Skip to main content
    clarier.ai

    Privacy Policy

    Effective Date: March 1, 2026

    Last Updated: March 20, 2026

    Clarier Technologies, LLC ("Clarier," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website (clarier.ai), use our platform, or interact with our services. This Privacy Policy describes how we collect, use, disclose, and protect personal information.

    This Privacy Policy applies to: (a) visitors to our website; (b) individuals who register for or use the Clarier platform; (c) individuals who participate in our events, webinars, or assessments; and (d) individuals whose information is submitted to the platform by our customers.

    1. Information We Collect

    1.1 Information You Provide

    Account and Profile Information. When you create an account or are invited to a Clarier workspace, we collect your name, email address, job title, organization name, and role within the platform (admin, editor, or viewer).

    Assessment and Onboarding Data. When you complete an AI readiness maturity assessment or onboarding questionnaire, we collect your responses, organizational details, and AI program information.

    Communications. When you contact us, book a call, submit a support request, or communicate with your assigned analyst, we collect the content of those communications, including email messages, Slack messages, and meeting notes.

    Billing Information. When you subscribe to a paid plan, we collect billing contact details and payment information. Payment processing is handled by third-party processors; we do not store full credit card numbers on our systems.

    Event and Webinar Registration. When you register for an event, webinar, or survey, we collect your name, email, organization, title, and any responses you submit.

    1.2 Information Collected Through the Platform

    Customer Data. Our customers submit data to the platform in the course of using the Service, including AI tool inventories, vendor information, policy documents, approval workflow data, risk assessment inputs, and configuration settings. We process Customer Data on behalf of our customers as described in Section 4 below.

    Usage Data. We automatically collect information about how the platform is accessed and used, including login timestamps, features accessed, pages viewed, actions taken, browser type, device information, and IP address.

    1.3 Information from Third Parties

    Enrichment Data. We may supplement account information with publicly available business data (such as company size, industry, and location) from third-party data providers to improve the relevance of our service.

    Referrals and Introductions. If someone refers you to Clarier or introduces you through a professional network, we may receive your name, email, and organization before you interact with us directly.

    2. How We Use Information

    We use personal information for the following purposes:

    • Providing the Service. To operate the platform, deliver managed services, perform vendor assessments, generate reports, and provide analyst support.
    • Account Management. To create and manage accounts, authenticate users, enforce role-based access, and communicate about account activity.
    • Billing and Payments. To process payments, send invoices, and manage subscriptions.
    • Communications. To respond to inquiries, provide support, send service-related notifications, and communicate about product updates or changes.
    • Product Improvement. To understand how the Service is used, identify issues, develop new features, and improve the platform experience.
    • Security. To detect and prevent fraud, unauthorized access, and other security threats, and to maintain audit logs as required.
    • Analytics and Benchmarking. To produce aggregated, de-identified insights about AI adoption trends, risk patterns, and program maturity across our customer base. These insights never identify any individual or specific organization.
    • Marketing. To send information about Clarier's products, events, and content that may be relevant to you. You may opt out of marketing communications at any time.
    • Legal Compliance. To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

    3. How We Share Information

    We do not sell personal information. We share personal information only in the following circumstances:

    Service Providers. We share information with third-party service providers who assist us in operating the Service, including cloud hosting, email delivery, payment processing, analytics, and customer support tools. These providers are contractually obligated to use personal information only for the purposes of providing services to Clarier and to maintain appropriate security measures.

    Analyst Services. Where Customer's plan includes managed services, Clarier analysts access Customer Data to perform vendor assessments, prepare reports, and provide advisory support. Analyst access is governed by Clarier's internal access controls and confidentiality obligations.

    Aggregated Data. We may share aggregated, de-identified data that does not identify any individual or organization for purposes including research, benchmarking, and thought leadership.

    Legal Requirements. We may disclose personal information if required by law, regulation, court order, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

    Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before personal information becomes subject to a different privacy policy.

    With Consent. We may share personal information with your consent or at your direction.

    4. Customer Data and Data Processing

    4.1 Customer as Controller

    When our customers submit data to the Clarier platform — including information about their employees, AI tools, vendors, and policies — the customer acts as the data controller and Clarier acts as the data processor.

    4.2 No Sale of Customer Data

    We do not sell Customer Data. We do not use Customer Data for advertising purposes. We do not share Customer Data with third parties for their own marketing purposes.

    4.3 Data Processing Agreement

    Customers who require a formal Data Processing Agreement may request one from legal@clarier.ai. The DPA governs Clarier's processing of personal data on behalf of the customer and supplements these Terms.

