LEGAL
Privacy Policy
How Clarity collects, uses, and protects your personal and organizational data.
EFFECTIVE DATE
Privacy Policy - Last Updated September 24, 2025
This privacy policy describes how Clarity collects, uses, shares, and protects your information in compliance with GDPR, CCPA, and applicable data protection laws.
GDPR & CCPA Compliant
This privacy policy meets GDPR, CCPA, and international data protection standards. We're committed to transparency and your privacy rights.
## Introduction
Clarity ("we," "our," or "us") operates a Strategic Intelligence Platform that transforms organizational conversations
into executive decision intelligence. This Privacy Policy explains how we collect, use, disclose, and safeguard your
information when you use our platform and services.
## Information We Collect
**Account Information**: Name, email address, company information, role, and contact details.
**Organizational Data**: Conversation data, strategic intelligence inputs, dialogue responses, and analytical insights
generated through platform use.
**Technical Data**: IP addresses, browser type, device information, log data, and usage analytics.
**Communications**: Support requests, feedback, and correspondence with our team.
## How We Use Your Information
- Provide and improve our Strategic Intelligence Platform services
- Generate strategic insights and organizational intelligence for your organization
- Authenticate users and maintain account security
- Respond to support requests and provide customer service
- Comply with legal obligations and enforce our Terms of Service
**Critical Commitment**: We never sell your data, use it to train AI models for other customers, or share organizational
intelligence with third parties for commercial purposes.
## Data Sharing and Disclosure
We share data only in limited circumstances:
- **With Your Consent**: When you explicitly authorize sharing
- **Service Providers**: Trusted vendors who process data on our behalf under strict confidentiality agreements
- **Legal Requirements**: When required by law, court order, or regulatory obligation
- **Business Transfers**: In the event of merger, acquisition, or asset sale (with advance notice)
## Your Rights
You have the right to:
- **Access**: Request copies of your personal and organizational data
- **Correction**: Update inaccurate or incomplete information
- **Deletion**: Request deletion of your data (with 30-day guarantee)
- **Portability**: Export your data in machine-readable formats
- **Objection**: Opt out of certain data processing activities
- **Restriction**: Limit how we process your data
To exercise these rights, contact privacy@clarity.ai
## Data Retention
We retain data only as long as necessary for business purposes or legal compliance.
You control retention policies for organizational intelligence. Upon deletion requests,
we permanently delete data within 30 days—no backups, no archives, no exceptions.
## Security
We implement enterprise-grade security measures including encryption at rest (AES-256),
encryption in transit (TLS 1.3+), access controls, audit logging, and regular security assessments.
See our [Security page](/security) for details.
## International Transfers
We may transfer data internationally with appropriate safeguards (Standard Contractual Clauses,
Privacy Shield frameworks, or other legally compliant mechanisms). Regional data residency options
are available for regulated industries.
## Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect data from children.
## Changes to This Policy
We may update this Privacy Policy to reflect changes in practices or legal requirements.
Material changes will be communicated via email or platform notification.
## Contact Us
For privacy questions or to exercise your rights:
- Email: privacy@clarity.ai
- Data Protection Officer: dpo@clarity.ai
For EU residents, you have the right to lodge a complaint with your supervisory authority.