1. About this policy
This policy explains how we handle personal data collected through heyclarus.ai: when you browse the website, complete one of our forms, or use the website assistant. It does not cover the Clarus platform, which has its own privacy notice for customers and their users.
2. Who is responsible for your data
The controller is HeyClarus AG, Mürtschenblick 11, 8863 Buttikon, Switzerland. Our representative in the United Kingdom is HeyClarus.ai Limited, 76 Bridgford Road, West Bridgford, Nottingham, NG2 6AX. For any privacy question or request, email team@heyclarus.ai.
3. What we collect and why
| What | When | Why we use it | Legal basis |
|---|---|---|---|
| Name, work email, company, role, area of interest, how you heard about us, and any message you write | When you complete the Get started form or request our investor deck | To reply to your enquiry, send the information you asked for, and understand where our enquiries come from | Your consent, given by ticking the box on the form, and our legitimate interest in responding to business enquiries |
| A one-way hashed version of your network (IP) address | When you submit a form | To limit repeated submissions from the same network and protect the forms from spam | Our legitimate interest in keeping the website secure |
| The questions you type and the assistant's replies | When you use the website assistant | To generate an answer | Our legitimate interest in answering visitor questions |
| Technical data such as IP address, browser type and pages requested | When you visit the website | To deliver the website, keep it secure and fix errors | Our legitimate interest in running a secure website |
We do not ask for, and ask you not to send us, sensitive information such as details of health, beliefs or ethnicity. We do not use your data for automated decisions that affect you, and we do not sell it.
We will not add you to marketing emails unless you have agreed to receive them. Every marketing email includes a way to unsubscribe.
4. Who we share it with
We share personal data only with service providers that process it on our behalf and under our instructions:
- Lovable hosts the website, serving it from locations around the world, and provides its database, its email service and the connection between the assistant and the AI service. It also provides privacy-friendly visitor statistics that use no cookies.
- Supabase stores form submissions in Ireland (EU), as part of Lovable's hosting.
- OpenAI generates the assistant's replies. We instruct it not to store conversations, and it does not use them to train its models.
- Cloudflare runs the spam check (Turnstile) on our forms.
- Slack notifies our team of new enquiries.
- Lovable's email service sends the confirmation email you receive and our team notifications; Google Workspace hosts our team mailboxes.
We may also disclose data where the law requires it, or to professional advisers bound by confidentiality.
5. International transfers
Form submissions are stored in Ireland, in the EU. Our team works in Switzerland and the United Kingdom, and some of our providers process data in other countries, including the United States. Where data goes to a country without an adequacy decision recognised by Swiss, UK or EU law, we rely on appropriate safeguards such as standard contractual clauses. Ask us for details at team@heyclarus.ai.
6. How long we keep it
| Data | How long |
|---|---|
| Enquiries and deck requests | 24 months after our last contact with you, unless you become a customer, when our customer agreement applies |
| Hashed network address | 30 days |
| Assistant conversations | We do not store them, and we instruct the AI service not to. Our hosting provider, Lovable, keeps a short technical record of each request for a limited period for operational and security purposes, and does not use it to train AI models |
| Technical and security logs | 30 days, unless needed to investigate a security incident |
7. How we protect it
We use providers with recognised security standards, encrypt data in transit, and limit access to the people in our team who need it to respond to you.
8. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to someone else. Where we rely on your consent, you can withdraw it at any time. To make a request, email team@heyclarus.ai. We will reply within one month.
You can also complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the UK, the Information Commissioner's Office (ICO); in the EU, the authority in your country. We would appreciate the chance to resolve your concern first.
9. Cookies
The website sets no cookies. It stores two small items in your browser: your scroll position on a page (cleared when you close the tab) and, on pages with a form, an item from Cloudflare's spam check. Our Cookie Policy gives the details.
10. Children
The website is intended for business users and is not directed at anyone under 18.
11. Changes to this policy
We will post any changes on this page and update the date at the top.