Privacy rights vary by location. Select your country or region:
AIClearline

Privacy Policy

Last updated: September 3, 2026

1. Who We Are

AIClearline is a human-led communication assurance system for organizational communications. It uses AI to read the information you supply, challenge an Approved Position from relevant audience perspectives, and prepare checked drafts for your review. This policy explains what information we collect, how we use it, and your rights regarding it.

Contact: hello@aiclearline.com

2. Information We Collect

Account information

Your first and last name, email address, and organization name when you create an account. You may optionally provide your job title, country, and the type of situation you're planning for, which we use to understand who our customers are and to tailor onboarding.

Enterprise access and invitations

An Enterprise organization has up to five named practitioner seats, including the owner. We store each practitioner's name, work email, role, organization membership, and access status. For a pending invitation, we store the invited email address, who issued the invitation, and its creation and expiry times. We use SendGrid to send the invitation email. Invitations are single-use and must be accepted by the invited email address while Enterprise billing is active.

When an authenticated named Enterprise member opens a program, we retain a security audit record of the member account, organization, program identifier, access action, and time. This access record has no additional metadata: it does not contain passwords, link tokens, program content, IP addresses, or device fingerprints.

Enterprise enquiries

If you contact us about Enterprise, we collect your name, work email, organization name, role, organization size range, expected practitioner seat range, and purchasing timeframe. We ask you not to provide employee names, live cases, confidential plans, or situation details. We store the enquiry in our database and use SendGrid to alert our sales inbox. If the alert fails, the enquiry remains stored for follow-up.

Signup and marketing attribution

When you create an account we record how you reached us: campaign tags in the link you arrived from (UTM parameters), the referring website, the page you first landed on, and the page you signed up from. We also record the IP address and browser user-agent at the moment of signup. We use this to understand which channels bring us customers and to help detect fraudulent or automated signups.

Consent records

When you accept our Terms of Service and Privacy Policy, and when you choose whether or not to receive marketing emails, we store a record of each decision, including the exact wording shown to you, the version of that wording, and the time it was made. We keep these records (including a choice to decline marketing) so we can demonstrate what you agreed to and honor your preferences.

Program content

The situation descriptions you write, and the outputs the system generates: Approved Positions, stress test results, communication assets, commitments, and measurement signals. This content is stored so you can access and manage your programs over time. In an Enterprise workspace, program content and organizational memory belong to the organization and can be accessed by its named practitioners according to their roles; they are not private to the practitioner who created them.

Testimonials (voluntary)

If you choose to submit a testimonial, we collect: a star rating, a written response, and optionally your job title, sector, organization size band, and a display name. This data is submitted entirely voluntarily. If you consent to publication, approved testimonials are displayed publicly on aiclearline.com/testimonials. Your company name is never shown. If you do not consent, your response is stored privately and used only as internal product feedback. You can request removal of a published testimonial at any time by emailing hello@aiclearline.com.

Payment information

Subscription payments are processed by Stripe. We receive confirmation of payment and your subscription status. We do not store your card number, expiry date, or CVV on our servers.

Technical logs

Server-side error logs and request logs to diagnose technical issues and maintain service reliability.

Session information

We use server-side sessions (stored securely in our database) to keep you logged in. These essential session cookies are always required.

Analytics (with your consent)

With your consent, we use Google Analytics 4 (a third-party analytics service provided by Google) to understand aggregate product usage, such as which pages are visited, so we can improve the service. According to Google, Google Analytics 4 does not log or store your IP address. We also use a limited first-party count to understand how many relevant visitors use AIClearline in each week. Your browser creates a random identifier and sends only that identifier at most once per ISO UTC week. We immediately convert it into a one-way, week-specific digest and do not store the identifier itself or request metadata in the measurement table. This first-party measurement does not collect URLs, referrers, IP addresses, user agents, email addresses, names, device fingerprints, program text, or finding text.

