Privacy Policy

1. Introduction

Caldera PBC (“Caldera,” “we,” “us,” or “our”) is a Delaware public benefit corporation that builds AI-powered software products for government agencies and public-sector organizations. This Privacy Policy describes how we collect, use, share, and protect personal information obtained through our website at calderapbc.com (the “Site”).

This policy applies to the Site and communications initiated through it. It does not apply to data processed within Caldera’s software products on behalf of government clients, which is governed by separate data processing agreements with obligations specific to each customer relationship.

2. Information We Collect

Information You Provide

When you submit an inquiry through our contact form or communicate with us via email, you may provide:

• Name
• Email address
• Organization name and type (e.g., city, county, state agency)
• Job title
• The content of your message, including any description of your technology needs

Information Collected Automatically

When you visit the Site, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Referring URL and pages visited on the Site
• Date, time, and duration of your visit

We use this information in aggregate to understand how visitors use the Site and to improve its performance. We also use the LinkedIn Insight Tag, an advertising cookie described in Section 8, which lets LinkedIn record visits to the Site by LinkedIn members.

3. How We Use Your Information

We use personal information collected through the Site to:

• Respond to your inquiries and evaluate potential engagements
• Communicate with you about our services, where you have expressed interest or consented to such communications
• Maintain and improve the functionality, security, and performance of the Site
• Show relevant advertising on LinkedIn to people who have visited the Site, and measure how well that advertising works
• Comply with applicable legal obligations, including responding to lawful requests from public authorities
• Protect our rights, privacy, safety, or property, and that of our users and the public

We do not use personal information collected through the Site for automated decision-making that produces legal or similarly significant effects on you.

4. How We Share Your Information

We do not sell, rent, or trade your personal information for money. We may share your information in the following limited circumstances:

• Service providers. We use a limited number of third-party service providers to operate the Site and process communications (for example, our email delivery provider). These providers are contractually obligated to use your information only as necessary to provide services to us and to maintain appropriate security measures.
• Advertising partners. When you visit the Site, the LinkedIn Insight Tag sends LinkedIn information about your visit, such as the pages you view, your IP address, and your browser, which LinkedIn may associate with your LinkedIn account. LinkedIn uses this information under its own privacy policy. We receive only aggregated reports and audiences, not the identities of individual visitors.
• Legal requirements. We may disclose your information if required to do so by law, regulation, or valid legal process (e.g., subpoena, court order, or government request).
• Protection of rights. We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of these Terms, suspected fraud, or situations involving potential threats to the safety of any person.
• Business transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via the Site of any such change in ownership.

5. Data Security

We implement technical and organizational security measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit via TLS, access controls limiting data access to authorized personnel, and regular review of our security practices.

While we take reasonable steps to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain personal information collected through the Site for as long as reasonably necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Contact form submissions and related correspondence are generally retained for two years from the date of last communication, unless the inquiry results in a product subscription, in which case retention is governed by the applicable subscription agreement.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• Access. You may request a copy of the personal information we hold about you.
• Correction. You may request that we correct inaccurate or incomplete personal information.
• Deletion. You may request that we delete your personal information, subject to certain legal exceptions.
• Opt-out. You may opt out of receiving communications from us at any time by following the unsubscribe instructions in our emails or contacting us directly.

To exercise any of these rights, please contact us at contact@calderapbc.com. We will respond to verified requests within 30 days.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to non-discrimination for exercising your privacy rights. You also have the right to opt out of the “sharing” of personal information for cross-context behavioral advertising, which under the CCPA may include the LinkedIn Insight Tag described in Section 8. To opt out, enable Global Privacy Control in your browser, which the Site honors automatically, or contact us at contact@calderapbc.com.

8. Cookies and Similar Technologies

The Site uses cookies and similar technologies for essential functionality (such as maintaining session state), analytics, and advertising.

For advertising, we use the LinkedIn Insight Tag. It sets cookies that let LinkedIn recognize visitors who are LinkedIn members, so that we can show them ads on LinkedIn, see aggregated information about the kinds of professionals who visit the Site (such as job titles and industries), and measure the results of our LinkedIn ads. LinkedIn does not share the identities of individual visitors with us. See LinkedIn’s Cookie Policy and Privacy Policy for how LinkedIn handles this information.

You can opt out of advertising cookies in several ways:

• Enable Global Privacy Control in your browser. When the Site detects this signal, it does not load the LinkedIn Insight Tag.
• Adjust the advertising settings in your LinkedIn account to limit how LinkedIn uses data from other websites to show you ads.
• Configure your browser to block or delete cookies. Blocking essential cookies may affect the functionality of certain features of the Site.

9. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children’s Privacy

The Site is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Government Client Data

This Privacy Policy applies only to information collected through the Site. Data that government agency customers input into or generate through Caldera’s software products is handled in accordance with the terms of our agreements with those customers, which may include requirements under FISMA, FedRAMP, CJIS, or other applicable federal, state, or local regulations. Customer data is not commingled with Site data and is subject to enhanced security controls as specified in the applicable agreement.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your rights regarding your personal information, please contact us at contact@calderapbc.com.

For general information about our services, please see our homepage or get in touch through our contact form.