This Privacy Policy explains how Callisto ("we", "us") handles personal data collected through this website, callistoplatform.com. It covers the marketing website only; any use of our software products is governed by a separate written agreement.
Callisto acts as the data controller for the personal data described here. You can reach us through the contact form on our website at callistoplatform.com.
We do not knowingly collect data from children.
Two different things happen on this site, and the difference matters, so they are described separately.
We use Google Tag Manager to load Google Analytics 4 and our own first-party analytics. Both are governed by the cookie banner: until you accept, no analytics cookie is set, no identifier is created, and no measurement data is sent. Google Consent Mode v2 is set to "denied" for every category before the tag manager loads, and only your acceptance changes that.
If you accept, these tools record which pages you view, which buttons and forms you interact with, which site referred you and which language you use, and they keep a random identifier so that several page views can be recognised as one visit. They never receive the contents of a form field — not your name, email address, phone number or message. Google may process this data outside your country; see Google's own privacy information for details.
The banner also asks about advertising storage. We run no advertising tags today; asking up front means none could ever run without your prior agreement.
To change your answer at any time, open Cookie settings in the footer of any page. Turning analytics off there also deletes the analytics cookies already stored on your device — you do not need to clear your browser data.
Independently of the banner, we count page views on our own servers so that we can see how much traffic the site receives and where it comes from. For each page view we record the page address on this site, the domain of the website that linked you here (never the full address you came from), your browser's language, any campaign parameters in the link you followed, the time, and a random number that identifies that single record.
That is the entire list. This counting sets no cookie and writes nothing to and reads nothing from your device. We do not store your IP address with it, we do not record your browser or device type, we do not derive your location, and we create no fingerprint or hashed identifier. There is deliberately no way to tell whether two page views came from the same person, which is why we cannot and do not report "unique visitors" from this counting.
Because it stores nothing on your device and identifies no one, it needs neither a cookie banner nor your consent — we describe it here because you are entitled to know it happens. If your browser sends a "Do Not Track" signal, we skip it as well.
Reviewing a partnership request is not a commitment. We do not undertake to accept, approve or integrate every provider who submits one; integration availability, scope, timelines and commercial terms are assessed individually.
We do not sell your data, we do not add you to a marketing list without your consent, and we do not share it with third parties except the service providers strictly needed to deliver the above (for example, our email provider).
Some of these providers may process data outside your country — Google, for the measurement described in section 3.1, and our email provider, for enquiries. Where that happens, the transfer relies on the safeguards those providers publish for it, such as the European Commission's standard contractual clauses.
We process contact data on the basis of taking steps at your request prior to entering into a contract and our legitimate interest in responding to business enquiries. Technical data is processed on the basis of our legitimate interest in a secure, functioning website.
The measurement described in section 3.1 is processed on the basis of your consent, given through the cookie banner, which you may withdraw at any time. The anonymous counting in section 3.2 involves no personal data and no access to your device, so no consent is required for it.
We keep enquiry data only as long as needed to handle your request and any resulting business relationship, after which it is deleted or anonymised. Website statistics are deleted automatically once their retention period expires: 180 days for the consented measurement described in section 3.1, and 395 days for the visit summaries derived from it and for the anonymous counting described in section 3.2. The longer period lets a month be compared with the same month a year earlier; nothing is kept beyond it.
Subject to applicable data protection law, you may request access to, correction of, or deletion of your personal data, object to or restrict its processing, and request portability. To exercise these rights, use the contact form at callistoplatform.com. You also have the right to lodge a complaint with your data protection authority.
We apply appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and to address any incidents responsibly.
We may update this policy from time to time. The "last updated" date above reflects the current version.
This policy is published in several languages. If the versions differ, the English text applies.
Questions about this policy? Use the contact form at callistoplatform.com.