Privacy Policy
1. Data Controller
The data controller for Callirra is:
- Company / Individual: Chen Hongtao, an individual developer
- Service: Callirra — All-in-one AI Video & Image Generator
- Privacy Email: support@callirra.com
- Data Protection Officer (DPO): Not applicable
2. Personal Information We Collect
2.1 Information You Provide Directly
- Account Info: name, email address, password (stored encrypted), and optional profile information.
- Payment Info: transaction amount, payment status, and billing references. Full card numbers are not stored by us — card data is processed by our payment processor Waffo Pancake.
- Communications: emails, support tickets, feedback, and refund requests you send us.
- Creative Content: prompts, uploaded reference images/videos/audio, and generated outputs you create through Callirra.
2.2 Information We Collect Automatically
- Device & Network: IP address, device model, operating system, browser type, time zone.
- Usage Data: pages visited, feature usage, generation history, credits consumed, session duration.
- Log Data: request timestamps, error logs, performance metrics, moderation verdict correlation IDs.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Service delivery & maintenance | Contract performance |
| Billing & payment processing | Contract performance |
| Customer support | Contract / Legitimate interests |
| Service notifications (billing, security, policy) | Legitimate interests |
| Security, fraud prevention & content moderation | Legitimate interests / Legal obligation |
| Product analytics & improvement | Legitimate interests |
We may aggregate or anonymize data for statistical purposes. Such data cannot be linked to any individual.
4. Cookies and Tracking Technologies
- Strictly necessary: login sessions, core functionality. Cannot be disabled.
- Functional: language preferences and personalization. Can be disabled in browser settings.
- Analytics: anonymous usage statistics to improve the product. Can be disabled in browser settings.
5. Sharing and Disclosure
We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:
- Service partners: cloud, payment, support, analytics, and model services, bound by confidentiality. Payment card data is processed exclusively by our PCI-DSS certified payment processor, Waffo Pancake, and is not stored on our servers.
- Model services: prompts and reference media may be transmitted to the selected model service to generate the requested output.
- Content Moderation: prompts pass through our automated screening to enforce the Acceptable Use Policy and prevent prohibited content. Generated media uses the selected model's safety checks.
- Legal Requirements: where required by law, court order, or a lawful regulatory request.
- Business Transactions: in a merger, acquisition, or similar event, with advance notice and continued protections.
- With Your Consent: for any other purpose, with your explicit prior consent.
6. Data Security
- Encryption in transit: TLS / HTTPS.
- Secure storage: passwords and sensitive data are encrypted or hashed.
- Access controls: least-privilege principle.
- Regular security reviews and vulnerability checks.
In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery as required by law. Please keep your credentials secure and do not share them.
7. Data Retention
| Data Type | Retention Period | Upon Expiry |
|---|---|---|
| Account information | While active; 90 days after deletion | Delete or anonymize |
| Transaction records | Per legal/accounting requirements | Archive or delete |
| Support records | 2 years | Secure deletion |
| Prompts, generated content, assets | While account is active; user-controlled deletion | Delete from active storage |
| Security & moderation audit logs | 12 months | Secure deletion |
8. Your Data Rights
To exercise any right below, contact support@callirra.com. We respond within 30 calendar days.
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to withdraw consent
You may also lodge a complaint with your local data protection authority.
9. Marketing and Opt-Out
With your consent, we may send marketing communications. You can opt out at any time by clicking “Unsubscribe” in any email, disabling marketing in account settings, or contacting support@callirra.com. Opting out does not affect essential service notifications.
10. International Data Transfers
Our servers and third-party model services may be located in multiple regions. For international transfers, we rely on data processing agreements and appropriate safeguards, including EU Standard Contractual Clauses where applicable.
11. Children’s Privacy
The Service is intended for users aged 18 and above. We do not knowingly collect information from children below that age. If you believe a child has provided information, contact us immediately and we will promptly delete it.
12. Third-Party Links and Services
The Service may include links to, or integrations with, third-party services. This Policy applies only to data we directly collect. We are not responsible for third-party privacy practices and encourage you to review their policies before use.
13. Policy Changes
For material changes, we will provide at least 15 days' advance notice via platform announcement or your registered email, and update the “Last Updated” date at the top of this page. Continued use after the effective date constitutes acceptance.
14. Contact Us
- Privacy Email: support@callirra.com
- Support Email: support@callirra.com
- Data Controller: Chen Hongtao
By using Callirra, you consent to this Privacy Policy. Thank you for trusting us with your information.