Clarity AI is the operating brand of Codewerx LLC, a US software firm operating since 2014. This policy explains what information we collect, how we use it, who we share it with, and the choices you have. Where the law gives you a specific right, we say so and tell you how to use it.
1 Who this applies to
This policy covers personal information we process about visitors to our website, people who contact us, and the operators, administrators, and end users of customer organizations that license our software.
When we process personal information on behalf of a customer organization - inside the deployed software - we act as a processor and the customer is the controller. The terms of that processing are set out in our Data Processing Agreement.
2 Information we collect
You give us. Name, business email, company, and anything you include in a message or booking request. If you apply for a role, the contents of your application.
We collect automatically. Standard server and browser metadata when you visit the site: IP address, user agent, referring page, pages requested, and timestamps. We use essential cookies plus two analytics tools - Google Analytics for aggregate traffic measurement, and Microsoft Clarity for anonymized session replay and heatmaps that show us where the site confuses people. Clarity masks what you type into forms. Neither one loads unless you accept in the cookie banner, and if you accept and later decline, we stop them immediately and delete the cookies they set on our own domain. Microsoft Clarity also sets cookies on clarity.ms and bing.com, some of which Microsoft uses for advertising; those belong to Microsoft rather than to us, so we cannot delete them on your behalf, which is why we do not load Clarity at all until you accept. We do not run advertising trackers of our own, we do not retarget you, and we do not sell personal information.
How you found us. On your first visit we store one first-party cookie (clarity_attr) recording the page you landed on, the referring site, and any campaign parameters in the link you followed. It is kept for 180 days, it records only that first visit and is never overwritten, and it is attached to a contact or booking form if you submit one, so that we know where an enquiry came from and can reply in context. It is first-party only, it is never shared with or sold to anyone, and it is not used to build an advertising profile or to follow you across other websites.
Customer data inside the product. Content provided by a customer organization through the deployed software is governed by the agreement with that customer, not by this policy. See the DPA for details.
3 How we use it
- To respond to inquiries, run sales conversations, and schedule calls.
- To deliver, support, and improve the software you license from us.
- To send service announcements (these are not marketing emails).
- To meet legal, accounting, and security obligations.
- To detect and prevent abuse, fraud, and unauthorized access.
We do not sell personal information, and we do not use customer data to train third-party models. Our standard inference contracts include zero-retention terms with our model providers.
5 Sub-processors
A sub-processor is a vendor we engage to process customer data on a customer's behalf. We publish that list in exactly one place - Annex B of our Data Processing Agreement - so it cannot fall out of step with what we say anywhere else. Adding one requires advance notice to customers under that agreement.
We use other vendors that never receive customer data - source control, security compliance tooling, internal engineering tools, and the website analytics described in section 2. Those are not sub-processors. We are happy to walk through them under NDA on request.
6 How long we keep it
We retain personal information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention windows: 90 days for server logs, the duration of the customer relationship plus 12 months for account records, and seven years for tax and accounting records as required by US law.
7 Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. To change or withdraw your cookie choice, delete the clarity_cookie_consent cookie in your browser and reload the page; the banner will ask again. Email us at the address below if you would rather we handled it for you. California residents have additional rights under the CCPA/CPRA, including the right to know what we collect, to delete it, to correct inaccuracies, and to opt out of any sale or sharing (we do not sell or share personal information for cross-context behavioral advertising).
To exercise any of these rights, email privacy@gainclarity.ai. We will respond within 30 days and may need to verify your identity before acting.
8 International transfers
Our infrastructure and our team are based in the United States. If you are outside the US, your information will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
9 Security
We maintain administrative, technical, and physical safeguards designed to protect personal information. Our SOC 2 Type II readiness program is underway - the control framework is being implemented, with auditor engagement to follow. Additional operational security documentation and deployment controls are available under NDA. No system is perfectly secure - if you discover a vulnerability, please report it to security@gainclarity.ai.
10 Children
Our products and website are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11 Changes to this policy
We may update this policy from time to time. Material changes will be flagged at the top of this page and, for customers, communicated through the channel set out in their agreement. The "last updated" date above always reflects the current version.
12 Contact
Privacy questions and rights requests: privacy@gainclarity.ai. Security disclosures: security@gainclarity.ai. Anything else: hello@gainclarity.ai.
Codewerx LLC, DBA Clarity AI