EFFECTIVE DATE

Privacy Policy - Last Updated September 24, 2025

This privacy policy describes how Clarity collects, uses, shares, and protects your information in compliance with GDPR, CCPA, and applicable data protection laws.

GDPR & CCPA Compliant

This privacy policy meets GDPR, CCPA, and international data protection standards. We're committed to transparency and your privacy rights.

## Introduction Clarity ("we," "our," or "us") operates a Strategic Intelligence Platform that transforms organizational conversations into executive decision intelligence. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. ## Information We Collect **Account Information**: Name, email address, company information, role, and contact details. **Organizational Data**: Conversation data, strategic intelligence inputs, dialogue responses, and analytical insights generated through platform use. **Technical Data**: IP addresses, browser type, device information, log data, and usage analytics. **Communications**: Support requests, feedback, and correspondence with our team. ## How We Use Your Information - Provide and improve our Strategic Intelligence Platform services - Generate strategic insights and organizational intelligence for your organization - Authenticate users and maintain account security - Respond to support requests and provide customer service - Comply with legal obligations and enforce our Terms of Service **Critical Commitment**: We never sell your data, use it to train AI models for other customers, or share organizational intelligence with third parties for commercial purposes. ## Data Sharing and Disclosure We share data only in limited circumstances: - **With Your Consent**: When you explicitly authorize sharing - **Service Providers**: Trusted vendors who process data on our behalf under strict confidentiality agreements - **Legal Requirements**: When required by law, court order, or regulatory obligation - **Business Transfers**: In the event of merger, acquisition, or asset sale (with advance notice) ## Your Rights You have the right to: - **Access**: Request copies of your personal and organizational data - **Correction**: Update inaccurate or incomplete information - **Deletion**: Request deletion of your data (with 30-day guarantee) - **Portability**: Export your data in machine-readable formats - **Objection**: Opt out of certain data processing activities - **Restriction**: Limit how we process your data To exercise these rights, contact privacy@clarity.ai ## Data Retention We retain data only as long as necessary for business purposes or legal compliance. You control retention policies for organizational intelligence. Upon deletion requests, we permanently delete data within 30 days—no backups, no archives, no exceptions. ## Security We implement enterprise-grade security measures including encryption at rest (AES-256), encryption in transit (TLS 1.3+), access controls, audit logging, and regular security assessments. See our [Security page](/security) for details. ## International Transfers We may transfer data internationally with appropriate safeguards (Standard Contractual Clauses, Privacy Shield frameworks, or other legally compliant mechanisms). Regional data residency options are available for regulated industries. ## Children's Privacy Our services are not directed to individuals under 16. We do not knowingly collect data from children. ## Changes to This Policy We may update this Privacy Policy to reflect changes in practices or legal requirements. Material changes will be communicated via email or platform notification. ## Contact Us For privacy questions or to exercise your rights: - Email: privacy@clarity.ai - Data Protection Officer: dpo@clarity.ai For EU residents, you have the right to lodge a complaint with your supervisory authority.