[EDIT: Have this reviewed by an attorney before publishing as legally binding]
This is a draft privacy policy. It should be reviewed by qualified legal counsel before being presented as a legally binding document.
Privacy Policy
Last updated: July 7, 2026
Data We Collect
ClarityCore collects three categories of data: (1) Account information — your name, email address, and company profile details you enter voluntarily. (2) Uploaded documents — solicitation files, knowledge vault content, and requirement attachments you upload to the platform. (3) Usage data — pages visited, features used, and interaction events that help us improve the product. We do not collect payment card data. All payments are processed by Stripe.
How We Use Your Data
Account information is used to authenticate you, personalize your experience, and communicate about your account. Uploaded documents are used to generate compliance matrices, proposal outlines, and AI-assisted content as you direct. Usage data is aggregated to identify product issues and prioritize improvements. We do not sell your data to third parties. We do not use your uploaded documents to train AI models for other users.
Third-Party Processors
ClarityCore relies on two third-party processors: (1) Stripe — processes all payments and manages subscription billing. Stripe's privacy policy governs card data; ClarityCore never stores it. (2) Base44 infrastructure — hosts the application, database, and file storage. Base44 provides the backend platform, encrypted storage, and row-level security enforcement. Both processors are bound by data processing agreements and do not use your data for their own purposes.
Data Security
All data enforces row-level security at the database layer. Uploaded files are stored in encrypted object storage with time-limited signed URL access. Payments route through Stripe's PCI-compliant infrastructure. Admin actions require role verification. See the Security page for full technical detail.
Your Rights
You have the right to access your data, request deletion of your account and associated records, and export your company profile information via CSV from the Dashboard. To request data deletion, contact support@claritycore.pro. Deletion requests are processed within 30 days. Some data may be retained as required by law or to process outstanding billing obligations.
Cookie Usage
ClarityCore uses essential cookies to maintain your authenticated session and remember your preferences. We do not use advertising cookies, tracking pixels, or third-party advertising identifiers. Analytics events are fired directly from the application and do not rely on third-party advertising networks.
Data Retention
Your uploaded documents and generated content remain in your account until you delete them or close your account. If you cancel a subscription, your data is retained for 90 days to allow reactivation. After 90 days of inactivity on a canceled account, data may be permanently deleted. Active subscription data is retained for the life of the account.
Contact for Privacy Requests
For any privacy-related request — data access, deletion, correction, or questions about this policy — contact support@claritycore.pro. Include your account email and the specific request. We respond within 1 business day.