Private beta
Privacy Notice
Privacy is how Kalc is built — EU-hosted analysis, Zero Retention when you need it, and no use of your models for advertising or AI training. This simplified notice covers the invitation-only private beta. A full Privacy Policy will apply at commercial launch.
Last updated: 10 August 2026
1. Data controller
The data controller for personal data collected through kalc.tech and the Kalc platform is:
Kalc
Email: privacy@kalc.tech
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.
2. Data we collect
We collect the minimum data necessary to run the private beta:
- Account data: name and email, used to give you access, support you, and collect feedback.
- Spreadsheets you upload: processed only to run the analysis you requested. Held only in memory for the duration of the analysis — normally seconds — and never written to disk or to storage of any kind.
- Analysis results: so you can read and revisit them — unless you use Zero Retention, in which case nothing is kept.
- Access and security logs: IP-related technical data retained for 90 days to keep the service secure. Contains no content from your files.
- Anonymous product statistics: when Zero Retention is off, counts such as sheet/formula volume, finding totals, and duration — with no identifier of any kind linking them to you, your account, or a file.
We do not use your files or results for advertising, we do not sell them, and no AI provider we use trains on them. We do not make automated decisions about you.
3. Legal basis for processing (GDPR)
- Contract (Art. 6(1)(b)): account data, uploaded files, and analysis results are processed to perform the beta agreement you accepted.
- Legitimate interest (Art. 6(1)(f)): security logs and (where you provide it) product feedback, to operate a secure service and improve Kalc.
4. Two controls you hold
Zero Retention decides whether we keep anything. With it on, your file is deleted the moment the analysis ends and no results are stored.
Your evidence environment decides whether anything leaves us. Every new workspace starts as Contained, and in Contained nothing about your model is sent to any third party. The alternative, Grounded, switches on an optional feature comparing your assumptions against market context; to do that it sends assumption labels and their values to an external AI provider — never your file, your formulas, or your model as a whole.
Keeping something and sending something are not the same thing. If you never touch the setting, nothing leaves.
5. Data storage and transfers
All personal data is stored on servers located within the European Union. We do not transfer your personal data outside the EEA. Our infrastructure providers are contractually bound to process data only on our instructions and within the EU.
6. Data retention
- Account data: beta term + 30 days, then deleted.
- Uploaded spreadsheets: held only in memory, never written to disk or storage; released when the analysis finishes (seconds).
- Analysis results: until you delete them or your account closes; not kept under Zero Retention.
- Security logs: 90 days.
7. Your rights under GDPR
If you are in the European Economic Area, you may ask us to give you a copy of your personal data, correct it, delete it, restrict or object to our use of it, or port it elsewhere. Write to privacy@kalc.tech — we reply within one month, free of charge. You can also delete your data yourself at any time from inside the product.
You also have the right to lodge a complaint with your national data protection authority. In Spain that is the Agencia Española de Protección de Datos (www.aepd.es). We would appreciate the chance to put it right first.
8. Data processors and third-party services
We use the following categories of processor to operate Kalc. Each acts under a written contract meeting Article 28 GDPR:
- Hosting provider (Germany, EU) — runs the servers the service operates on.
- AI provider (France, EU) — only the optional market-context feature in Grounded workspaces; never your full file or formulas.
- Email provider (EU) — programme and support email.
- Support chat (EU-hosted) — the widget on kalc.tech, when you open it.
- Analytics & measurement (Qusto, EU-hosted) — anonymous pageviews and behaviour metrics on kalc.tech. No identifiers, no personal profile, no advertising.
We do not use Google Analytics, Meta Pixel, LinkedIn Insight, or other advertising trackers.
9. Security
We protect your data with encryption in transit, access controls limiting who can reach production systems, isolation between customers, and regular backups. If a breach ever affects your rights we will notify the AEPD within 72 hours and tell you directly where the law requires it.
10. Changes
We may update this notice from time to time. Material changes will be communicated to beta participants by email. The “Last updated” date above reflects the most recent revision.
11. Contact
For any privacy-related questions or to exercise your rights: privacy@kalc.tech