Callidora鈥檚 VoiceSee the fictional demo

Privacy

Private records do not become public by default.

Effective September 22, 2026. This owner-led release candidate uses minimum necessary disclosure. Public browsing does not open an account, upload, payment, connector, or case-workspace flow; the separately authenticated synthetic pilot has additional storage and AI-transfer rules below.

01

Notice status and public browsing

This notice describes the current release candidate and must be updated before broader accounts, analytics, advertising, real-data intake, or new processors are activated. Public pages and the fictional demonstration do not require a card, upload, account, or API credential. The Site uses no analytics or advertising SDK. Hosting and network providers can still receive ordinary request metadata such as IP address, device or browser information, requested URL, and time.

02

Do not submit sensitive material

Do not send child identifiers, addresses, medical or therapy information, financial data, sealed or privileged material, credentials, private media, or unrelated third-party information through a public contact channel.

03

Browser tools

The fictional demonstration uses fixed synthetic data. Public drafting tools do not upload, send, file, or publish a draft. The public Mini Backpack is the exception to automatic saving: after a visitor deliberately creates or saves it, the Backpack is stored as readable, application-unencrypted browser local storage on that device. It has no cloud sync, account persistence, AI processing, or automatic upload. Clipboard and downloaded copies remain under the visitor鈥檚 device and service settings.

04

Sign-in and the device-local private workspace

The private pilot uses ChatGPT sign-in and may receive the account identifier, email address, and available display name needed to authenticate and enforce the server allowlist. The full private workspace is stored as readable, application-unencrypted IndexedDB keyed to that account in the current browser. It can remain after sign-out until the user clears and verifies deletion or browser storage is lost. JSON exports and clipboard copies are also readable files or device data under the user鈥檚 control.

05

A separate server Hub on hold

The account-bound Hub pilot is a separate synthetic-only record stored server-side for the signed-in allowlisted account. New and changed server-Hub content, including imports, is now held for review; free-text persistence is closed. An existing row can be explicitly loaded, exported, or deleted. It does not automatically synchronize with the full device-local workspace, and their files and records must not be described as one interchangeable store.

06

Private AI transfer

For a separately consented synthetic-only AI request, the workspace content identified in the interface passes through Callidora鈥檚 server for screening and bounded context selection; a selected subset is then sent to OpenAI. The transfer receipt is produced after preparation and does not provide a pre-send content preview. Automated screening can miss sensitive information and does not prove anonymity or lawful sharing. The application requests store:false, which is not a zero-retention guarantee; provider abuse-monitoring retention can still apply unless the deployed project has an approved different control.

07

Safety ledger and unresolved retention

Application code is designed not to write prompt, source, or answer bodies to its safety ledger. Operational metadata and receipts can include request, account, timing, status, token, cost, consent, and selected-or-held identifiers. Final production retention periods and self-service export or deletion for server-side records are not approved. Real personal, child, case, medical, financial, sealed, privileged, or otherwise sensitive data therefore remains on hold.

08

Adults and children

Interactive private tools are limited to adults age 18 or older in the current pilot. The public pages are not knowingly designed to collect personal information directly from children. Do not use a child鈥檚 identity or records to test a public or private tool.

09

Processors, media, and contact

Site hosting, ChatGPT sign-in, OpenAI for a separately consented private AI request, browser or operating-system speech services, YouTube or Google after a visitor chooses to load or follow media, and the visitor鈥檚 email provider can process data under their own terms. The Site uses no analytics or advertising SDK. Email is not a secure record-upload channel.

10

Deletion and incident limits

Clearing a browser workspace removes the current account鈥檚 local vault only after the interface verifies the local deletion. It cannot recall clipboard data, downloaded or imported files, email, hosting logs, a completed server save, or an already completed provider transfer. To report a suspected privacy incident or request access, correction, or deletion, stop using the affected feature and describe the issue at a high level; include only a request or receipt identifier if available.