Privacy Policy

The data controller is Yehor Kaliberda, trading as CallMed AI, based in Aarhus, Denmark. Contact: yehor@callmedai.com. This policy applies to callmedai.com and all services offered under the CallMed AI brand.

When you contact us via email, we receive your email address and the content of your message. We use this to respond to your enquiry and, where you become a customer, to administer the engagement. Legal basis: contract performance (Art. 6(1)(b) GDPR) and legitimate interest in responding to business communications (Art. 6(1)(f) GDPR).

We do not operate analytics tracking, advertising cookies, or any third-party data collection on this website. No cookies are set by callmedai.com.

Repository access granted for a Symbiote Mirror Pass engagement is used solely to perform the contracted work. File contents are passed to the Anthropic API (see Third-party processors below) to generate type annotations. Legal basis: contract performance (Art. 6(1)(b) GDPR). Source code is not retained beyond the duration of the engagement. Repository credentials are revoked and discarded at project close.

Patchward's scanning runs entirely within your own infrastructure, in a network-isolated sandbox. Your source code is never transmitted to CallMed AI. It is, however, transmitted to Anthropic (see Third-party processors below): Patchward calls the Anthropic API at two stages — triage and fix generation — and both are able to read file contents from your repository, not only the specific flagged lines, in order to do their job. CallMed AI does not receive, store, or process your source code under a Patchward engagement. Credentials used to open pull requests are stored only in your local environment.

Anthropic, PBC (San Francisco, USA) — used as the inference provider for both Symbiote and Patchward. Anthropic processes file contents from your repository for both products: full files for Symbiote's type-annotation work, and repository file contents read during Patchward's triage and fix-generation stages (not limited to the specific flagged lines). By default, Anthropic does not use API inputs or outputs to train its models. See Anthropic's Privacy Policy for full details. Data transits from the EU to the USA; Anthropic maintains appropriate transfer mechanisms.

No other third-party processors receive your data in the course of a CallMed AI engagement.

Email correspondence is retained for the duration of the engagement and for up to 24 months thereafter for legitimate business and legal purposes. For Symbiote engagements, repository credentials are revoked at project close; no source code is retained beyond delivery of the PR. For Patchward, no repository data reaches our systems at any point. We do not maintain a database of customer code.

If you are located in the EU/EEA or another jurisdiction with applicable data protection law, you have the right to: access the personal data we hold about you; request correction or erasure; request restriction of processing; object to processing based on legitimate interests; request data portability; and lodge a complaint with your local supervisory authority (in Denmark: Datatilsynet). To exercise any of these rights, contact yehor@callmedai.com. We aim to respond within 30 days.

We sign mutual NDAs before receiving access to any non-public repository under a Symbiote engagement. A Data Processing Agreement (DPA) under Art. 28 GDPR is available on request. Patchward customers operating fully on-premise have no data processed by CallMed AI — contact us to confirm what agreements are appropriate for your situation.

Material changes to this policy will be reflected in an updated version number and date at the top of this page. For active customers, we will notify by email where the change affects how your data is processed.

Questions about this policy: yehor@callmedai.com