Privacy Policy — Calenta

Who we are

Calenta is a fundraising assistant for nonprofits on Salesforce, operated by Resin LLC d/b/a Calenta (“Calenta,” “we,” “us”). This policy explains how we handle data on calenta.ai, in the Calenta portal, in the weekly brief, and through the Calenta connector for Claude.

What we collect

Website. When you contact us or submit a form, we collect what you send, such as your email address. We use Vercel Analytics for aggregate page-view statistics, and we don’t use cookies for tracking or advertising on the public site. Signing in to the portal uses the cookies sign-in needs.
Your account. Your name, email, and organization, plus billing details handled by Stripe. We don’t see or store your full card number.
Salesforce data. When your organization connects, we read donor, gift, opportunity, activity, campaign, and configuration data as needed to answer questions and prepare briefs and reports. This can include donors’ names, contact details, and giving history.
What your organization gives us. Org context such as goals, staff, and giving tiers, and any documents you upload.
What you send through Claude. The Calenta connector receives what Claude sends to its tools for your request, such as a donor’s name or notes from a call you asked to log. It does not read your Claude chat history, memory, or files. Your conversations in Claude are handled under Anthropic’s terms.
Salesforce sign-in. Each person signs in with their own Salesforce login and sees only what their permissions allow. To run nightly preparation for the weekly brief, we store a connection from the most recent person at your organization to connect, and that run sees Salesforce through their permissions.

How we use data

To provide what your organization signed up for: answers in Claude, weekly briefs, reports, donor research, and saving changes to Salesforce.
To support your account, send service messages, and bill you.
To keep the service reliable, using the usage logs described below.
We do not use your data to train AI models, we do not sell it, and we never share it with other Calenta customers.

Donor research

When research is enabled, we look up the donors or funders being researched using public sources, such as news, foundation filings, and organization bios. To do that, names and related details are sent to Anthropic’s API and its web search tool. Calenta does not use wealth screening data for this research unless your organization already has it in Salesforce. Findings are saved to Salesforce only after someone confirms them.

Third parties we use

These vendors process data on our behalf, each under its own terms:

Anthropic — Claude AI models, for analysis, briefs, reports, and research. Anthropic’s commercial API does not train on customer inputs or outputs.
Cloudflare — hosting, storage (KV and R2), and DNS. Holds stored outputs and connection tokens.
Resend — email delivery, including weekly briefs, which contain donor names and reasons for outreach.
Slack — only if your team chooses to receive briefs there.
Vercel — hosting for calenta.ai and the portal.
Clerk — portal sign-in.
Stripe — billing.
Google Workspace — our email.

What we keep, and for how long

Live query results: returned to you and not stored as a copy of your database.
Briefs, priority queues, reports, and research: stored in your organization’s isolated storage for as long as you use Calenta. These contain donor names, giving details, and the reasons a donor was surfaced. Unconfirmed research drafts stop being offered after 7 days.
Org context and uploaded documents: kept while you use Calenta.
Proposed notes awaiting your review: 1 hour.
Change log: what Calenta changed in Salesforce, when, and who confirmed it. It holds field names and record links, not the values. Kept while you use Calenta.
Usage logs: which tools each signed-in person used, whether they worked, and how long they took, with donor details removed. Deleted after 30 days.
Connection tokens: stored encrypted while you are connected. Removed when you disconnect or your organization leaves.
Website inquiries: kept until you ask us to delete them or the conversation has ended.

Your rights and choices

You can ask to access, correct, or delete data we hold about you by emailing joe@calenta.ai. An organization can disconnect at any time on the Salesforce page in its portal, or by revoking Calenta in Salesforce. Removing the connector in Claude alone doesn’t notify us. If your organization leaves or asks us to delete its data, we will delete stored outputs, documents, tokens, and logs within 30 days. Donors with questions about their records should also contact the nonprofit they gave to, since that organization controls its Salesforce data.

Security

All connections use TLS. Stored data in Cloudflare KV and R2 is encrypted at rest, and each organization’s data is kept separate. More detail is on our security page.

Changes to this policy

We may update this policy as the product changes. We will email customers about material changes, and the date at the top of this page shows the latest revision.

Contact

Questions or requests: joe@calenta.ai