The short answer
CALC's own persistent data storage runs on European infrastructure, with account-based access controls and encrypted connections. When you use an AI feature, the content needed to answer your request may be sent to a contracted AI provider. Its processing location and retention rules can differ by provider.