Callisto AI ("Callisto", "we", "us") is a product of Shariqen, operated by Hammad Shariq, with operations in Canada and Pakistan. This policy explains how we handle information when you use the Callisto AI desktop app for Windows and macOS, our website, and related services (together, the "Service").
Our website is hosted by Netlify and our domain is registered with GoDaddy. Our app's backend runs on Railway.
| Type | What | Why |
|---|---|---|
| Account | Name, email address, profile picture and Google account ID if you sign in with Google; a securely hashed password if you register with email | To create and secure your account |
| Account security | Email confirmation codes, password reset links (stored only in protected form), two-factor settings and backup codes, signed-in devices (device type, browser and last activity), and failed sign-in attempts | To confirm your email, recover your account and detect unauthorised access |
| Subscription | Plan, subscription status, Stripe customer ID, renewal date and renewal amount, which we use to remind you before a renewal. Card details are handled by Stripe and never reach us. | To provide paid features and billing |
| Messages and voice | What you type or say to Callisto. Voice is recorded only while the microphone is active, then converted to text. | To understand your request and reply |
| Synced app data | Your most recent chat sessions (up to 30), things you ask Callisto to remember, things it learns about you from your conversations (which you can see and remove in the memory orb under Account), contacts you add in the app, your profile (such as preferred name, voice and accent) and language and voice settings | So your assistant works the same on each device you sign in on |
| Files you attach | Images and documents you attach to a message; videos you attach to post | To answer questions about them, or to upload them when you ask |
| Picking up where you left off | What you last had open in Callisto and, when you ask Callisto to restore your work, the tab addresses from your last Chrome or Edge session (up to 12). Private windows are not included. These tab addresses are read on your device and are not sent to us or our AI providers. | To reopen your work when you ask |
| Links you paste | Web addresses you paste or say to Callisto | To open them. Addresses on private or internal networks are refused. |
| Location | Approximate location (city or region) | For weather, nearby places and finding a business's phone number |
| Connected accounts | Access tokens for services you connect (for example Google Calendar, YouTube, Instagram, TikTok, Spotify, Stripe). Stored on your device in the desktop app, and encrypted on our servers when connected on the website. We read figures from these accounts to show them to you, including in your daily update and marketing note. | To use those services on your behalf when you ask |
| Things you create | AI images, 3D models and videos you generate or edit, with the text prompts you used. Videos you edit with the AI editor are processed on your device. | To create them and let you view, edit, download or post them |
| Usage limits | Counts of the messages, images, 3D models and videos you used in the current day or week | To apply the limits of your plan |
| Technical data | App version, error details, crash reports and basic activity timestamps. Our website host may record IP addresses in server logs. | To keep the Service reliable and secure |
We do not sell your personal information, use it for advertising, or use it to train AI models.
If you choose to connect a Google service, Callisto asks for only the permissions that feature needs:
youtube.readonly): to show you your own channel statistics and recent videos when you ask.youtube.upload): to upload a video you chose to your own channel. Callisto shows a confirmation card with the video, title, description and visibility (Private by default) and uploads only when you press Publish. It does not edit, delete or manage your other videos.Google access tokens connected in the desktop app are stored on your device and are held on our servers only briefly while a sign-in is completed. Tokens connected on the website are stored encrypted on our servers so the website can use them. They are used only for the features you use.
This website. Separately from anything you connect, callistoai.net uses Google Analytics to count visits and see which pages people read, so we know what to improve. It records the usual things a web analytics tool records — pages viewed, roughly where in the world you are, the kind of device and browser, and where you arrived from. It does not record your name or email, it is not linked to your Callisto account, and nothing from it is used for advertising. Browser "Do Not Track" and the usual content blockers stop it, and you can opt out everywhere with Google's opt-out add-on.
Callisto uses YouTube API Services. By using YouTube features in Callisto you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Callisto's access at any time at myaccount.google.com/permissions or by disconnecting in Callisto's Connectors screen, which deletes the stored tokens.
We never post, comment or message on your behalf without your confirmation. Your use of these platforms is also covered by Meta's Privacy Policy and TikTok's Privacy Policy.
These companies process information for us only to provide the feature named:
We do not sell, rent or trade personal information. We share it only:
All connections use encryption (HTTPS/TLS). We offer email confirmation, two-factor sign-in, a list of signed-in devices and alerts about important account changes. Requests Callisto makes to web addresses on your behalf are blocked from reaching private and internal networks. Sign-in tokens are protected with your operating system's secure storage where available. Server access is restricted, and third-party secrets are kept on the server, never in the app. No system is perfectly secure, so please keep your devices and accounts protected.
Email support@callistoai.net and we will respond within 30 days. Depending on where you live, laws such as Canada's PIPEDA, the GDPR or California's CCPA may give you additional rights, and you may complain to your local data protection authority.
Callisto AI is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
Our providers may process information in the United States and other countries. When information leaves your country we rely on the providers' contractual and security protections.
We will update the date above when this policy changes and tell you in the app or by email about significant changes. Continuing to use the Service after that means you accept the updated policy.
Questions about privacy or your data:
Shariqen — Callisto AI
Email: support@callistoai.net
Canada / Pakistan