Privacy Policy
Last Updated: December 3, 2025
1. Introduction
ClutterAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at app.clutter-ai.com (the "Service").
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name
- Password (encrypted)
- Profile information you choose to provide
2.2 Connected Service Data
When you connect third-party services (Google Drive, Gmail, Slack, Calendar), we collect and store:
- Files and documents you've granted us access to
- Email messages and metadata
- Slack messages and channel information
- Calendar events and details
2.3 Usage Information
We automatically collect:
- Questions you ask our AI
- Search queries and interactions
- Device information and IP address
- Browser type and operating system
- Usage statistics and analytics
2.4 Payment Information
Payment processing is handled by Paddle, our third-party payment processor.We do not store your credit card information. Paddle collects and processes:
- Credit/debit card information
- Billing address
- Transaction history
Paddle's use of your payment information is governed by their Privacy Policy, available at: https://www.paddle.com/legal/privacy
3. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Process your questions through our AI engine
- Index and search your connected content
- Process payments and manage subscriptions (via Paddle)
- Send service updates and support communications
- Improve our Service and develop new features
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do NOT use your data to train AI models. Your content remains private and is only used to answer your specific questions.
4. Data Sharing and Disclosure
We share your information only in these circumstances:
4.1 Service Providers
- Paddle: Payment processing and merchant of record
- Convex: Database and backend infrastructure
- Vercel: Hosting and deployment
- OpenAI: AI processing (prompts only, not stored content)
- Pinecone: Vector search infrastructure
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request.
4.3 Legal Basis for ProcessingIf you are an EU/UK resident, we process personal data on the following legal bases:
- Contract:to provide the Service and perform our contract with you (account management, billing, access to connected services).
- Legitimate interest:to improve the Service, detect fraud, and ensure security (we balance these interests against your rights).
- Consent:where required (e.g., optional marketing communications or explicit opt‑in features). You may withdraw consent at any time where processing is based on consent.
If you are an EU/UK resident, we process personal data on the following legal bases:
4.4 Business Transfers
If ClutterAI is acquired or merged with another company, your information may be transferred as part of that transaction.
5. Data Security
We implement reasonable administrative, technical, and physical safeguards such as TLS in transit, encryption at rest, access controls, and regular security reviews. In the event of a data breach affecting personal data, we will notify affected users and regulators as required by law and, where applicable, within 72 hours of becoming aware of the breach.
However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights and Choices
You have the right to:
Subject to local law, you have the right to: access, correct, delete, restrict processing, object to processing, receive a portable copy, and lodge a complaint with a supervisory authority. To exercise these rights, email support@clutter-ai.com with "Data Request" in the subject and include your account email and a description of the request. We will acknowledge receipt within 5 business days and respond substantively within 30 days (or as required by applicable law). If we cannot comply, we will explain the reasons and any available remedies. EU/UK residents may also lodge a complaint with their local data protection authority.
If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information as defined by the CCPA. To exercise California privacy rights, email support@clutter‑ai.com with "California Privacy Request."
7. Data Retention
We retain account data while your account is active. After account deletion or refund, we retain data for 30 days for recovery and fraud prevention and purge backups within 90 days, except for transaction records required for legal or tax purposes (retained by Paddle). We may retain aggregated or anonymized data indefinitely. If you require earlier deletion or an export, contact support@clutter-ai.com
8. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
9. Children's Privacy
The Service is not intended for children under 13. If you are under the age of consent in your jurisdiction (for example, 16 in some EU countries), you must obtain parental consent before using the Service. If we learn we have collected personal data from a child without consent, we will delete it.
10. International Data Transfers
Your data may be transferred to and processed in the United States and other countries. Where transfers occur from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms. You may request a copy of the safeguards by contacting support@clutter‑ai.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or a notice on our Service.
12. Contact Us
If you have questions about this Privacy Policy, contact us at:
- Email: support@clutter-ai.com
- Website: clutter-ai.com/contact