Privacy Policy

This policy explains what personal data Claritty collects, how we use it, and your rights (including under GDPR and CCPA).

Data we process

Account details, usage data, and — for purchases and payouts — billing information processed by Stripe. We do not store full card numbers.

Google user data (Gmail and other Google services)

When you connect a Google account to Claritty (for example, Gmail), you grant Claritty access to specific Google data through Google’s OAuth consent screen. We access this data only after you explicitly connect the integration, and only to provide the features of the Claritty app you are using.

What we access. Depending on the scopes you approve, this may include reading messages and message metadata in your mailbox, sending email on your behalf, and modifying messages (for example, labeling or archiving). We request the narrowest scope each app needs to function.

How we use it. Google user data is used solely to perform the actions you or your connected app initiate (such as triaging your inbox or sending a message you approve). We do not use Google user data for advertising, and we do not sell it.

How we store it. Your OAuth tokens are encrypted at rest (envelope-encrypted via a managed key) and held on the Claritty platform. Tokens are never exposed to the individual apps that use the integration — each Google API call is brokered by the platform on your behalf. You can disconnect an integration at any time, which revokes Claritty’s access and deletes the stored tokens.

How we share it. We do not transfer Google user data to third parties except as necessary to provide and secure the service (for example, our cloud infrastructure providers acting as processors under contract), to comply with applicable law, or as part of the operation you explicitly requested.

Limited Use. Claritty’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow humans to read your Google user data unless (a) you give explicit consent to access specific items, (b) it is necessary for security purposes (such as investigating abuse), (c) it is required to comply with applicable law, or (d) the data is aggregated and anonymized and used to improve the service in line with that policy.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may revoke any connected Google account at any time from Claritty’s integration settings or from your Google Account permissions. Contact us to exercise these rights.