Last updated: 1 June 2025

Privacy Policy

Clara AI (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what data we collect, why, and how we protect it.

1. Information We Collect

We collect information you provide directly (account registration, payment details, uploaded documents) and information collected automatically when you use Clara AI (usage logs, query metadata, IP addresses, browser type). We do not read the content of documents you upload beyond what is necessary to generate vector embeddings for search.

2. How We Use Your Information

We use collected information to: provide and improve the Clara AI platform; process payments and manage subscriptions; respond to support requests; send product updates and security notices; and detect and prevent abuse. We do not sell your personal data or use it for third-party advertising.

3. Data Isolation & Tenant Security

All knowledge bases, documents, and embeddings are strictly isolated per organisation. No organisation can access another's data. API keys are hashed and never stored in plaintext. All data is encrypted at rest (AES-256) and in transit (TLS 1.3).

4. Data Retention

Document data and embeddings are retained for as long as your account is active. Upon account deletion, all associated data is purged within 30 days. Usage logs are retained for 90 days. You may request earlier deletion by contacting support.

5. Third-Party Services

Clara AI uses the following sub-processors: OpenAI (LLM inference and embeddings), Qdrant (vector database), Stripe (payment processing), and cloud infrastructure providers. Each sub-processor is bound by a data processing agreement consistent with this policy.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, email privacy@clara.ai. For EEA/UK residents, we process data under the legitimate interest and contractual necessity lawful bases under GDPR.

7. Cookies

We use strictly necessary session cookies for authentication and optional analytics cookies (opt-out available in account settings). We do not use advertising or cross-site tracking cookies.

8. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Continued use of Clara AI after that date constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy, please contact us at privacy@clara.ai or write to: Clara AI Platform, Legal Department.