Legal

Privacy Policy

Last updated: September 7, 2026

1. Introduction

ClutterAI (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use the ClutterAI application at app.clutter-ai.com, the ClutterAI app for Slack, and this website at clutter-ai.com (together, the “Service”).

2. Information We Collect

2.1 Account information

  • Email address and display name
  • If you sign in with a password: the password, stored only as a salted hash
  • If you sign in with Google: your Google account email, name and profile picture
  • Preferences you set, including how you told us you plan to use ClutterAI during onboarding

2.2 Connected service data

When you connect a third-party service through OAuth, we collect and store the content you grant access to so that it can be indexed, searched and used to answer your questions. Which content depends on the service:

  • Gmail: email messages, attachments metadata and headers (read-only scope)
  • Google Drive: the files and documents you grant access to (read-only scope)
  • Google Calendar: events, attendees and details (read-only scope)
  • Slack: messages in the channels you select, direct messages you send to the ClutterAI app, and channel and user information
  • Notion and Confluence: pages, databases and workspace content
  • GitHub and GitLab: repositories, files, issues, pull or merge requests and their discussions
  • Linear, Jira and Trello: issues, cards, comments and project metadata
  • Airtable: bases, tables, records and field definitions
  • Zendesk: tickets, comments and requester details

Some connectors, such as GitHub and GitLab, do not offer a purely read-only permission for private repositories; we request the narrowest scope the provider allows and use it only to read.

2.3 Content you create in ClutterAI

  • Questions you ask and the answers you receive, including which sources were used
  • Folio documents, Notes pages and labels, Easel boards and Facet sheets, including files you upload to Facet (CSV or Excel)
  • Cadence meetings you create, their agendas, links and invitations, and the people directory you build (names, roles, companies and email addresses of attendees)
  • Chime tasks, reminders and the notification history that goes with them
  • Stride accounts, deals, contacts, logged activity (notes, calls and emails you log or paste), proposed updates and their transcript quotes, drafts and research briefs
  • Files generated and saved by Forge, and their versions
  • Attune transcripts, notes, flashcards and the action items extracted from them
  • Tasks, commitments and decisions that agents extract from the above

2.4 Audio (Attune)

When you start an Attune session, audio from your microphone and, if you choose, a shared browser tab is streamed to our speech-to-text provider in real time. We store the resulting transcript and the notes derived from it. We do not currently retain the audio itself once it has been transcribed. You are responsible for telling the other people in a meeting or class that it is being transcribed and for obtaining any consent the law where you are requires.

2.5 Files you upload

Spreadsheets you upload to Facet (CSV or Excel) may contain personal data about people who are not ClutterAI users. You must have a lawful basis to process it and to share it with us; we process it only to show, filter and enrich it for you.

2.6 Usage information

  • Usage metering events: which features you used, when, and approximately how much model capacity they consumed. These are needed to enforce plan limits and to bill correctly.
  • Device information, IP address, browser type and operating system
  • If you turn notifications on, the browser’s push subscription (an endpoint and keys issued by your browser) so reminders can reach you when the tab is closed, and a delivery record per notification
  • Diagnostic logs and error reports

We do not run third-party analytics or advertising scripts in the application or on this website.

2.7 Team information

If you create or join a team, we store the team name, the email addresses of members and invitees, each member’s role and seat type, and per-member usage totals. Team owners and admins can see the members list, roles and usage totals in the admin console.

2.8 Payment and transaction information

All payments are processed by Lemon Squeezy LLC (“Lemon Squeezy”), which acts as our Merchant of Record. This means Lemon Squeezy, not ClutterAI, is the legal seller of record for all transactions. Your invoice and card statement will show Lemon Squeezy, not ClutterAI — this is expected and confirms your purchase was processed successfully. We do not store your card details. Lemon Squeezy collects and processes:

  • Payment information (credit or debit card details)
  • Billing address and contact information
  • Transaction history and receipts
  • Tax information (VAT, GST, sales tax and similar)
  • Purchase metadata

