Privacy Policy

Last updated: October 2026

1. Overview & Scope

At Calmify (“we”, “us”, or “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the Calmify platform, website, and related publishing services.

2. Information We Collect

Account Information: When you register for Calmify, we collect your email address, name, and authentication credentials. Account authentication and sessions are managed securely through our authentication infrastructure.

Workspace & Editorial Data: We store the content you create and manage within your workspace, including article drafts, topic ideas, publishing schedules, tags, media metadata, and revision history.

Connected Website Credentials: To publish content directly to your connected content management systems (such as WordPress or custom webhook endpoints), we store destination URLs and access credentials. All publication tokens and secret keys are encrypted at rest using industry-standard authenticated encryption.

Technical & Usage Data: We automatically collect standard technical information, including browser type, operating system, IP address, and platform usage metrics to ensure operational reliability, prevent abuse, and maintain service security.

3. How We Use Your Information

We process your information strictly to operate, maintain, and provide the features of Calmify, including:

• Providing workspace organization, topic ideation, and editorial calendar management.
• Processing AI-assisted research, article drafting, and topic suggestions through configured model providers under strict API data privacy terms where customer data is not used to train public AI models.
• Dispatching scheduled articles and updates to your authorized publication endpoints.
• Safeguarding the platform against fraud, security incidents, and terms violations.
• Communicating essential service updates and account notices.

4. Third-Party Services & Data Sharing

We do not sell, rent, or trade your personal data or editorial content to third parties. We share information only with trusted service providers necessary to operate our platform:

Database & Infrastructure: Hosted with Supabase with Row-Level Security (RLS) enforcing strict multi-tenant isolation.

AI Model Providers: Automated research and drafting queries are transmitted over encrypted channels to AI model providers (such as OpenAI) in compliance with enterprise data protection standards.

Your Publishing Targets: Editorial content is only transmitted to external sites that you explicitly configure and authorize.

5. Data Security & Storage

We employ robust administrative, technical, and physical security measures to protect your data. All network communications are encrypted via TLS. Integration credentials are cryptographically encrypted at rest. We limit database access to authorized services only.

6. Your Rights & Data Retention

You maintain control over your content. You can edit, export, or delete your articles and connected websites directly within your workspace settings. If you wish to delete your account and all associated workspace data permanently, you can request full account deletion at any time.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our team through our contact page.