Privacy Policy
Last updated: March 26, 2026
This Privacy Policy describes how PinkRooster, trading as Clarive ("we", "us", "our"), collects, uses, and protects your personal data when you use Clarive Cloud ("Service"). We are committed to protecting your privacy and handling your data transparently.
1. Data We Collect
We collect the following categories of data:
Account information
When you create an account, we collect your name, email address, and authentication credentials (via email/password or Google OAuth). If you are invited to a workspace, we also store your role and workspace membership.
Google OAuth data
If you sign in with Google, we receive your name, email address, and Google account identifier through Google's OpenID Connect service. We use this data solely to create and authenticate your account. We do not receive or store your Google password, contacts, or any other Google account data. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, market research, or any purpose other than providing the Service to you.
Content you create
Prompts, templates, workspace names, and any other content you enter into the Service. This data is stored to provide the Service to you and your team.
Usage data
We record which AI actions you perform (generate, refine, enhance), credit consumption, and timestamps. This data is used for billing, analytics, and to improve the Service.
Payment information
Payment data (card numbers, billing address) is collected and processed exclusively by Lemon Squeezy (Lemon Squeezy, LLC), our payment processor and Merchant of Record. Clarive does not receive, store, or have access to your payment card details. See Lemon Squeezy's privacy policy for details on how they handle payment data.
Analytics data
We use Plausible Analytics, a privacy-focused, cookie-free analytics service. Plausible collects aggregate page view data (pages visited, referral sources, browser type, country) without using cookies, tracking scripts, or collecting personally identifiable information. No consent banner is required because no personal data is collected by Plausible.
2. How We Use Your Data
We use your data for the following purposes:
- Service delivery. To operate the Service, process your AI requests, manage your account, and provide customer support.
- Billing. To track credit consumption, process purchases (via Lemon Squeezy), and maintain purchase history.
- Service improvement. To understand usage patterns and improve the Service. We use aggregate, anonymized data for this purpose.
- Security. To detect and prevent fraud, abuse, and unauthorized access. We maintain audit logs of account actions.
- Communication. To send you transactional emails (account confirmation, purchase receipts, low balance alerts) and, with your consent, product updates.
We do not sell your personal data. We do not use your prompts or content to train AI models. Your content is processed by third-party AI providers solely to generate responses to your requests, and is not retained by those providers beyond the duration of the API call.
3. Data Storage and Security
Your data is stored on servers located in the European Union. We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS 1.2+) for all connections to the Service.
- Encryption at rest for stored prompts and account data.
- Role-based access controls limiting who can access production data.
- Regular security updates and dependency auditing.
- Audit logging of all administrative and data-access actions.
While we take reasonable precautions, no method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at privacy@clarive.app.
4. Third Parties
We share data with the following third parties, solely to provide the Service:
- Lemon Squeezy (Lemon Squeezy, LLC) — Payment processing, invoicing, and tax calculation. Lemon Squeezy acts as Merchant of Record and is an independent data controller for payment transactions. When you make a purchase, you transact directly with Lemon Squeezy, which processes your payment data under their own privacy policy.
- Google (Google LLC) — Authentication via Google OAuth. If you choose to sign in with Google, your authentication request is processed by Google's servers. We only receive your name, email, and Google account identifier. See Google's privacy policy.
- Plausible Analytics — Privacy-focused, cookie-free website analytics. Collects only aggregate, non-personal data. EU-hosted.
- AI model providers (e.g., OpenAI) — Your prompts are sent to the configured AI provider to generate responses. Data is processed in-transit and is not retained by the provider beyond the API call. We do not share your account information with AI providers.
- Infrastructure providers — We use cloud hosting providers within the EU for servers, databases, and backups.
5. Data Retention
We retain your data according to the following schedule:
- Account data (name, email, workspace membership) — Retained for as long as your account is active. Deleted within 30 days of account closure.
- Content (prompts, templates, version history) — Retained for as long as your account is active. You may delete individual items at any time. All content is deleted within 30 days of account closure.
- Usage logs (credit consumption, action timestamps) — Retained for 90 days, then automatically purged. Aggregate, anonymized usage statistics may be retained indefinitely.
- Purchase records — Retained for 7 years to comply with tax and accounting regulations.
- Audit logs — Retained for 12 months, then automatically purged.
6. Your Rights
You have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@clarive.app.
- Access. You may request a copy of the personal data we hold about you. We will provide this within 30 days.
- Correction. You may update your account information at any time through the Service settings, or by contacting us.
- Deletion. You may delete your account directly from your account settings or by contacting us. Deletion will be completed within 30 days, except for data we are required to retain by law (e.g., purchase records).
- Export. You may export your prompts, templates, and content at any time using the built-in export functionality (JSON, YAML, or Markdown formats) or the REST API.
- Restriction. You may request that we restrict the processing of your data while a complaint or dispute is being resolved.
- Objection. You may object to the processing of your data for specific purposes. We will cease processing unless we have compelling legitimate grounds.
- Portability. You may request your data in a structured, machine-readable format. The built-in export feature provides this functionality.
- Withdraw consent. Where we process your data based on consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing performed before it.
7. GDPR Compliance
If you are located in the European Economic Area (EEA), the following additional provisions apply:
- Legal basis for processing. We process your personal data under the following legal bases: (a) Contract performance — to provide the Service you signed up for; (b) Legitimate interest — for security, fraud prevention, and service improvement; (c) Legal obligation — to retain purchase records as required by tax and accounting law; (d) Consent — for marketing communications, which you may withdraw at any time.
- Privacy contact. For GDPR-related inquiries, contact us at privacy@clarive.app.
- Supervisory authority. You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data is being processed unlawfully.
- International transfers. Your data is stored and processed within the EU. Some data is transferred outside the EEA: to AI model providers for prompt processing, to Lemon Squeezy (United States) for payment processing, and to Google (United States) if you use Google sign-in. Where these transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.
8. Cookies
Clarive Cloud uses a minimal number of cookies, limited to those strictly necessary for the Service to function:
- Authentication cookies. Session cookies to keep you logged in. These are essential for the Service and cannot be disabled.
We do not use tracking cookies, advertising cookies, or third-party cookies. Our analytics provider (Plausible) is cookie-free and does not track individual users. No cookie consent banner is required.
9. Children's Data
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us at privacy@clarive.app and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via email or an in-app notice.
11. Contact
The data controller for the Service is PinkRooster, trading as Clarive. If you have questions about this Privacy Policy or how we handle your data, please contact us:
- Privacy: privacy@clarive.app
- General inquiries: legal@clarive.app