Lemon Squeezy’s use of your payment information is governed by their Privacy Policy at lemonsqueezy.com/privacy. We receive limited transaction data from Lemon Squeezy (your email, subscription status, plan, seat count and purchase date) solely to provide you access to the Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate and maintain the Service
  • Index your connected content and the content you create, so it can be searched by keyword and by meaning
  • Decide, for each question, whether to answer from your sources, from general knowledge or from the web, and generate the answer with citations
  • Run agents on your behalf, including scheduled ones such as Digest each morning and Pulse before meetings, and produce briefings, rankings, drafts, code and extracted tasks
  • Transcribe Attune sessions and produce notes, flashcards and action items
  • Ring the reminders you set and deliver notifications through the channels you turned on
  • Propose deal updates and follow-up drafts from your meetings, and research accounts on the web when you ask
  • Meter usage against your plan and enforce limits
  • Verify subscription status and grant access (via Lemon Squeezy)
  • Send transactional email: sign-in codes, team invitations, service updates and support replies
  • Improve the Service and develop new features, using aggregated or anonymised information
  • Detect and prevent fraud or abuse, and comply with legal obligations

3.1 AI processing

To provide these features we send content to the following AI providers through their APIs:

  • Anthropic (Claude models): generating answers, running agents, Forge, Facet AI columns, Easel diagram generation, Attune notes and summaries. Anthropic does not use API inputs or outputs to train its models.
  • OpenAI: converting content to vector embeddings so it can be searched by meaning, and some agent tasks. OpenAI does not use API customer data to train its models.
  • Deepgram: real-time speech-to-text for Attune.
  • Pinecone: storing the vector embeddings that make semantic search possible.

We do not use your data to train AI models, and neither do these providers. Your content is processed only to provide the Service to you.

4. Data Sharing and Third-Party Service Providers

To provide ClutterAI we share information with a small number of service providers. Each processes data only as necessary to deliver its part of the Service and is bound by its data processing terms.

4.1 Service providers (sub-processors)

  • Lemon Squeezy LLC: merchant of record, payment processing, tax handling and subscription management. Privacy Policy
  • Convex: database, backend functions and authentication infrastructure. Privacy Policy
  • Vercel: hosting and deployment of the application and this website. Privacy Policy
  • Anthropic: language models for answers, agents and generation. Privacy Policy
  • OpenAI: embeddings and some agent tasks. Privacy Policy
  • Pinecone: vector database for semantic search. Privacy Policy
  • Deepgram: speech-to-text for Attune. Privacy Policy
  • Resend: transactional email delivery. Privacy Policy

4.2 What we require of them

  • Your data is processed only for the purposes described in this policy
  • Appropriate security measures are maintained
  • Your data is not used for their own purposes, including model training, or shared with other parties
  • Compliance with applicable data protection regulations (GDPR, UK GDPR, CCPA and similar)

4.3 Teams

If you are part of a team on ClutterAI:

  • Teammates can see only the items you explicitly share: Folio documents, Easel boards, Facet views, Attune sessions, Cadence meetings and contacts, and Stride deals you mark as shared. Shared items are searchable by every member. A shared deal shows teammates its facts, summary, people and activity metadata; the bodies of logged emails, proposals and your tasks stay with you.
  • Your connected sources — Gmail, Slack, Drive and the rest — are never visible to teammates. Answers to your questions are private to you.
  • Team owners and admins can see member email addresses, roles, seat assignments and usage totals. They cannot read your questions, answers or private content.
  • If you leave or are removed from a team, items you shared remain available to the team unless you unshare or delete them first. Your private content stays with your account.

4.4 The ClutterAI app for Slack

When you mention @ClutterAI or send it a direct message, we receive the message text, your Slack user identifier and the channel identifier, and we answer using your own ClutterAI account and connected data. Replies in channels are ephemeral — visible only to you — unless you choose to share one.

4.5 What we do NOT do

  • Sell your personal data to third parties
  • Use your data for advertising purposes
  • Share your data with non-essential third parties
  • Train AI models on your private content, or allow our providers to

4.6 Legal requirements

We may disclose your information if required by law, court order or government request, or to protect our rights, property or safety or those of others.

4.7 Legal basis for processing (EU/UK users)

  • Contract: to provide the Service and perform our agreement with you
  • Legitimate interest: to improve the Service, meter usage, detect fraud and ensure security
  • Consent: where required, for example optional communications. You may withdraw consent at any time.
  • Legal obligation: to comply with applicable laws

4.8 Business transfers

If ClutterAI is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you by email and by a prominent notice on the Service of any change in ownership.

5. Data Security

  • TLS encryption for data in transit
  • Encryption at rest for stored content and credentials
  • OAuth tokens stored encrypted; read-only scopes requested wherever the provider offers them (Gmail, Google Drive, Google Calendar)
  • Passwords stored only as salted hashes
  • Access controls, authentication requirements and monitoring

In the event of a data breach affecting personal data, we will notify affected users and regulators as required by applicable law, including within 72 hours for incidents covered by the GDPR.

