Privacy Policy

Effective date: June 20, 2025

Introduction

At Calidius (this term also includes our subsidiaries and affiliates, hereafter "Calidius", "we", "our" or "us"), the protection of your privacy and the security of your personal information are fundamental priorities. We are committed to handling with the utmost care any information we collect from or about you.

This document details the Privacy Policy that transparently describes our methods of collecting, processing, using, storing, and protecting personal data that we obtain in connection with your use of our website, applications, and all our online services (collectively, the "Services").

This Privacy Policy does not apply to content we process on behalf of professional clients under specific offers (notably API). In those cases, data use is governed by the agreements made with those clients for access and use of such offers.

If you wish to understand how OpenAI collects and uses data to train the language models powering ChatGPT and other Services, and to know your choices on this topic, please see this help article.

1. Data Controller

Calidius, headquartered at 229, rue Saint-Honoré, 75001 Paris, France, is the data controller of your personal data, as described in this Privacy Policy.

2. Personal data collected

We may collect, process, and store personal data about you ("Personal Data") in various ways detailed below:

Personal data you provide to us

• Account data: If you create an account to access our Services, we record all information relating to that account, such as your identity, contact details, login information, date of birth, payment data, and your transaction history.

• Communication data: If you communicate with us by email, on social networks, or other contact channels, we may record personal data about you (name, contact info, message content).

• Other information: We may also collect additional information you choose to provide, e.g., when you participate in an event, a survey, or when you provide elements to verify your identity or age.

User content sent to Naya

Calidius does not collect or store any data from the input you provide to Naya ("Content"): this includes your prompts, and any files, images, or audio content transmitted depending on the features used. You may provide inputs ("Input Data") and receive outputs ("Output Data") from the Services: together, these are considered "Content", fully managed by OpenAI.

Personal data automatically collected during use of our website

• Connection data: With each use of the Services, your browser or device automatically sends us certain information, such as IP address, browser type/configuration, date and time of the request, and how you interact with our Services.

• Usage data: We also collect information about your use of the Services: types of content viewed or interacted with, features used, actions taken, time zone, country, connection dates/times, user agent, browser version, device/computer type, connection method.

• Device information: We may collect information about the device used to access our Services: name and type of device, operating system, hardware identifiers, browser version. Information collected depends on your device type and its settings.

• Location data: To ensure security or enhance your user experience, we may estimate the geographical area of access based on your IP address, for example, to detect unusual login activity or provide responses tailored to your location. Some Services may also let you voluntarily provide more precise location data (e.g., via GPS data).

• Cookies and similar technologies: Our site uses cookies and similar technologies to operate, manage, and improve our Services and your experience. If you browse without creating an account, some cookies may store session data (e.g., preferences). For more, see our Cookie Policy.

Data received from other sources

We may receive additional information from trusted partners, especially for security (to prevent fraud, abuse, or other threats), and from marketing providers who may give us info about potential clients for our professional offers.

3. Use of personal data

The personal data collected or received may be used for the following purposes:

• Provide, operate, analyze, and maintain our Services (e.g., respond to your questions about Naya);

• Develop and improve our Services or conduct research (e.g., to create new features or products);

• Communicate with you, especially to send info about our Services, events, or significant changes or improvements to our offers;

• Prevent fraud, illegal or abusive activity, and protect the security and integrity of our systems and Services;

• Comply with legal obligations and protect the rights, privacy, safety, or property of our users, Calidius, or third parties;

• Aggregate or anonymize your personal data so it can no longer identify you, to analyze usage, improve the offer, or conduct research. Such anonymized data is kept in that form and never re-identified except where legally required.

4. Sharing and disclosure of personal data

Calidius may share your personal data in the following circumstances:

• Providers and service providers: To meet operational needs and provide certain services/features, your personal data may be sent to providers, including: hosts, client relationship providers, cloud vendors, content publishers, tech support, security, email services, payment providers, transaction services, IT solutions. These providers only access/process/store your data strictly as required for their role and according to our instructions.

