Privacy Policy

We collect information you provide directly — your name, email address, and organization details when you create an account. We also automatically collect usage data, device and browser information, and log files to operate and secure the service.

We use the information we collect to provide, maintain, and improve the service; process transactions; send transactional and, with your consent, promotional communications; and comply with legal obligations.

Subscription payments are handled by our payment provider — Paddle, Lemon Squeezy, or Dodo Payments, depending on your account's billing configuration — acting as the merchant of record for the transaction. Your card details are entered directly into that provider's own secure checkout and never pass through our servers; we only receive confirmation that a payment succeeded, plus the billing metadata (plan, amount, timestamps) needed to manage your subscription.

Features like semantic search, duplicate detection, AI-generated summaries, category tags, and spec drafts send the relevant content — e.g. a post's title and description — to OpenAI for processing. Per OpenAI's API terms, this data is not used to train their models. We only send what a given feature needs to function, never your full account data.

We use essential cookies to keep you signed in and remember your preferences. With your consent, we also use analytics cookies to understand how the product is used in aggregate — never to identify you individually. You can change your choice anytime from the cookie preferences panel, reachable from the small icon in the bottom-left corner of the site.

• We do not sell your personal data, to anyone, ever.
• We do not use your content to train AI models — OpenAI processes it only to generate the response a feature asked for, per its API terms.
• We do not share data with third parties beyond the sub-processors necessary to run the service, listed below.

Beyond the payment and AI processors described above, we share data only with sub-processors required to deliver the service — including AWS (file storage) and Brevo (transactional email). All sub-processors are contractually bound to protect your data. We disclose data to authorities only when legally required to.

We retain your data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by emailing privacy@clypp.io. Some data may be retained for legal or audit purposes for up to 7 years.

Depending on your jurisdiction you have the right to access, correct, or delete your personal data; object to or restrict processing; and port your data. Residents of the EU/EEA may also lodge a complaint with their local data protection authority.

We implement industry-standard safeguards including encryption in transit (TLS) and at rest, strict access controls, and regular security reviews. No system is perfectly secure and we cannot guarantee absolute protection — if we ever discover a breach affecting your data, we will notify you promptly.

We may update this Privacy Policy from time to time. When we do we will revise the "Last updated" date and, for material changes, notify you via email or a prominent notice in the product.

Questions about this policy? Email us at privacy@clypp.io or write to us at our registered address. We will respond within 30 days.