at contact@calderapbc.com.

For general information about our services, please see our homepage or get in touch through our contact form.