Privacy Policy

Clarion ("we", "our", or "us") is operated by an individual based in India. This Privacy Policy explains what information we collect when you use Clarion at goclarion.app, how we use it, and what rights you have over it.

By using Clarion, you agree to the collection and use of information described in this policy.

1. What We Collect

1a. Account Information

When you create an account, we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service.

1b. Gmail Access

Clarion requests permission to access your Gmail account via Google OAuth to perform two functions:

• Create drafts: Clarion creates email drafts in your Gmail Drafts folder based on AI-generated research. You review and send every draft manually — Clarion never sends emails without your explicit approval.
• Read inbox for replies: Clarion reads incoming emails in your Gmail inbox to detect replies to outreach emails you have sent, so it can categorise responses and suggest appropriate follow-up actions.

Important: We do not read, store, or process Gmail messages unrelated to outreach you have initiated through Clarion. Gmail data is never used for advertising, never shared with third parties beyond what is necessary to operate the service, and never used to train AI models. You can revoke Gmail access at any time from your workspace settings or from your Google Account permissions page.

1c. Your AI API Keys

Clarion does not provide AI capabilities from its own infrastructure. Instead, you connect your own API keys from AI providers such as OpenAI, Anthropic, or Google Gemini. These keys are stored encrypted in our database and are used solely to make AI calls on your behalf — for company research and email draft generation. We do not use your API keys for any other purpose and do not share them with any third party.

When Clarion makes an AI call using your key, your workspace configuration (product details, ICP definition) and publicly researched company information are sent to your chosen AI provider. No Gmail message content is ever sent to AI providers.

1d. Workspace Configuration

During onboarding, you provide details about your company, product, and ideal customer profile. This information is stored in your workspace and used to personalise the AI-generated research and email drafts Clarion produces for you.

1e. Usage Data

We track usage counts such as the number of accounts researched and emails drafted per billing period. This is used to enforce plan limits and show you your current usage in the dashboard.

1f. Log Data

Our servers automatically record technical information including your IP address, browser type, pages visited, and timestamps. This is used for debugging and security purposes only.

2. How We Use Your Information

• To provide and operate the Clarion service
• To create email drafts in your Gmail Drafts folder based on your workspace configuration
• To detect and categorise replies to your outreach emails
• To make AI calls using your connected API keys for research and draft generation
• To enforce plan usage limits
• To send transactional emails (e.g. account verification, password reset)
• To debug errors and improve the service

We do not sell your personal data. We do not use your data for advertising. We do not use Gmail data or your AI-generated content to train machine learning models.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase. Gmail OAuth refresh tokens and AI API keys are stored encrypted at rest. We use industry-standard security practices to protect your data.

Clarion is hosted on Vercel (frontend) and Railway (backend), both of which are GDPR-aware infrastructure providers.

4. Third-Party Services

Clarion uses the following third-party services to operate:

• Google (Gmail API): To read your inbox for reply detection and to create drafts in your Gmail Drafts folder. Governed by Google's Privacy Policy.
• Your chosen AI provider (OpenAI / Anthropic / Google Gemini): AI calls are made using your own API keys. Your workspace config and researched company data is sent to these APIs. No Gmail content is ever sent to AI providers.
• Supabase: Database hosting
• Vercel / Railway: Application hosting
• Resend: Transactional email delivery
• Stripe: Payment processing (when billing is active)

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

Gmail OAuth tokens and AI API keys are deleted immediately upon account deletion or when you disconnect them from your workspace settings.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Disconnect Gmail access at any time from your workspace settings
• Remove your AI API keys at any time from your workspace settings
• Revoke Google OAuth access at any time via your Google Account permissions page

To exercise any of these rights, email us at hello@goclarion.app. We will respond within 30 days.

7. Children's Privacy

Clarion is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Continued use of Clarion after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, contact: