Privacy Policy

This Privacy Policy explains what information Clairoz ("we", "our", "us") collects when you use our service, how we store and use it, and the rights you have over that data.

1. Information We Collect

• Account data: email address, display name, and authentication identifiers from sign-in providers (e.g. Google).
• Project content: ideas, roadmaps, mind-map nodes, documents, chat messages, and test answers you create in the product.
• Usage data: page views, feature interactions, device and browser metadata, IP address, and approximate location.
• Support data: any information you provide when contacting us or submitting a bug report (including screenshots).

2. How Your Data Is Stored

Your account and project data are stored in a managed Postgres database hosted by our infrastructure provider in encrypted form, with row-level security policies that restrict access to your own records. Backups are encrypted in transit and at rest. Authentication tokens are kept in your browser's local storage and transmitted only over HTTPS.

3. How AI Interactions Are Processed

When you generate a roadmap, regenerate a node, or chat with the AI assistant, the content of your request (your idea, project context, and recent conversation) is sent to a third-party large-language-model provider for processing. The provider returns a response that we store alongside your project so you can continue working with it. We do not sell your prompts, and we do not use them to train public models. The provider may retain prompts transiently for abuse-detection purposes; see their documentation for details.

4. Your Rights

• Access: you can view and export your projects, documents, and chat history at any time from your account.
• Correction: you can edit or update any project content you have created.
• Deletion: you can delete individual projects from the projects screen, or request full account deletion (which removes profile, projects, mind-map nodes, documents, conversations, and test results) by emailing us.
• Portability: you can request a machine-readable copy of your data.
• Withdraw consent: stop using the service and request deletion at any time.

5. Data Sharing

We share data only with the service providers we use to run Clairoz (hosting, database, authentication, AI model provider, email). We do not sell personal data.

6. Cookies

We use a small number of strictly necessary cookies and local-storage entries to keep you signed in and remember preferences. We do not use third-party advertising cookies.

7. Children

Clairoz is not intended for users under 13. Do not use the service if you are below that age.

8. Changes

We will update the "Last updated" date above when this policy changes. Material changes will be announced in-app.

9. Contact

For privacy-related questions, data access, or deletion requests, email clairozsupport@gmail.com. See also our Contact & Support page.