1. Who we are

Callisto Bridge ("Callisto Bridge," "we," "us," or "our") is a product brand operated by TechStack Consulting LLC, founded by Daniel Michael Newland, its parent company. TechStack Consulting LLC is the legal entity responsible for the operation of this website (callistobridge.com), the Keystone application (app.callistobridge.com), and all associated services (collectively, the "Service").

References in this Privacy Policy to "Callisto Bridge" include TechStack Consulting LLC as the data controller and operator.

2. Information we collect

We collect information you provide directly, information generated by your use of the Service, and limited information from third-party services we use to operate.

2.1 Information you provide

Account information — email, password (hashed), and any optional profile information when you create an account on the Keystone application.
Workspace data — modules, lifecycle events, pools, programs, disbursements, insurance policies, prospects, and related records you enter into the Service.
Communications — when you contact us via the contact form, email, or a scheduled call, we receive the information you choose to share.

2.2 Information generated by use

Usage analytics — aggregated, privacy-respecting page-view statistics via Plausible Analytics (no cookies, no personal identifiers).
Audit / lifecycle events — every state change to a record in your workspace generates an immutable audit event scoped to your workspace.
Technical logs — server logs, error reports, and standard request metadata (IP address, user agent, timestamp) for security and operational purposes.

2.3 Information from third parties

Supabase — our database and authentication provider. Supabase processes your account credentials and workspace data under Supabase's own privacy practices.
FormSubmit — handles the contact form submission relay to our email address.

3. How we use information

To operate, maintain, and secure the Service
To provide you access to your workspace and its data
To respond to your communications and support requests
To send transactional emails (account confirmation, billing, security notices)
To improve the Service and develop new features
To meet legal and regulatory obligations

We do not sell your personal information. We do not share your workspace data with other workspaces. We do not attribute industry-aggregated data (such as the Modular Index) to any specific workspace, manufacturer, or project.

4. Workspace isolation

Every workspace in the Keystone application is enforced as a hard boundary at the database layer via row-level security (see Security). Members of one workspace cannot read, modify, or otherwise access the data of another workspace. Workspace administrators control who is invited to a workspace. Industry-aggregated data flows into the Modular Index only in de-identified form.

5. Cookies and tracking

The marketing website at callistobridge.com uses Plausible Analytics, a privacy-first analytics platform that does not use cookies and does not collect personal data. The Keystone application uses a small number of essential cookies for authentication (session tokens) and does not use third-party advertising or tracking cookies.

6. Third-party services

The Service relies on the following processors:

Supabase (database, authentication, edge functions) — supabase.com/privacy
Plausible Analytics (privacy-first website analytics) — plausible.io/privacy
FormSubmit (contact form relay) — formsubmit.co/privacy
Google Fonts (typography) — served from fonts.googleapis.com

7. Data retention

We retain account and workspace data for as long as your account is active. If you delete your account or request data deletion, we will delete your personal information within 30 days, subject to legal retention obligations. Anonymized or aggregated data that does not identify any individual or workspace may be retained.

8. Your rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal information
Object to or restrict certain processing
Receive a portable copy of your information
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email daniel@callistobridge.com.

9. Data security

We use industry-standard security practices, including encryption in transit (TLS), encryption at rest (Supabase default), row-level security on every workspace boundary, and immutable audit logging on every state-changing event. No system is perfectly secure; we encourage you to use a strong, unique password and to notify us immediately at daniel@callistobridge.com if you suspect unauthorized access.

10. Children's privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

11. International transfers

The Service is hosted in the United States (Supabase us-east-1). If you access the Service from outside the United States, your information may be transferred to, processed, and stored in the United States.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date at the top of this page and, where required, by direct notice to account holders. Continued use of the Service after a change constitutes acceptance of the updated policy.

13. Contact

Questions about this Privacy Policy or our data practices:
TechStack Consulting LLC — operator of Callisto Bridge
Email: daniel@callistobridge.com