← Back to Home

Privacy Policy

Last Updated: January 16, 2026

1. Introduction

ClutterAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at app.clutter-ai.com (the "Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (encrypted)
  • Profile information you choose to provide

2.2 Connected Service Data

When you connect third-party services (Google Drive, Gmail, Slack, Calendar, Notion), we collect and store:

  • Files and documents you've granted us access to
  • Email messages and metadata
  • Slack messages and channel information
  • Calendar events and details
  • Notion pages, databases, and workspace content

2.3 Usage Information

We automatically collect:

  • Questions you ask our AI
  • Search queries and interactions
  • Device information and IP address
  • Browser type and operating system
  • Usage statistics and analytics

2.4 Payment and Transaction Information

All payments are processed by Gumroad, which acts as our Merchant of Record.This means Gumroad, not ClutterAI, is the seller of record for all transactions. We do not store your credit card information. Gumroad collects and processes:

  • Payment information (credit/debit card details)
  • Billing address and contact information
  • Transaction history and receipts
  • Tax information (VAT, sales tax, etc.)
  • Purchase metadata

Gumroad's use of your payment information is governed by their Privacy Policy, available at: https://gumroad.com/privacy

We receive limited transaction data from Gumroad (such as your email, subscription status, and purchase date) solely to provide you access to the Service. We do not receive your full payment card details.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process your questions through our AI-powered search engine
  • Index and enable semantic search across your connected content
  • Generate relevant search results using natural language processing
  • Verify subscription status and grant access (via Paddle)
  • Send service updates and support communications
  • Improve our Service and develop new features
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3.1 AI Processing

To provide intelligent search functionality, we process your queries and content using:

  • OpenAI GPT-4: Your search queries are sent to OpenAI to understand intent and generate responses. OpenAI processes queries in accordance with their data usage policies for API customers.
  • Pinecone Vector Database: Your document content is converted to vector embeddings and stored in Pinecone to enable semantic search. This allows you to find information based on meaning, not just keywords.

Important: We do not use your data to train AI models. Your content is processed solely to provide search functionality to you. OpenAI's API does not use customer data submitted via API to train or improve their models. Your content remains private and is only used to answer your specific questions.

4. Data Sharing and Third-Party Service Providers

To provide ClutterAI's functionality, we share your information with trusted third-party service providers. These providers process data only as necessary to deliver our Service and are bound by data processing agreements to protect your information.

4.1 Essential Service Providers

  • Gumroad: Merchant of record for all transactions, payment processing, tax handling, and subscription management. Privacy Policy
  • Convex: Backend database and authentication infrastructure for storing your account data and preferences. Privacy Policy
  • Vercel: Web hosting and deployment platform. Privacy Policy
  • OpenAI: Natural language processing and AI-powered query understanding. Your search queries are sent to OpenAI's API to generate intelligent responses. OpenAI does not use API customer data for training. Privacy Policy
  • Pinecone: Vector database infrastructure for semantic search. Your document content is converted to vector embeddings and stored in Pinecone to enable meaning-based search across your connected services. Privacy Policy

4.2 Data Processing Agreements

We have data processing agreements in place with all service providers listed above to ensure:

  • Your data is processed only for the purposes described in this policy
  • Appropriate security measures are maintained
  • Data is not used for their own purposes or shared with other parties
  • Compliance with applicable data protection regulations (GDPR, CCPA, etc.)

4.3 What We Do NOT Do

We do not:

  • Sell your personal data to third parties
  • Use your data for advertising purposes
  • Share your data with non-essential third parties
  • Train AI models on your private content
  • Allow service providers to use your data for their own purposes

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.5 Legal Basis for Processing (EU/UK Users)

If you are an EU/UK resident, we process personal data on the following legal bases:

  • Contract: To provide the Service and perform our contract with you (account management, subscription access, connected services integration, search functionality).
  • Legitimate Interest: To improve the Service, detect fraud, ensure security, and analyze usage patterns (we balance these interests against your rights).
  • Consent: Where required (e.g., optional marketing communications or explicit opt‑in features). You may withdraw consent at any time.
  • Legal Obligation: To comply with applicable laws and regulations.