• Business transfers: In case of a strategic operation (merger, restructuring, bankruptcy, transfer of Services to a third party), your personal data may be shared with those involved and transferred along with all assets to a successor or affiliate.

• Public authorities or other third parties: Your data may be shared with government authorities, companies in our sector, or others, in accordance with law, in situations such as: (i) legal obligation or action needed to meet such obligation; (ii) protection/defense of our rights or property; (iii) our detection, at our sole discretion, of a violation of our terms, policies, or laws; (iv) detection or prevention of fraud or illegal activity; (v) protection of safety, security, and integrity of our products, employees, users, or the public; (vi) defense against liability claims.

• Affiliated companies: We may share your data with companies controlling, controlled by, or under common control with Calidius, in line with this Privacy Policy.

• Professional account administrators: When you join a ChatGPT Enterprise or business account, designated admins may access and manage your OpenAI account and content. If your account is created with an organization’s email address, OpenAI may share certain info (e.g., email) with the organization, especially to link you to a business account.

• Other users and third parties you interact or share data with: Some features let you share conversations with other users (e.g., shared links), or send info to third-party apps (e.g., via web search). Data sent to such third parties is subject to their own terms and policies: it is your responsibility to check before sharing.

5. Retention of personal data

Calidius retains your personal data only as long as strictly necessary to provide the Services or for legitimate business purposes (dispute resolution, security, legal compliance). The exact duration depends on:

• The purpose for which data is processed (e.g., retention needed to guarantee service);

• The volume, nature, and sensitivity of data;

• The risk level if data is used or disclosed without authorization;

• Any legal requirements in effect.

6. Your rights regarding your personal data

You have, under applicable law, the following rights over your personal data:

• Right to access your data and details of processing;

• Right to obtain deletion of your data from our systems;

• Right to request correction or update of your data;

• Right to transfer your data to a third party (portability);

• Right to limit some forms of processing;

• Right to withdraw your consent at any time when processing is based on it;

• Right to file a complaint with your local data protection authority.

You also have:

• The right to object at any time to processing for direct marketing purposes;

• The right to object to some processing based on Calidius’s legitimate interest.

You can exercise these rights via your Calidius account, or, if impossible, by submitting a request via this form.

We strive to answer all questions/requests promptly. If your complaint is not resolved by Calidius, you can contact your local supervisory authority. For the UK, contact the Information Commissioner’s Office; for Switzerland, the Federal Data Protection and Information Commissioner.

Notes on AI answer accuracy

Our Services, including Naya, generate responses based on your questions, predicting the most probable wording according to the OpenAI model. These responses may sometimes not be strictly factually accurate. You should never fully trust the factual accuracy of any Naya-generated answer: if you identify inaccurate info about yourself, you may request its correction or deletion via privacy.openai.com or This email address is being protected from spambots. You need JavaScript enabled to view it.. OpenAI will handle your request per applicable law and technical capabilities.

To exercise your rights regarding data collected by OpenAI on the internet to train its models, see this help article.

7. Protection of minors

Our Services are not aimed at or designed for people under 18. We do not knowingly collect or process any personal data for minors under 18. If you believe a minor may have provided us personal data, please notify us via this form. After checking, we will delete any data collected inappropriately. Use of our Services by a minor always requires parental or legal guardian consent.

8. Data security

We apply commercially recognized technical, administrative, and organizational measures to protect personal data against loss, misuse, access, disclosure, modification, or destruction. However, no data transmission over the internet or by email is ever fully secure or error-free. As a precaution, please be careful when sending sensitive information. Calidius cannot be held responsible for bypassing privacy settings or security devices, whether from our Service or those of third parties.

9. Changes to the Privacy Policy

We may amend this Policy at any time. In that case, an updated version will be posted on this page with its effective date. Unless specific legal notification is required, posting the updated version constitutes notification.

10. Contact us

If you have any questions, comments, or concerns not already answered in this Policy, you can contact our team via the dedicated form.