Privacy policy

Who we are

Calm Records is operated by Premium Box, Lecco, Italy, P.IVA 03907240133 (“we”). We are the data controller. Contact: contact@calmrecord.com.

What we collect and why

The text you paste and the details you enter (dates, your role, children's first names, state). We use them only to create your record. We do not save them on our servers, and we do not use them to train any AI model. Your text is sent to our AI provider to generate the record and is not kept by us after your record is shown.

Screenshots you upload. Your screenshots are made smaller in your own browser, then sent to our AI provider only to read the text of the messages. We do not store them, and they are discarded as soon as the text has been read. You can check and correct that text before your record is created.

Payment details. Payments are handled by Stripe. We never see your full card number. Stripe shares with us your email, the amount and the payment status, which we keep for accounting and tax purposes as required by law.

Basic technical data. To prevent abuse, we count requests per visitor for one hour (rate limiting). We store only a scrambled (hashed) form of your IP address, never the address itself, and it is not linked to your messages.

Data in your browser. While you work on your record and while you pay, your text (or the messages read from your screenshots, never the images) and your record are kept in your own browser (sessionStorage), so reloading the page doesn't make you start again. It never leaves your device this way. It is deleted when you close the tab.

Who processes data for us

• Anthropic (AI provider, United States): processes your text and screenshots to read the messages and create the record. Under its commercial terms it does not use API data to train its models and keeps it only for a limited period for safety and abuse monitoring.
• Stripe (payments, Ireland and United States).
• Vercel (hosting, United States).
• Upstash (rate limiting, hashed IP address and a request count only, kept about an hour).

Some of these providers are in the United States. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.

Legal basis

Creating your record and processing payment: performance of a contract. Abuse prevention: legitimate interest. Accounting records: legal obligation.

How long we keep data

Your messages and screenshots: not kept by us. Payment records: as long as required by Italian tax law (generally 10 years). Rate limiting data: up to 24 hours.

Your rights

You can ask to access, correct or delete your personal data, object to processing, or ask for portability by writing to contact@calmrecord.com. If you are in the EU you can complain to the Italian data protection authority (Garante per la protezione dei dati personali). If you are in the US, contact us at the same address for any privacy request.

Children's information

The service is for adults. You may mention your children's first names in your notes; we use them only to create your record and do not save them.

Cookies

We do not use advertising or tracking cookies. Stripe may set cookies needed for the payment on its checkout page.

Changes

If we change this policy we will update the date above.