Brainhive Labs Private Limited ("Calibr", "we", "us", "our") is committed to protecting the personal data of individuals who interact with us. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you have in relation to it.
This Privacy Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applies to Calibr's activities as a Data Fiduciary — that is, where Calibr determines the purpose and means of processing personal data directly.
Please read this Policy carefully. By using our website at calibr.ai, registering for an account, or interacting with us in any of the ways described below, you acknowledge that you have read and understood this Policy.
- What This Policy Covers — and What It Does Not
- Personal Data We Collect
- How We Use Your Personal Data
- Legal Basis for Processing
- How We Share Your Personal Data
- Data We Do Not Collect or Process
- AI Features and Personal Data
- Cookies and Tracking Technologies
- Data Retention
- Data Security
- Children's Privacy
- Your Rights as a Data Principal
- International Users
- Third-Party Links
- Changes to This Policy
- Contact and Grievance Redressal
- Visitors to calibr.ai and related web properties
- Individuals who register for a Free Trial or create an account
- Customers and their contacts who purchase or enquire about the Services
- Individuals who subscribe to our newsletter or marketing communications
- Participants at events, webinars, or conferences hosted or attended by Calibr
- Job applicants
This Policy does not cover the personal data of employees and learners processed by Calibr on behalf of its business Customers through the Calibr platform. In that context, Calibr acts as a Data Processor under the instructions of the Customer, who is the Data Fiduciary. That processing is governed by the Data Processing Addendum (DPA) agreed between Calibr and each Customer.
If you are an employee or learner using the Calibr platform through your employer's account, please contact your employer for information about how your personal data is handled in that context.
| Category | Examples |
|---|---|
| Identity and contact data | Name, email address, phone number, job title, company name |
| Account data | Username, password (stored in hashed form), account preferences |
| Communication data | Content of emails, support tickets, chat messages, and form submissions sent to us |
| Survey and feedback data | Responses to surveys, product feedback, feature requests |
| Event and marketing data | Event registrations, webinar sign-ups, newsletter subscriptions |
| Payment data | Billing name, address, and transaction references. Payment card details are processed directly by our payment processor and are not stored by Calibr. |
| Job application data | CV, cover letter, work history, qualifications, and other information submitted as part of a job application |
- IP address and approximate location derived from it
- Browser type, operating system, and device identifiers
- Pages visited, links clicked, time spent, and navigation patterns on our website
- Referring URL (the page you came from before visiting calibr.ai)
- Session data and engagement metrics within the platform (for registered users)
This data is collected using cookies and similar tracking technologies. See Section 8 for more detail.
We may receive personal data about you from third parties in limited circumstances, including:
- From our marketing and CRM platforms when you interact with our advertisements or content on third-party channels (such as LinkedIn or Google)
- From referral partners or resellers who introduce you to Calibr
- From publicly available professional sources (such as LinkedIn) where we research prospective customers as part of our sales process
| Purpose | Details |
|---|---|
| Providing and managing the Services | Creating and managing your account, processing your Subscription, delivering the platform, and providing technical support |
| Responding to enquiries | Addressing questions, support requests, and communications you send to us |
| Billing and payments | Processing payments, issuing invoices, managing renewals, and resolving billing disputes |
| Product improvement | Analysing usage patterns and feedback to improve the functionality, performance, and user experience of the Services |
| Marketing and communications | Sending product updates, newsletters, event invitations, and promotional materials — where you have consented or we have a lawful basis to do so. You may opt out at any time (see Section 12). |
| AI feature improvement | See Section 7 for specific disclosure on how AI features interact with personal data we collect directly. |
| Security and fraud prevention | Monitoring for unauthorised access, detecting and preventing fraudulent activity, and protecting the integrity of the Services |
| Legal and compliance | Meeting our legal obligations, responding to lawful requests from authorities, enforcing our Terms of Service, and establishing or defending legal claims |
| Recruitment | Assessing job applications and communicating with candidates |
Consent. For marketing communications, newsletters, and non-essential cookies and analytics, we rely on your consent. You may withdraw consent at any time — see Section 12 on exercising your rights. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Contractual performance. Where you have entered into an agreement with Calibr (including by accepting our Terms of Service), we process personal data to the extent necessary to perform that agreement — for example, to create your account, provide the Services, process payments, and provide support.