Both forms of analytics start only after you choose Accept analytics in the cookie banner. If you decline, Google Analytics is not loaded, no analytics cookies are set, and the first-party count is not sent. The product works fully without analytics. Google processes its analytics data on our behalf under its own privacy policy. Our Google Analytics property is configured to retain user and event data for two months, without restarting that period when a user returns. First-party weekly digest records are retained for 90 days and then deleted. You can change or withdraw your consent at any time using the Cookie preferences control below, also available in the footer of our website. If you withdraw consent after previously accepting, we immediately stop new first-party measurement requests, remove the anonymous browser identifier, and stop sending data to Google. Analytics cookies already set remain until they expire or you clear them.

3. How We Use Your Information

  • To create and maintain your account
  • To generate communication outputs using Claude (Anthropic's AI model), passing only the content necessary for each request
  • To process your subscription payments through Stripe
  • To assess and respond to Enterprise enquiries. This contact is limited to the enquiry unless you separately opt in to marketing.
  • To allocate Enterprise seats, send and administer practitioner invitations, apply role-based access, and remove access when the organization owner offboards a practitioner
  • To send transactional emails (welcome, password reset, email verification, commitment digests) through SendGrid: these are essential to your account and cannot be opted out of while your account is active
  • Where you opt in, to send product and marketing emails (onboarding tips, a short welcome series, and occasional product updates) through SendGrid. You choose whether to receive these when you create your account, you can change the setting at any time in Settings, and every such email includes a one-click unsubscribe link. Withdrawing consent stops these emails but not essential account emails.
  • To collect and, where consent is given, publish testimonials on our public testimonials page
  • To attribute referrals: if you arrive through a referral link shared by an existing user, we record which organization referred you so we can understand how AIClearline spreads. No payment, discount, or material reward is offered for referring or being referred.
  • To enforce subscription entitlements, including the number of active programs and named Enterprise seats
  • To diagnose technical issues and maintain service reliability
  • Where you consent, to measure aggregate product usage through Google Analytics and a limited first-party weekly visitor count so we can improve the service

4. AI Processing

When you use AIClearline, your program content (situation descriptions, documents you upload as context, Approved Positions, and related context) is sent to Anthropic's Claude API to generate outputs. Anthropic processes this content under their own privacy policy.

We do not use your content to train AI models. Anthropic's API usage policies also prohibit using API data to train models without consent.

Does Claude add a watermark to AIClearline outputs?

An AIClearline output may carry Anthropic's machine-readable text watermark when it is generated by a Claude model that supports marking. Anthropic says this is an imperceptible statistical pattern created through word selection, not hidden characters or information added to the text. It does not identify you, your organization, your account, or a particular request, and Anthropic says it does not change the meaning, quality, or readability of the output.

A detected mark may indicate that Claude processed the text, but it does not prove that Claude originated every word, idea, or fact. A missing mark does not prove that AI was not used. Short passages, editing, translation, excerpts, or combining the output with other writing can affect whether a mark can be detected.

AIClearline does not add a separate text watermark and does not attempt to remove Anthropic's mark. You remain responsible for reviewing, approving, and adapting outputs before use. You can read Anthropic's explanation of how Claude's text watermark works.

5. Third-Party Services

  • Anthropic: AI model provider. Receives program content for processing.
  • Stripe: Payment processor. Handles all billing transactions.
  • SendGrid: Email delivery. Sends transactional emails, Enterprise invitation emails, Enterprise enquiry alerts to our sales inbox, and (where you have opted in) product and marketing emails on our behalf.
  • Neon (PostgreSQL): Database hosting. Stores your account data and program content.
  • Google (Analytics): Aggregate product and website analytics. Only receives data if you accept analytics in the cookie banner; nothing is sent to Google if you decline.

We do not sell your personal information to any third party.

6. Data Retention

We retain account and program data while the account and organization workspace remain open; ending a paid subscription does not automatically delete those records. Temporary operational records and first-party weekly visitor digests are limited to 90 days, while email-delivery and product-feedback metadata are limited to 12 months. A weekly visitor digest cannot be linked back to an account or recovered to reveal the browser identifier. It therefore cannot be located for individual export or deletion; erasure removes account-linked data, while these unlinkable measurement records, used only for aggregate reporting, expire under their 90-day schedule. Minimal consent, audit, retention-review, and deletion evidence may be kept for up to 7 years where needed to demonstrate lawful operation or honor a legal obligation; organization-associated records are still removed earlier when the organization is validly erased, while detached deletion receipts contain no customer content or direct identifiers. Evidence records that include customer content remain part of the workspace and are not aged out separately. We retain Enterprise enquiry details for 12 months after receipt. If a sales conversation is still active, a verified platform administrator may extend that period by another 12 months and must record why the information is still needed. When an eligible owner deletes a single-member organization in Settings, its application data is removed from our database as part of that process. An Enterprise owner must remove the other named practitioners before deleting the shared organization. Other registry retention periods are currently used for review and dry-run reporting only; no general automatic customer-data deletion job is enabled. The separate Enterprise enquiry cleanup process remains outside that general engine. For an emailed privacy request, we respond within 30 days and delete or provide data as required by applicable law, subject to legal, financial, and other organization members' rights.

