Privacy Policy

1. Introduction and Scope

CaliberState ("we", "us", "our") develops custom software systems and tailored AI solutions, including minimum viable products (MVPs), web applications, and operational automations. We value your privacy and are committed to safeguarding the personal data entrusted to us.

This Privacy Policy outlines how we collect, handle, store, and disclose information gathered through our marketing website (caliberstate.com), interactive project scoping bots, and direct communication channels. This policy is structured in compliance with the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13 regulations), the EU/UK General Data Protection Regulation (GDPR), and relevant international data protection laws.

2. Information We Collect

We only collect data that is directly necessary to respond to inquiries, evaluate software development opportunities, and ensure the technical integrity of our digital platforms:

3. How We Use Collected Information

We process your personal information strictly for legitimate commercial and engineering purposes:

• Consultation and Proposal Preparation: Reviewing project briefs, formulating architecture recommendations, and providing realistic development estimates.
• Direct Communication: Replying to your questions, scheduling discovery meetings, and sharing technical assessments.
• System Security and Abuse Prevention: Guarding our web servers, database endpoints, and conversational bots against spam, injection attacks, and denial of service attempts.
• Compliance with Legal Obligations: Retaining necessary records required by applicable taxation, accounting, and commercial regulations.

4. Legal Grounds for Processing

Under the GDPR and international privacy principles, our processing activities rest upon the following legal bases:

• Performance of Pre-contractual Measures: Processing required to evaluate your project scope and deliver an engineering proposal requested by you.
• Legitimate Interests: Operating a secure digital presence, maintaining network security, and preventing fraudulent submissions.
• Consent: Where you have explicitly opted to submit your details or set specific browser preferences.

5. Sub-processors and Infrastructure

To operate our high-performance infrastructure, we partner with industry-leading technology vendors bound by strict data processing agreements:

6. Cookies, Local Storage, and Analytics

Our website follows a limited-data approach. Optional measurement tools do not load before an explicit choice in the privacy banner, and you can change that choice at any time through the "Privacy settings" link in the footer. We use:

• Functional Browser Storage: Remembering accessibility toolbar preferences on your personal browser.
• Attribution Session Storage: Storing temporary campaign referral source parameters to credit marketing channels when you choose to submit an inquiry.
• Google Analytics 4, with analytics consent: Measuring page and article views, scroll depth, engagement time, and navigation actions to understand which content and services are useful.
• PostHog, with analytics consent: Analyzing user interactions, heatmaps, and session replays to uncover UX friction. Session replays strictly block WebGL canvas elements and mask sensitive form inputs so no confidential information is recorded.
• Meta Pixel, with marketing consent: Measuring conversion events such as a confirmed inquiry or booked meeting to evaluate and improve campaigns.

The measurement events we define do not include names, telephone numbers, email addresses, or chat content. Choosing "Essential only" prevents Google Analytics, PostHog, and Meta Pixel from loading.

7. Data Retention Standards

We retain project inquiry records only for as long as needed to fulfill the consultation request, maintain legitimate business records, or comply with statutory requirements. If an inquiry does not result in an active software contract, personal contact records may be periodically reviewed and safely expunged.

8. Security Protocols

We implement rigorous technical and organizational measures designed to protect your data:

• All website traffic is encrypted in transit using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Our backend databases utilize least-privilege role authentication and restricted endpoint access.
• Continuous code linting, automated testing suites, and strict dependency audits prevent injection vulnerabilities.

9. Your Statutory Privacy Rights

Depending on your location, you hold comprehensive rights regarding your personal data under the Israeli Privacy Protection Law, the GDPR, and international data laws:

• Right of Access / Inspection: You may request confirmation of whether we hold data about you and receive a copy.
• Right of Rectification: You may request correction of inaccurate, obsolete, or incomplete personal data.
• Right of Erasure ("Right to be Forgotten"): You may request that we delete your personal information, subject to statutory retention requirements.
• Right to Object or Restrict Processing: You may request that we halt or limit certain data processing operations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting past lawful processing.

To exercise any of these rights, please email us directly at privacy@caliberstate.com. We respond to all verified requests promptly.

10. International Transfers

Because our infrastructure utilizes distributed edge cloud services (such as Cloudflare), information may be processed across secure data centers located in the United States, the European Union, and Israel. Where cross-border transfers occur, we ensure robust transfer mechanisms and security standards are enforced.

11. Children's Privacy

Our services and website are strictly intended for professional business operators and adults over the age of 18. We do not knowingly collect personal information from minors.