Legal obligation. We process personal data where required to comply with applicable law, including tax laws, regulatory requirements, and lawful orders from courts or government authorities.
Legitimate use. Under the DPDP Act, certain processing may occur without consent where it is necessary for employment-related purposes (including processing job applicants' data), for safety, or for other purposes specified under the Act and its Rules. We rely on this basis narrowly and only where the applicable conditions are met.
For users outside India: If you are located in the European Union or the United Kingdom, the legal bases above correspond respectively to consent (GDPR Article 6(1)(a)), contractual necessity (GDPR Article 6(1)(b)), legal obligation (GDPR Article 6(1)(c)), and legitimate interests (GDPR Article 6(1)(f)) where applicable. See Section 13 for further information for international users.
We engage third-party service providers to help us operate our business and deliver the Services. These providers process personal data on our behalf and under our instructions, and are contractually required to maintain appropriate security and confidentiality. Categories of service providers include:
- Cloud infrastructure and hosting providers
- Payment processors
- Customer relationship management (CRM) and marketing automation platforms
- Email delivery and communication tools
- Analytics and product monitoring tools
- Customer support platforms
- Recruitment and HR management tools
We use third-party analytics and B2B marketing tools on our website — including Google Analytics and advertising platforms such as Google Ads and LinkedIn — which may collect technical data (such as IP addresses, cookies, and browsing behaviour on calibr.ai) to help us measure website performance and reach relevant business audiences. These tools operate under their own privacy policies. You can manage your preferences for these technologies through our cookie settings or through your browser. See Section 8 for detail.
We do not share your personal data with advertising networks for the purpose of targeting you with personalised advertisements on third-party platforms beyond what is described above.
We may share personal data with our lawyers, auditors, accountants, and insurers where necessary for the provision of professional services, subject to confidentiality obligations.
We may disclose personal data to courts, regulators, law enforcement agencies, or other government authorities where required to do so by applicable law, court order, or to protect the rights, property, or safety of Calibr, our customers, or others. Where legally permitted, we will notify you of such disclosure.
For clarity:
- Calibr does not collect or process special categories of personal data (such as health data, biometric data, financial data beyond payment processing, or data relating to caste, religion, or political opinions) as part of its standard operations.
- Calibr does not knowingly collect personal data from children under the age of 18. See Section 11.
- Calibr does not sell personal data to third parties.
- Calibr does not use personal data collected under this Policy to target users with personalised advertising on third-party networks beyond standard B2B marketing analytics described in Section 5.2
We do not use personal data collected under this Policy to train AI models without explicit consent.
Where the AI Features are used within an established Customer account, the processing of personal data through those features is governed by the DPA, not this Policy.
The AI Features are powered in part by third-party AI model providers. Where those providers process personal data collected directly by Calibr (such as during website interactions or Free Trial use), they do so as sub-processors under appropriate data processing agreements.
Strictly necessary cookies. Required for the website and platform to function. These cannot be disabled without affecting core functionality. No consent is required for these cookies.
Analytics cookies. Help us understand how visitors use the website (pages visited, time spent, navigation paths). We use Google Analytics for this purpose. These cookies are set only with your consent.
Marketing and tracking cookies. Used to measure the effectiveness of our B2B marketing campaigns and to understand which channels bring visitors to calibr.ai. These may include cookies set by Google Ads and LinkedIn. Set only with your consent.
Functionality cookies. Remember your preferences (such as language or login state) to improve your experience. Set with your consent where they are not strictly necessary.
For Google Analytics specifically, you can opt out using the Google Analytics Opt-out Browser Add-on.
| Category | Retention Period |
|---|---|
| Account and registration data | Duration of the account, plus twelve (12) months following account closure or last active use |
| Customer and billing records | Seven (7) years from the date of the transaction, as required under applicable tax and financial recordkeeping laws |
| Marketing and communications data | Until you unsubscribe or withdraw consent, plus six (6) months thereafter |
| Support and communications records | Three (3) years from the date of the interaction |
| Website analytics data | Twenty-six (26) months from collection (consistent with Google Analytics default settings) |
| Job application data — unsuccessful | Twelve (12) months from the date of the final decision, unless you consent to being retained in a talent pool |
| Job application data — successful | Transferred to the employment record and retained in accordance with applicable employment laws |
| Legal hold data | For as long as required for the relevant legal proceedings or regulatory enquiry |
Where personal data is no longer required, we will delete or anonymise it securely. We may retain anonymised or aggregated data beyond these periods without restriction, as it no longer constitutes personal data.