    4.4 Subprocessors

    We use third-party subprocessors to help deliver the Service. A current list of subprocessors is available upon request. We evaluate the security and privacy practices of subprocessors before engagement and require contractual protections for any personal data they process.

    5. Data Security

    We maintain administrative, technical, and physical safeguards designed to protect personal information, including:

    • Encryption. AES-256 encryption at rest and TLS 1.3 encryption in transit.
    • Access Controls. Role-based access control (RBAC), single sign-on (SSO) support, and multi-factor authentication (MFA).
    • Tenant Isolation. Full multi-tenant isolation ensures each customer's data is logically separated.
    • Data Hosting. All data is hosted in the United States.
    • Audit Logging. Immutable audit logs record all significant platform actions.
    • Penetration Testing. The platform is independently penetration tested.
    • Employee Access. Access to personal information is limited to Clarier personnel who require it to perform their job functions, and who are subject to confidentiality obligations.

    While we implement and maintain reasonable security measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

    6. Data Retention

    We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

    • Account Data. Retained for the duration of the customer relationship and for a reasonable period thereafter for legal and business purposes.
    • Customer Data. Upon termination of a customer engagement, Customer Data is available for export for thirty (30) days. After that period, Customer Data is deleted in accordance with our data retention policies.
    • Usage Data. Retained in identifiable form for up to twenty-four (24) months, after which it is aggregated or deleted.
    • Marketing Data. Retained until you opt out of marketing communications or request deletion.

    7. Your Rights and Choices

    7.1 Access and Correction

    You may access and update your account information by logging into the platform or by contacting us at privacy@clarier.ai.

    7.2 Deletion

    You may request deletion of your personal information by contacting us at privacy@clarier.ai. We will comply with your request subject to applicable legal retention requirements. For Customer Data, deletion requests should be directed to your organization's Clarier administrator.

    7.3 Marketing Opt-Out

    You may opt out of marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us at privacy@clarier.ai. Opting out of marketing does not affect service-related communications.

    7.4 Data Portability

    You may request a copy of your personal information in a structured, machine-readable format by contacting us at privacy@clarier.ai.

    7.5 Rights Under Specific Laws

    Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including the right to restrict processing, the right to object to processing, and the right to lodge a complaint with a supervisory authority. See Section 9 for jurisdiction-specific disclosures.

    8. Cookies and Tracking

    8.1 Cookies

    Our website uses cookies and similar technologies to enable functionality, analyze usage, and improve the user experience. Categories of cookies we use include:

    • Essential Cookies. Required for the website and platform to function (e.g., authentication, session management). Cannot be disabled.
    • Analytics Cookies. Help us understand how visitors interact with our website and platform. We use these to improve our service.
    • Marketing Cookies. Used to deliver relevant advertisements and measure campaign effectiveness. These are only set with your consent.

    8.2 Cookie Preferences

    You can manage your cookie preferences through our cookie banner or through your browser settings. Disabling certain cookies may affect website functionality.

    8.3 Do Not Track

    We do not currently respond to "Do Not Track" browser signals, as there is no industry-standard approach to this feature.

    9. Jurisdiction-Specific Disclosures

    9.1 California Residents (CCPA/CPRA)

    If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used; (b) request deletion of your personal information; (c) opt out of the sale or sharing of your personal information (we do not sell personal information); and (d) not be discriminated against for exercising your rights. To exercise these rights, contact privacy@clarier.ai.

    9.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

    If you are located in the EEA, UK, or Switzerland, our legal bases for processing personal information include: (a) performance of a contract; (b) legitimate interests (such as operating and improving our service); (c) compliance with legal obligations; and (d) your consent, where applicable. You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal information. To exercise these rights, contact privacy@clarier.ai.

    For transfers of personal data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

    9.3 Florida Residents

    If you are a Florida resident and the Florida Digital Bill of Rights applies to our processing of your personal information, you may have additional rights including the right to access, correct, delete, and opt out of certain processing activities. To exercise these rights, contact privacy@clarier.ai.

    10. Third-Party Services

    The Service may contain links to or integrations with third-party services (such as identity providers, SASE tools, or LLMOps platforms) that are not operated by Clarier. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you connect to the Clarier platform.

    11. Children's Privacy

    The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it.

    12. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on our website and, for customers, by email notification at least thirty (30) days before the changes take effect. Your continued use of the Service after the effective date of changes constitutes acceptance.

    13. Contact

    For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:

    Clarier Technologies, LLC
    Email: privacy@clarier.ai
    Web: clarier.ai