Privacy Policy
Last updated October 21, 2026
Caltivar (“we”, “us”) provides compliance training software for food manufacturers. This policy explains what information we collect when you use app.caltivar.com, how we use it, and who we share it with.
Who controls your data
When a company (a “plant”) uses Caltivar to train its workers, that company decides what training to run and who takes it. We process worker information on the plant’s behalf and only to provide the service to them. If you are a worker with a question about your training records, you can contact your employer or us.
Information we collect
- Account information — name, email address and password (handled by our sign-in provider; we never see your password). If you sign in with Google, we receive your name, email address and profile picture from Google.
- Worker records — information a plant enters about its team: name, email address, employee code, preferred language, groups and training assignments.
- Training activity — quiz attempts, answers, scores, completion times, the language used, and questions asked of the in-app tutor.
- Documents — SOPs, manuals and photos a plant uploads, and the training material generated from them.
- Usage data — basic, aggregated page-view analytics used to understand how the product is used.
How we use it
- To provide the service: generating training from documents, delivering it to workers, and keeping training logs and certificates.
- To send service emails such as invitations and training reminders.
- To keep the service secure, fix problems and improve the product.
We do not sell personal information, and we do not use it for advertising.
Google sign-in
If you choose “Sign in with Google”, we use the name, email address and profile picture Google shares only to create and identify your Caltivar account. We do not request access to your Gmail, Drive, Calendar or any other Google data. Caltivar’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers we share data with
We share information only with the providers that run parts of the service for us, and only what each needs:
- Vercel — application hosting, file storage and analytics (United States).
- Neon — database hosting (AWS, United States).
- Clerk — sign-in and account management.
- Anthropic — AI processing of uploaded documents to generate training, translations and tutor answers.
- OpenAI — text-to-speech for audio narration.
- Resend — delivery of service emails.
- Google — optional sign-in.
We may also disclose information if required by law.
Retention and deletion
We keep information for as long as the plant’s account is active, so that training records stay available for audits. A plant can ask us to delete its data, and anyone can ask to access, correct or delete their personal information, by emailing hello@caltivar.com.
Security
Data is encrypted in transit and stored with providers that encrypt it at rest. Access to production systems is limited to the people who operate the service.
Children
Caltivar is a workplace tool and is not directed at children under 16.
Changes
If we make material changes to this policy we will update the date above and, where appropriate, let account owners know by email.
Contact
Questions about privacy: hello@caltivar.com