No system is completely secure. We protect your data using commercially reasonable measures but cannot guarantee absolute security.

5.1 Google API Services

ClutterAI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features you have enabled, is never sold, and is never used for advertising or to train generalised AI models.

6. Your Rights and Choices

6.1 General rights

Subject to local law, you have the right to:

  • Access: request a copy of your personal data
  • Correct: update inaccurate or incomplete information
  • Delete: request deletion of your account and associated data
  • Restrict processing: limit how we use your data
  • Object: object to processing based on legitimate interests
  • Data portability: receive your data in a portable format
  • Withdraw consent: withdraw previously given consent
  • Lodge a complaint: file a complaint with your data protection authority

6.2 How to exercise your rights

Email support@clutter-ai.com with “Data Request” in the subject line. We will acknowledge receipt within 5 business days and respond within 30 days. Account deletion is also available from Settings inside the application.

6.3 EU/UK residents

EU and UK residents may lodge a complaint with their local data protection authority. A list of EU authorities is at edpb.europa.eu.

6.4 California residents (CCPA/CPRA)

If you are a California resident you also have the right to know what personal information is collected, used, shared or sold; to delete it; to correct it; to opt out of its sale or sharing; and not to be discriminated against for exercising these rights.

We do not sell or share personal information as defined by the CCPA/CPRA.

6.5 Subscription and payment management

Change or cancel your plan from Settings in the application, through the Lemon Squeezy customer portal linked in your receipt email, or by emailing support@clutter-ai.com. For payment-specific questions you can also contact Lemon Squeezy’s support portal.

6.6 Connected services management

You can disconnect any integrated service at any time from Integrations in the application. Disconnecting will:

  • Immediately revoke ClutterAI’s access to that service
  • Stop syncing new content from it
  • Retain previously indexed content for up to 30 days (for recovery if you reconnect)
  • Permanently delete the associated content and embeddings after 30 days

You can also revoke access directly at the provider, for example from Google’s account permissions page or Slack’s app settings.

7. Data Retention

  • Active accounts: data is retained while your account is active
  • Disconnected sources: indexed content deleted within 30 days of disconnection
  • Attune audio: not retained after transcription; transcripts and notes are kept with your account
  • Uploaded files (Facet): kept until you delete the sheet, or your account
  • After account deletion: most data deleted within 30 days; backups purged within 90 days
  • Vector embeddings: deleted from Pinecone within 30 days of account deletion
  • Usage metering events: retained for as long as needed to bill and to resolve disputes about limits
  • Transaction records: retained by Lemon Squeezy as required for legal and tax purposes (typically 7 years)
  • Aggregated or anonymised data: may be retained indefinitely

For earlier deletion or a data export, contact support@clutter-ai.com.

8. Cookies, Local Storage and Tracking

The application uses only what it needs to function:

  • Authentication cookies and tokens: to keep you signed in
  • Session and preference storage: to remember your settings and where you left off
  • Security cookies: to detect fraud and abuse

This website (clutter-ai.com) sets no cookies, loads its fonts from our own servers rather than a third party, and runs no analytics or advertising scripts. It uses browser session storage only to remember that you have seen the loading animation.

We do not use advertising or third-party tracking cookies anywhere.

9. Children’s Privacy

The Service is not intended for children under 13 (or 16 in the EU/UK). If we learn we have collected personal data from a child without appropriate consent, we will delete it promptly. Contact us at support@clutter-ai.com if you believe we may have collected information from a child.

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. For transfers from the EEA and UK we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum.

11. Third-Party Services

When you connect a third-party service, your use of that service is also subject to its own privacy policy:

We only access data you explicitly authorise through OAuth. You can revoke our access at any time through Integrations in the application or directly at the provider.

12. Changes to This Policy

We will notify you of material changes by:

  • Sending an email to your registered email address
  • Posting a prominent notice on the Service
  • Updating the “Last updated” date at the top of this policy

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or our data practices:

  • Email: support@clutter-ai.com, subject line “Privacy Inquiry”
  • Address: 30 N Gould St Ste N, Sheridan, Wyoming 82801, United States

For payment and subscription inquiries, you can also contact Lemon Squeezy at lemonsqueezy.com/support. See also our Terms of Service and Refund Policy.