7. Security

We protect your data with:

  • Passwords hashed using bcrypt before storage
  • All data transmitted over HTTPS/TLS
  • Session tokens stored server-side, not in client-readable cookies
  • Organization-level data isolation: users can only access data in their own organization, subject to role-based permissions
  • Enterprise owner controls for named invitations, role changes, immediate offboarding, and a fixed five-seat limit

No method of transmission over the internet is 100% secure. If we become aware of a security breach affecting your personal data, we will notify you and any applicable supervisory authority without undue delay and within any timeframes required by law.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request a copy of all the data we hold about you, in a portable format
  • Correct inaccurate data
  • Request deletion ("erasure") of your account and all associated data
  • Export your program content
  • Opt out of non-transactional communications

We extend these baseline rights to every user worldwide, regardless of location. If your country or region does not have a dedicated section in this policy, this global policy applies to you in full.

To exercise any of these rights, email hello@aiclearline.com. We will respond within 30 days. The owner of a single-member organization can also delete it directly in Settings. An Enterprise owner must remove the other named practitioners first because deletion removes the shared workspace for everyone. Deleted database records may remain temporarily recoverable within our Replit-managed 28-day database recovery window before they age out of that recovery history. Third-party processors may retain records they are legally required to keep (for example, payment transaction records held by Stripe for financial-compliance periods), and our AI provider retains API inputs and outputs for up to 30 days before automatic deletion.

Where your current product entitlement permits in-product export, go to Settings → Data & privacy → Export your data. Your right to request a portable copy of applicable personal data by email is not limited by your subscription status.

California residents have additional rights under the CCPA, including the right to know what categories of personal information we collect and the right to non-discrimination for exercising privacy rights.

9. EU and UK Users: GDPR

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data.

Legal basis for processing: We process your personal data on the following grounds:

  • Contract performance: to deliver the service you have subscribed to.
  • Legitimate interests: to maintain security, diagnose technical issues, and prevent fraud.
  • Legal obligation: where processing is required to comply with applicable law.
  • Consent: for optional analytics, including Google Analytics cookies and our limited first-party weekly visitor count, and for the collection and publication of testimonials. You may withdraw analytics consent at any time using the Cookie preferences control, and withdraw testimonial consent by emailing hello@aiclearline.com, after which we will remove the published testimonial promptly.

Data transfers: Your data is stored on servers located in the United States. Where we transfer personal data from the EU or UK to the US (including, where you have consented, analytics data processed by Google) we rely on standard contractual clauses or equivalent safeguards approved by the relevant supervisory authority.

Your GDPR rights include: the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20), and the right to object (Article 21). To exercise these rights, email hello@aiclearline.com.

Right to lodge a complaint: You have the right to lodge a complaint with your national supervisory authority. In the EU this is your local Data Protection Authority; in the UK this is the Information Commissioner's Office (ICO) at ico.org.uk.

10. Australian Users: Privacy Act 1988

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our handling of your personal information.

Under the APPs, you have the right to:

  • Know why we collect your personal information and how we use it
  • Access the personal information we hold about you
  • Request correction of inaccurate, out-of-date, or incomplete information
  • Make a complaint about a breach of the APPs
  • Request deletion of your account and associated data: a baseline right we extend to all users worldwide (see Section 8)

To exercise any of these rights, email hello@aiclearline.com. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to This Policy

We may update this policy from time to time. We will notify you by email of any material changes before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

12. Contact

Privacy questions: hello@aiclearline.com

Terms of Service · Refund Policy · Security · Home