Calivra
Contact
Where to write, including for law enforcement, and what we can actually produce.
One page, four addresses, and what each one is for. A person reads all of them.
| Write to | For |
|---|---|
| reports@calivra.trade | Illegal content, a coin that breaks the rules, an appeal against something we did, a wallet we refused |
| legal@calivra.trade | Anything about these pages, a country we do not serve, a dispute |
| privacy@calivra.trade | What we hold about you, and asking for a copy or a deletion |
| security@calivra.trade | A vulnerability in the contracts or in this site |
For law enforcement and regulators
Write to legal@calivra.trade from an official address, with the subject line beginning LEGAL REQUEST. Include the legal basis, the authority making the request, the identifier you are asking about, and a contact for a person we can reach.
What we can produce
Very little, and it is better that you know before you ask.
- A wallet address, if the request identifies a coin we hold data for, and the times we saw it.
- The record that a particular address accepted our terms: which version, which exact text, the three statements it ticked, and when.
- The record of a sanctions check against an address: the verdict, the list version, and when.
- The content of a coin, which is public network data anyway.
- The content of a notice somebody sent us about a coin.
What we cannot produce, at all
- Any identity. There is no account here. We never ask anybody for a name, an email address, a date of birth or a document, so we hold none of those.
- An IP address. We do not write one to a log, a table or an error report at any point. We read a country code from a header and the address itself does not survive the request.
- A record joining a wallet to a location. Our country log carries no wallet address and our sanctions log carries no country. The two cannot be joined, on purpose.
- A transaction reversal, a freeze or a seizure. Our contracts have no such function. There is no administrator key, no pause and no blocklist anywhere in them. This was a deliberate design decision and it is not something we can undo for a specific case.
- Deletion of a coin from the network. We can stop showing a coin here. The coin continues to exist and anybody can continue to trade it directly.
For anything on the network itself, the operator of the network is Robinhood. They run the only sequencer on it and they have controls over it that we do not have.
Emergencies
If somebody is in immediate danger, contact emergency services in your own country first. Then write to us with EMERGENCY in the subject line. We are not an emergency service, we are a small team, and we would rather you did not lose time waiting on us.
Reporting a vulnerability
Write to security@calivra.trade. Tell us what you found, how to reproduce it, and how you would like to be credited.
Please do not test against somebody else's coins or somebody else's wallet, and please give us time to fix something before publishing it. We will not take legal action against anybody acting in good faith under those two conditions.
The contracts have not been through an external audit yet. If you find something in them, that is exactly the message we want.
The state of this document
This version has not been reviewed by a lawyer. The version number stays below 1.0 until counsel has been through it.