Privacy Policy

1. Who We Are

ClearAI HQ ("we", "us", "our") is operated by ClearAI HQ. Our platform is accessible at clearaihq.com. For privacy inquiries contact us at privacy@clearaihq.com.

2. Information We Collect

We collect the following categories of information:

• Account information: Email address, name, and password (hashed) when you register.
• Business profile: Business name, industry, location, and goals you provide in the platform.
• Social media tokens: OAuth access tokens for connected platforms (Facebook, Instagram, LinkedIn, TikTok). These are stored encrypted and used solely to publish content on your behalf.
• Content you create: Posts, documents, and AI-generated content saved in your account.
• Usage data: Feature usage, page views, and interaction data for analytics and service improvement.
• Payment information: Processed by Stripe. We do not store card numbers.

3. How We Use Your Information

• To provide, operate, and improve the ClearAI HQ platform.
• To publish content to connected social media accounts on your explicit instruction.
• To send transactional emails (account, billing, important updates).
• To generate AI-powered insights and recommendations personalised to your business.
• To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your content to train AI models.

4. Social Media Integrations

When you connect a social media account, we request only the permissions necessary to publish content. Specifically:

• TikTok: We request user.info.basic (to display your account name), video.upload and video.publish (to post videos you approve). We do not access your followers, messages, or analytics without additional consent.
• Facebook & Instagram: We request page management and content publishing permissions only.
• LinkedIn: We request profile and post publishing permissions only.

You can disconnect any social account at any time from your Connected Accounts settings. Upon disconnection, we delete your access token immediately.

5. Data Sharing

We share data only with trusted service providers necessary to operate the platform:

• Supabase — database and authentication
• Anthropic — AI processing (messages are not stored by Anthropic for training)
• Stripe — payment processing
• Netlify — hosting and serverless functions

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it longer.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability.

To exercise any of these rights, email privacy@clearaihq.com.

8. Cookies

We use essential cookies for authentication (session management). We do not use advertising or tracking cookies. We use Supabase's anonymous auth session which stores a JWT in localStorage.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), encrypted storage of OAuth tokens, and regular security reviews. No system is 100% secure — if you suspect a breach, contact us immediately.

10. Children's Privacy

ClearAI HQ is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or in-app notice. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy questions or requests: privacy@clearaihq.com