Privacy policy

Last updated: 2026-04-27

This policy describes how Callidex Inc. ("Callidex", "we", "us") collects, processes, stores, and shares personal data when you visit callidex.io or use our AI concierge service. We are a data processor on behalf of brokerages who deploy Callidex; for those brokerages, this page describes our processing practices. For visitors to callidex.io, we are a data controller for the limited data described below.

What we collect on callidex.io

• Email addresses you submit through the pilot brief and contact forms.
• Analytics events (page views, button clicks) via Google Analytics 4 — only after you consent in the cookie banner.
• Standard server logs (IP, user agent, referrer) retained for up to 30 days for abuse prevention.

What our brokerage clients deploy collects

When a brokerage runs Callidex on their site, the AI concierge processes inquiries from their visitors — names, email, phone, message content, and conversation history. Callidex is the processor; the brokerage is the controller. The brokerage's own privacy policy governs that data. We sign a Data Processing Agreement with every brokerage on request.

Where data lives

Lead data and conversation history live in an isolated Postgres schema in AWS us-east-1, encrypted at rest (AES-256) and in transit (TLS 1.3). Each brokerage's queries only ever touch their own schema.

What we do not do

• We do not train AI models on your or your clients' data.
• We do not sell, rent, or share lead data with any third party.
• We do not aggregate one client's data with another's for any purpose.

Subprocessors

To deliver the service we share the minimum necessary data with: Anthropic (model inference, zero data retention), AWS (storage and compute), Google Cloud (Calendar API), Twilio (SMS / WhatsApp delivery), and Vercel (web hosting + email-form intake). All have signed DPAs with us.

Your rights (GDPR / CCPA)

You have the right to request access, correction, export, or deletion of your personal data at any time. For visitors to callidex.io, email privacy@callidex.io. For data held on behalf of a brokerage, contact that brokerage; we will support their response within 30 days.

Cookies

callidex.io uses no analytics or marketing cookies until you accept them in the consent banner. Strictly necessary cookies (e.g. consent state) are the only cookies set by default. You can change your choice any time by clicking "Cookie settings" in the footer.

Retention

• Form submissions (email + message): kept until you ask us to delete, or 24 months of inactivity.
• Analytics events: 14 months (GA4 default).
• Server logs: 30 days.
• Brokerage-deployed lead data: governed by the brokerage's DPA, default 24 months unless they specify otherwise.

Children

callidex.io is a B2B service. We do not knowingly collect data from anyone under 16.

Changes to this policy

We will post material changes at the top of this page and email any active pilot client at least 30 days before changes take effect.

Contact

Privacy questions, data requests, or DPA requests: privacy@callidex.io
Postal: Callidex Inc., 777 Brickell Ave Ste 500, Miami, FL 33131, USA