Privacy Policy
Last updated: 15 August 2026
This Privacy Policy explains what personal data we collect, how we use it, and the choices you have when you use Clarilit (the 'Service').
1. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, authentication identifiers | Create and secure your account |
| Usage data | Messages/questions you submit, session metadata, timestamps | Provide the Service, generate responses, improve quality |
| Payment data | Purchase history, transaction identifiers (card details are handled directly by our payment processor and never stored on our servers) | Process purchases, maintain your credit balance, fraud prevention |
| Technical data | IP address, device/browser type, log data | Security, rate-limiting, abuse prevention |
We do not knowingly collect data from children under 16. If we learn we have collected such data, we will delete it.
2. How We Use Your Data
- To provide, maintain, and improve the Service;
- To process payments and maintain your credit balance;
- To detect and prevent abuse, fraud, or violations of our Terms of Service;
- To communicate with you about your account or transactions;
- To understand aggregate usage patterns across regions and languages, and improve the Service accordingly;
- To comply with legal obligations.
We do not sell your personal data.
3. Third-Party Service Providers
We share data with the following categories of service providers, solely to operate the Service:
- Database and authentication infrastructure We use a cloud database and authentication infrastructure provider to store and secure your account and conversation data.
- AI model provider We use a third-party AI service provider to process your submitted questions and generate responses. Your input is transmitted to this provider solely to generate a response and is subject to that provider's own data handling terms.
- Payment processor We use a third-party payment processor, compliant with PCI-DSS, to handle your purchase. We do not receive or store your full card details.
We require these providers to handle data consistent with this Policy and applicable law, but each provider processes data under its own privacy terms as well.
4. Legal Basis for Processing (EU/UK users)
Where the GDPR applies, we process your data on the following legal bases: performance of a contract (providing the Service you signed up for), legitimate interest (security, abuse prevention, service improvement), and consent (where required, e.g. certain marketing communications).
5. Data Retention
We retain account and conversation data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, or dispute-resolution obligations. You may request earlier deletion as described in Section 7.
6. International Data Transfers
Your data may be processed in countries other than your own, including the United States and Singapore. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EU/UK to countries without an adequacy decision.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate data;
- Delete your data ("right to be forgotten"), subject to legal retention requirements;
- Export your data in a portable format ("data portability");
- Object to or restrict certain processing;
- Withdraw consent at any time where processing is based on consent;
- (California residents) Know, delete, and opt out of the sale/sharing of personal information under the CCPA/CPRA — noting again that we do not sell personal data.
To exercise any of these rights, contact us at support@clarilit.app. We will respond within the timeframe required by applicable law (generally 30 days under GDPR, 45 days under CCPA).
8. Security
We use industry-standard measures (encryption in transit, access controls, row-level security on our database) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Cookies and Similar Technologies
We use essential cookies/local storage to keep you signed in and remember basic preferences.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via email before they take effect.
11. Contact
For privacy-related questions or requests, contact: support@clarilit.app
If you are in the EU/UK and believe we have not resolved your concern, you have the right to lodge a complaint with your local data protection authority.