4.6 Business Transfers

If ClutterAI is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your personal information.

5. Data Security

We implement industry-standard security measures to protect your information:

  • TLS/SSL encryption for data in transit
  • Encryption at rest for sensitive data
  • Access controls and authentication requirements
  • Regular security audits and monitoring
  • Secure credential storage (passwords are hashed and salted)
  • OAuth tokens encrypted and stored securely

In the event of a data breach affecting personal data, we will notify affected users and regulators as required by applicable law (including within 72 hours for GDPR-covered incidents).

However, no system is 100% secure. While we strive to protect your data using commercially reasonable measures, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 General Rights

Subject to local law, you have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update inaccurate or incomplete information
  • Delete: Request deletion of your account and associated data
  • Restrict Processing: Limit how we use your data
  • Object: Object to processing based on legitimate interests
  • Data Portability: Receive your data in a portable format
  • Withdraw Consent: Withdraw previously given consent
  • Lodge a Complaint: File a complaint with your data protection authority

6.2 How to Exercise Your Rights

To exercise these rights, email support@clutter-ai.com with "Data Request" in the subject line. Include your account email and a description of your request.

We will acknowledge receipt within 5 business days and respond substantively within 30 days (or as required by applicable law). If we cannot comply, we will explain the reasons and any available remedies.

6.3 EU/UK Residents

EU and UK residents may lodge a complaint with their local data protection authority. A list of EU data protection authorities is available at:https://edpb.europa.eu/about-edpb/board/members_en

6.4 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale or sharing of personal information
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

We do not sell or share personal information as defined by the CCPA/CPRA.

To exercise California privacy rights, email support@clutter-ai.com with "California Privacy Request" in the subject line.

6.5 Subscription and Payment Management

For subscription changes, billing questions, or refund requests, please contact Gumroad directly or manage your subscription through your Gumroad account. You can also email us at support@clutter-ai.com and we will assist you.

6.6 Connected Services Management

You can disconnect any integrated service (Gmail, Google Drive, Slack, Calendar, Notion) at any time through your account settings. Disconnecting will:

  • Immediately revoke ClutterAI's access to that service
  • Stop syncing new content from that service
  • Retain previously indexed content for up to 30 days (for data recovery)
  • Permanently delete all associated data after 30 days

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

  • Active Accounts: Data retained while your account is active
  • After Account Deletion: Most data deleted within 30 days; backups purged within 90 days
  • Vector Embeddings: Deleted from Pinecone within 30 days of account deletion
  • Transaction Records: Retained by Gumroad as required for legal, tax, and accounting purposes (typically 7 years)
  • Legal Obligations: Data retained as required by law
  • Aggregated/Anonymized Data: May be retained indefinitely for analytics and service improvement

If you require earlier deletion or a data export, contact support@clutter-ai.com

8. Cookies and Tracking

We use essential cookies necessary for the Service to function:

  • Authentication Cookies: To keep you logged in
  • Session Cookies: To maintain your session and preferences
  • Security Cookies: To detect fraud and abuse

We do not use advertising or third-party tracking cookies.

9. Children's Privacy

The Service is not intended for children under 13 (or 16 in the EU/UK). If you are under the age of consent in your jurisdiction, you must obtain parental consent before using the Service.

If we learn we have collected personal data from a child without appropriate consent, we will delete it promptly. If you believe we may have collected information from a child, please contact us at support@clutter-ai.com

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For transfers from the EEA/UK to countries without adequate data protection laws, we rely on appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other lawful transfer mechanisms under GDPR

You may request a copy of the safeguards in place by contactingsupport@clutter-ai.com

11. Third-Party Services

When you connect third-party services (Google Drive, Gmail, Slack, Calendar, Notion), you are also subject to their respective privacy policies:

We only access data you explicitly authorize through OAuth permissions. You can revoke our access at any time through your account settings or the third-party service directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

  • Sending an email to your registered email address
  • Posting a prominent notice on our Service
  • Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For payment and subscription inquiries, contact Gumroad at:https://gumroad.com/contact