PRIVACY
05 / 05Calypto · privacy
Behind the veil · privacy & dataYour control.The full picture.
Privacy is useful when you know exactly what it means. Here is how Calypto is designed to handle your information.
01History is off by default.
Until you turn on saving, Calypto keeps conversation text in the current page’s memory. It is cleared when the page reloads, closes, or you clear the session. The chat endpoint does not write prompts or answers to the conversation database. You can export a conversation manually.
We store access metadata: a random visitor identifier in a signed, secure cookie, prompt counts, keyed hashes of network IP addresses for abuse limits, wallet verification challenges, and a verified wallet address. Raw IP addresses are not stored in Calypto’s application database. These records enforce access and prevent signature replay. Usage counts are separate from chat history. Wallet verification lasts up to 24 hours; challenges expire after five minutes. Expiry prevents use of a record; it does not promise that all expired metadata has been physically erased.
02Optional history is server-stored.
When you enable saving, Calypto stores conversation text, mode, source links, title, and update time. Saved chats are linked to your browser session and verified wallet. Only that session with the corresponding verified wallet can retrieve them through the app. Connecting a different wallet switches the history you can access. Clearing cookies or using another browser does not restore saved history automatically; export chats you want to keep.
You can delete individual conversations or all saved conversations for the current wallet. Delete operations remove the live database records. Infrastructure backups and provider retention may follow separate schedules. Turning saving off does not delete chats that were already saved. Uploaded PDF files are not included in saved history.
03You’re talking to Calypto.
The assistant and model name you see in Calypto is Calypto. Prompts, recent conversation context, and attached PDFs are sent through Calypto’s server to an external AI processing provider. Calypto’s server, hosting infrastructure, and processing provider handle each request. This integration does not use end-to-end encrypted inference.
Do not submit secrets, seed phrases, private keys, or documents you are not entitled to share. Provider privacy and retention policies apply to processing outside Calypto, independently of whether you enable saved history.
04Research and documents travel to providers.
Live research uses Calypto’s web-search integration. Queries may reach search infrastructure and sources; source links open external websites with their own policies. PDFs are sent inline to the AI processing provider for text extraction and analysis for the request. Calypto does not retain uploaded file bytes in its database or a file bucket. A PDF remains in page memory until you remove it, switch conversations, reload, or close the page.
Saved document answers may refer to the document’s content, even though the original PDF is not saved. Resuming document analysis after a reload requires reattaching the PDF.
05Public wallets stay public.
Wallet research reads Robinhood Chain through an RPC provider and its public explorer indexer. Holder checks read your token balance and obtain market estimates from DEX Screener. Those providers receive the wallet or token addresses needed for the request. Public activity can identify patterns and link an address to other public information.
Verification uses a time-limited, one-time ownership signature. It does not request transfers or token approvals. No wallet transactions are available in Calypto. The displayed holdings snapshot may cover only part of an address’s activity; coverage and lookup times are provided with the data.
06Privacy has practical boundaries.
Calypto is not zero-knowledge, end-to-end encrypted AI, or a guaranteed anonymous service. Calypto’s operator can access saved database records. Hosting, RPC, indexing, search, and AI providers may retain security logs and connection metadata, including IP addresses, according to their own practices. Deleting history in Calypto does not delete provider records or public blockchain data.
An account is not required. A secure, HTTP-only visitor cookie lasts up to one year and remembers free-access usage in this browser. Shared network limits help prevent repeated trials after clearing cookies; people on the same network can share a limit. Expired abuse counters are periodically removed. Session preferences stay in browser memory; the landing-page entrance flag is stored in session storage. The app does not add advertising trackers.
07Research supports your judgment.
AI answers and third-party data can be inaccurate or incomplete. Review primary sources and actual onchain evidence. Holding $CALYPTO provides access under the stated usage policy; it does not guarantee returns or outcomes.