We implement commercially reasonable administrative, technical, and physical security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include data encryption in transit and at rest, access controls and authentication, and regular security assessments.
No system is completely secure. While we take appropriate precautions, we cannot guarantee the absolute security of personal data transmitted to us over the internet. You are responsible for keeping your account credentials confidential.
In the event of a personal data breach that is likely to result in harm to affected individuals, Calibr will notify the Data Protection Board of India and affected individuals in accordance with the requirements of the DPDP Act and its Rules.
The Services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18years. Under the DPDP Act, processing personal data of children requires verifiable consent from a parent or guardian.
If you believe that a child under 18 has provided personal data to us without appropriate parental consent, please contact us at privacy@calibr.ai and we will promptly take steps to delete such data.
Under the DPDP Act, you have the following rights in relation to your personal data:
Right to access. You have the right to obtain confirmation of whether we are processing your personal data, a summary of the personal data we hold about you, and information about the processing activities we carry out.
Right to correction and erasure. You have the right to request correction of inaccurate or incomplete personal data. You also have the right to request erasure of your personal data where the purpose for which it was collected is no longer being served, or where you have withdrawn your consent, subject to applicable legal retention obligations.
Right to grievance redressal. You have the right to raise a grievance about our processing of your personal data with our Grievance Officer (see Section 15). If your grievance is not resolved to your satisfaction, you have the right to approach the Data Protection Board of India.
Right to withdraw consent. Where we process your personal data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to nominate. Under the DPDP Act, you have the right to nominate an individual who may exercise your data principal rights on your behalf in the event of your death or incapacity.
Marketing opt-out. You may opt out of marketing communications from us at any time by clicking the unsubscribe link in any marketing email, or by contacting privacy@calibr.ai. Please note that we may continue to send you transactional communications related to your account or the Services even after you opt out of marketing.
How to exercise your rights. To exercise any of the rights above, please contact us at privacy@calibr.ai with sufficient information to identify your account or the personal data concerned. We will respond within a reasonable period and in accordance with the timelines prescribed under the DPDP Act and its Rules.
Calibr is operated from India and this Policy is governed by the DPDP Act. If you access the Services from outside India, your personal data may be transferred to and processed in India, where data protection laws may differ from those in your jurisdiction.
Users in the European Union and United Kingdom. If you are located in the EU or UK, the GDPR or UK GDPR may apply to our processing of your personal data. In such circumstances, the legal bases described in Section 4 correspond to the applicable GDPR bases. You may also have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with your local supervisory authority (such as a national Data Protection Authority in the EU, or the Information Commissioner's Office in the UK). Please contact legal@calibr.ai for further information about how we handle personal data of EU or UK individuals.
Other international users. If you are located outside India and the EU/UK, you are responsible for determining whether your interaction with Calibr is subject to any applicable local data protection law. We will endeavour to handle your personal data in accordance with this Policy regardless of where you are located.
Our website and the Services may contain links to third-party websites, applications, and platforms. This Policy does not apply to those third parties. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal data.
We may update this Privacy Policy from time to time. Where changes are material, we will give you no less than thirty (30) days' written notice via email or through a notice on our website before the changes take effect. The "Last updated" date at the top of this Policy will reflect the date of the most recent revision.
Continued use of our website or the Services after the effective date of a revised Policy constitutes acceptance of the updated terms.
Brainhive Labs Private Limited is the Data Fiduciary in respect of personal data processed under this Policy.
If you have any questions about this Policy, wish to exercise any of your rights, or wish to raise a concern or grievance about our data practices, please contact our Grievance Officer:
Grievance Officer Brainhive Labs Private Limited 106, Block 10, Zenith, Suncity Apartments, Iblur, Outer Ring Road, Bangalore, Karnataka, India – 560102 Email: privacy@calibr.ai
We will acknowledge receipt of your grievance promptly and aim to resolve it within the timeframe prescribed under the DPDP Act.
If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India for redressal, as provided under the DPDP Act.