Privacy Policy

What Caliber is

Caliber Credentials ("Caliber", "we", "us") is a credentialing platform for medical professionals. We help you store, manage, and share your professional credentials. This policy explains what data we collect, how we use it, and what control you have.

What we collect

Account information: Email address, name, and professional title when you create an account.

Credential data: Information you enter about your licenses, certifications, and professional credentials. This includes names, license numbers, dates, and issuing authorities.

Documents: Files you upload to your credential vault (license images, certificates, etc.). These are encrypted on your device before they reach our servers using AES-256-GCM encryption. We cannot read your files.

Usage data: Basic analytics (pages visited, features used) to improve the product. We do not track you across other websites.

How we protect your data

Documents in your vault are encrypted with AES-256-GCM on your device before upload. We use a zero-knowledge architecture, meaning we do not have access to your encryption keys and cannot decrypt your files. Your credential data is stored in Supabase with row-level security policies.

Document extraction

When you use smart document extraction (Pro feature), your document image is processed to extract credential fields (name, license number, dates). The image is used solely for extraction and is not retained after processing. We do not use your documents for any purpose beyond the extraction you requested.

Third-party services

We use the following services to operate Caliber:

• Supabase -- Database and file storage
• Polar -- Payment processing (Merchant of Record). Polar handles all billing, refunds, and payment disputes
• Resend -- Transactional email (account verification, expiration alerts)
• Anthropic -- Document extraction processing (Pro feature only)
• Vercel -- Website hosting

What we do not do

• We do not sell your personal data.
• We do not share your documents with third parties.
• We do not serve advertising.
• We do not use your data to train models.
• We do not access your encrypted documents.

Your rights

You can export your data, update your information, or delete your account at any time from your account settings. When you delete your account, all your data, including encrypted documents, is permanently removed from our servers.

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale (which we do not do).

Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

Contact

Questions about this policy? Email us at hello@calibercred.com.