Calibi AI (“Calibi AI”, “we”, “us”, or “our”) is an artificial-intelligence services company headquartered in Hinjewadi Phase 1, Pune, Maharashtra 411057, India. We design, build, and operate AI systems — chatbots, voice agents, multi-agent platforms, business automation, pre-built solutions, and consulting and training programs — for businesses, educational institutions, and corporate teams.

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you visit our website (calibiai.com), use our products, engage our services, or interact with us through any channel (email, phone, calendars, and third-party tools). By accessing or using our services, you acknowledge that you have read and understood this Policy.

We have designed this Policy to be consistent with applicable data-protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and, where applicable, the General Data Protection Regulation (GDPR) of the European Union. Where this Policy is stricter than local law, we follow the stricter standard.

We collect only the information we reasonably need to provide, secure, and improve our services. The categories below describe what we may collect and how.

We use personal information for the purposes below. Each purpose is tied to a legitimate need in delivering our services or complying with the law.

Under the DPDP Act and GDPR, we process personal information only where we have a valid legal basis. Depending on your location and the context, we rely on one or more of the following:

We do not sell, rent, or trade personal information. We share it only in the limited circumstances below, always under appropriate contractual safeguards such as data-processing agreements.

We are based in India and use service providers around the world. This means personal information you share with us may be transferred to, and processed in, countries other than yours, including the United States and the European Economic Area.

For such transfers we rely on the safeguards permitted by applicable law — for example, standard contractual clauses under the GDPR, the data-transfer mechanisms available under the DPDP Act, or the recipient's recognised adequacy. We remain accountable for the security of your information whenever and wherever it is processed.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, tax, accounting, or audit requirements, resolve disputes, and enforce our agreements.

Retention periods vary by category: contractual and billing records are kept for the duration of the engagement plus the period required by applicable law; website analytics data is retained for a limited rolling window; and marketing consent data is deleted when you opt out. When retention periods expire, we securely delete or anonymise the information in a manner consistent with good practice.

Depending on your location and the information involved, you may have the following rights. We honour requests promptly and without unreasonable delay.

To exercise any of these rights, email us at sales@calibiai.com and describe your request. We will verify your identity where appropriate and respond within the timeframes required by applicable law. You may also ask us to limit processing for the purpose of verifying your identity.

Our website uses cookies and similar technologies (such as local storage and analytics identifiers) to operate the site, remember preferences, and understand how visitors use it so we can improve it.

You can control or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of parts of the site. We do not use third-party advertising trackers on the site.

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures evolve as technology and risk change.

No method of transmission over the internet, or method of electronic storage, is 100% secure. We cannot guarantee absolute security, but we commit to investigating and responding to any suspected breach in line with the next section.

In the unlikely event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulator(s) without undue delay, as required by the DPDP Act, GDPR, and other applicable laws.

Any notification will describe, in clear language, the nature of the breach, the categories of information affected, the steps we have taken or plan to take, and what you can do to protect yourself. We will also notify affected individuals where a high risk is involved, unless a specific legal exemption applies.

Our services are directed to businesses, professionals, and educational institutions and are not intended for children under the age of consent under applicable law (generally 18, and 13 for certain online services in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, technology, or legal requirements. The “Last updated” date at the top of this page will always show when it was last revised.

For material changes, we will provide notice through the website and, where appropriate and lawful, by email before the change takes effect. Continued use of our services after a revised policy takes effect constitutes acceptance of the updated terms.

If you have questions, concerns, or requests about this Privacy Policy or our data practices, please contact our Data Protection Officer:

We aim to acknowledge requests within 5 business days and resolve them without undue delay. You also have the right to escalate any matter to the Data Protection Board of India or your local data-protection authority.