Privacy Policy

1. Introduction

Clear Slate, LLC ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Clear Slate service ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, organization details, and profile information
• Authentication Data: Google OAuth credentials and tokens
• Support Tickets: Content of tickets, customer communications, and attachments
• Payment Information: Processed through Stripe (we don't store credit card details)
• Communications: Feedback, support requests, and correspondence with us

2.2 Information Collected Automatically

• Usage Data: Features used, actions taken, time spent, and frequency of use
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Access times, pages viewed, errors encountered, and performance metrics
• Cookies: Session cookies for authentication and preference settings

2.3 Gmail™ Integration Data

When you connect your Gmail™ account, we access:

• Email content for tickets you explicitly create or based on your configured rules
• Email metadata (sender, recipients, subject, timestamps)
• Thread IDs for conversation tracking

We do not access or store emails unrelated to support tickets.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process tickets and manage customer support workflows
• Generate AI-powered suggestions and responses
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Send service-related notifications and updates
• Respond to support requests and feedback
• Monitor and analyze usage patterns and trends
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

4. AI and Third-Party Processing

4.1 OpenAI Integration

We use OpenAI's API to provide AI-powered features. When you use AI features:

• Ticket content may be sent to OpenAI for processing
• We implement content filtering to remove sensitive data where possible
• OpenAI's data usage policies apply to processed content
• AI-generated content is stored in association with your tickets

4.2 Other Third-Party Services

• Supabase: Database and authentication services
• Stripe: Payment processing
• Google: OAuth authentication and Gmail™ API
• DigitalOcean: Infrastructure and hosting

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information:

5.1 Within Your Organization

Information is shared with authorized users within your organization based on their role and permissions.

5.2 With Service Providers

We share information with third-party service providers who assist in operating the Service, subject to confidentiality agreements.

5.3 For Legal Reasons

We may disclose information if required by law, court order, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, information may be transferred to the successor entity.

6. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Regular backups and disaster recovery procedures
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records

When you delete your account, we retain your data for 30 days to allow for recovery, then permanently delete it unless legally required to retain it longer.

8. Your Privacy Rights

8.1 Access and Portability

You can access and export your data through your account settings or by contacting us.

8.2 Correction

You can update your account information at any time through the Service.

8.3 Deletion

You can request deletion of your account and associated data, subject to legal retention requirements.

8.4 Restriction

You can request that we limit processing of your data in certain circumstances.

8.5 Objection

You can object to certain types of processing, such as marketing communications.

9. GDPR Compliance (For EEA Users)

If you are in the European Economic Area, you have additional rights under GDPR:

9.1 Legal Basis for Processing

We process your data based on:

• Contract: To provide the Service you requested
• Legitimate Interests: To improve and secure the Service
• Consent: For marketing communications and optional features
• Legal Obligations: To comply with applicable laws

9.2 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at support@clear-slate.com

9.3 Right to Complain

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at support@clear-slate.com

11. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children under 18. If we learn we have collected information from a child under 18, we will delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients are in countries with adequate data protection laws
• Obtaining your explicit consent where required

13. Cookies and Tracking

13.1 Essential Cookies

We use essential cookies for authentication and to maintain your session.

13.2 Analytics

We may use analytics tools to understand usage patterns and improve the Service. You can opt-out of analytics tracking in your account settings.

13.3 Do Not Track

We currently do not respond to Do Not Track signals as there is no industry standard.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Effective Date" at the top
• Sending an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions about this Privacy Policy or our privacy practices, contact us at: