Privacy Policy
How we collect, use, and protect the information you share with Calmworks. Last updated April 2026.
1. Introduction
Calmworks ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit calmworks.io or engage with our services.
2. Information we collect
Information you provide
- Contact information (name, email address, company name)
- Information submitted through our contact forms
- Communications with us via email or other channels
- Scheduling information when booking calls
Information collected automatically
- Device and browser information
- IP address and general location
- Pages visited and time spent on our website
- Referring website addresses
3. How we use your information
We use the information we collect to:
- Respond to your inquiries and provide our services
- Schedule and conduct discovery calls
- Send you relevant information about our services
- Deliver newsletters and event updates to subscribers who have opted in
- Improve our website and services
- Comply with legal obligations
4. Newsletter and event communications
Our newsletter uses double opt-in: we only send newsletters after you confirm your subscription by clicking a link in a confirmation email. Every broadcast contains a one-click unsubscribe link. We send newsletters and event invitations through Resend (resend.com), our email service provider, which processes subscriber email addresses on our behalf under a data processing agreement. Event registration is handled by Luma (lu.ma) when you register for an event via a Luma link or embed. See section 6 for processors.
5. Information sharing
We do not sell your personal information. We may share your information with:
- Service providers who assist in our operations (e.g., email services, scheduling tools)
- Professional advisors as required
- Law enforcement when required by law
6. Data processors
We rely on the following processors. Each is bound by a data processing agreement.
- Resend (email delivery, newsletter broadcasts) — data stored in the US with Standard Contractual Clauses
- Supabase (database, authentication) — EU region hosting
- Vercel (website hosting and functions) — global edge, primary region in the EU
- Luma (event registration and RSVP) — US, used only when you register for one of our events
- Calendly (booking) — US, used only when you book a call
- PostHog (product analytics, aggregated) — EU region hosting
7. Data security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.
8. Your rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Object to or restrict processing of your information
- Data portability
9. Cookies
We use essential cookies to ensure our website functions properly. We may also use analytics cookies to understand how visitors interact with our website. You can control cookie preferences through your browser settings.
10. Third-party services
Our website may contain links to third-party services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact us
If you have questions about this Privacy Policy or our data practices, please contact us through our website or reach out to us directly.