Encryption
Data is encrypted in transit using HTTPS, and stored data is encrypted by our database provider.
Security
Keeping your data safe
How Calabi protects your information.
Access controls
Access to order data is limited to authorized personnel. Staff tools require two-factor authentication, and staff actions are logged.
Secure payments
Payment card data is processed by Stripe, a PCI DSS Level 1 certified payment processor.
Practices
Security practices
- Communications
- AI chat, text, call and email conversations are stored to fulfill and support your orders. See the Privacy Policy.
- Incidents
- Reported issues are investigated, and affected customers are notified as required by law.
- Providers
- Calabi works with established service providers, including Stripe, Supabase, Render and Twilio, and shares only the information each needs.
Responsible disclosure
Report a vulnerability
Email support@calabi.us with "Security report" in the subject line, a description of the issue and steps to reproduce it. Please allow a reasonable time for remediation before public disclosure, and do not access other users' data or disrupt the Services while testing.
Account security
Protecting your account
Sign out on shared devices. Report unrecognized orders or suspicious messages that appear to be from Calabi to support@calabi.us.
Last updated: October 2, 2026.