1. Information we collect
When you use our website, particularly when you submit information through our Join Waitlist form, we may collect:
- Personal information: such as your name and email address.
- Automatically collected information: like your IP address, browser type, operating system, and general website usage data (via cookies or similar technologies).
We do not collect sensitive personal information unless you voluntarily provide it.
2. How we use your information
We may use the information we collect to:
- Add you to our waitlist and keep you informed about updates.
- Respond to your inquiries and requests.
- Improve and personalize your experience on our website.
- Send you promotional or informational communications (you can opt out at any time).
- Ensure compliance with legal obligations.
We may also use your information to communicate with you — to provide you with customer support; to communicate with you about our products and services, including promotions and offers; or to send you further notices, financial news notifications, promotions, solicitations, brochures, or other marketing materials regarding our sites, our products, and the services of our businesses, affiliates, business partners, or authorized dealers.
3. Cookies and tracking technologies
We may use cookies or similar technologies to:
- Analyze how visitors use our website.
- Improve website functionality and user experience.
- Deliver relevant communications.
You can disable cookies in your browser settings, but some features of the website may not function properly.
4. Sharing of information
We may share your information with:
- Service providers: third-party vendors who help us operate our website or send communications.
- Legal compliance: if required by law or to protect our rights, safety, or property.
We do not share your personal information with advertisers or marketers without your consent.
5. Text messaging (SMS)
Information we collect for SMS: When you opt in to our text messaging program, we collect your mobile phone number and a record of your consent to receive messages.
How we use SMS information: We use your mobile number solely to send the text messages you have opted in to receive, such as account notifications, transaction updates, follow-ups, and related service communications.
Message frequency and rates: Message frequency varies. Message and data rates may apply.
Opting out: You can opt out of SMS messages at any time by replying STOP to any message. For help, reply HELP or contact us at legal@goclai.com.
6. Data security
We implement reasonable technical and organizational measures to protect your information. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
7. Your rights and choices
- Access & correction: You may request access to or correction of the personal information we hold about you.
- Opt-out: You can unsubscribe from our emails at any time by following the link provided in the message or contacting us directly.
- Do Not Track: Our website does not currently respond to "Do Not Track" signals.
8. Google user data
This section applies to information Clai receives from Google APIs. The Calendar disclosures below describe the calendar features; they do not authorize access to Google Drive, Google Docs, or Gmail. If this section conflicts with any other section of this policy, this section controls.
What we access: the list of calendars you subscribe to, your calendar settings (such as timezone), free/busy availability, and the events on calendars you can view or edit.
How we use it: only to provide the calendar features you use in Clai: showing your agenda, letting you choose which calendar new events are saved to, finding open time slots, and creating, updating or deleting events when you ask Clai to. We do not use Google user data for advertising, marketing, or promotional messages, and we do not use it to build user profiles or determine credit-worthiness.
Main-app Calendar storage: for the Clai Calendar integration connected through Nango, event content is read from Google when you view your calendar and is not stored in our database. We store your calendar preferences (for example, which calendars to show) and the OAuth tokens needed to keep your account connected. Tokens for that integration are encrypted and held by Nango.
Website booking calendars: the website’s separate host-calendar connection accesses your Google account email and primary-calendar free/busy availability, and creates, updates, or cancels booking events and invites attendees. For this connection, Clai stores an encrypted refresh token directly, keeps access tokens and short-lived availability data in memory, and stores booking records, Google event identifiers, and generated meeting links. This is separate from the Nango-connected Calendar integration.
Sharing: we do not sell Google user data or share it with advertisers or data brokers. We transfer it only as needed to provide the disclosed user-facing features with your consent, including to service providers operating those features on our behalf; for necessary security purposes; as required by law; or as part of a merger, acquisition, or sale of assets only after obtaining your explicit prior consent. These restrictions also apply to information derived from Google user data.
AI/ML: Clai does not use Google Workspace API user data to develop, improve, or train generalized AI or machine learning models.
Human access: no one at Clai reads your Google data unless you give us explicit permission (for example, for a support request), it is needed for security purposes, or the law requires it.
Retention and deletion: you can disconnect the Nango-connected Google Calendar in Clai settings, which deletes its stored tokens and calendar preferences, or revoke Google access at myaccount.google.com/permissions. Website booking hosts can disconnect in the admin Calendars page; this removes the stored refresh token and connected-account email, clears the access-token cache, and requests revocation at Google. Disconnecting a booking calendar does not delete existing booking records or events already created in Google. To request deletion of retained Clai data, email legal@goclai.com.
Limited Use: Clai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Connected services and account permissions
Permissions and choice: connecting an account is optional. Review the permissions shown by the provider before authorizing access. Signing in with a provider does not by itself authorize Clai to access its documents, email, or calendars. Additional access requires the permissions needed for the feature you choose.
Website onboarding: when you connect Google or Microsoft during website onboarding, we use account identity information to associate the connection with your onboarding record. We store the connected email, granted scopes, connection status, and an encrypted refresh token. These onboarding connections request identity permissions, not Google Drive/Docs, Gmail, Outlook mail, or Outlook calendar permissions.
Documents, imports, and AI: importing a file into Clai is different from viewing a calendar. Disconnecting the source account does not by itself delete a copy you have imported, a deal record created from it, or derived information. Before using a connected-document or AI-processing feature, review its in-product disclosure for the information accessed, the processing performed, any service providers receiving content, and retention and deletion details. Permission to process content for a requested feature is not permission to train generalized AI models on Google Workspace API data.
Apple accounts: Sign in with Apple is distinct from authorization to access iCloud data. Where an iCloud connection is offered, follow the supported Apple authorization flow or use an app-specific password, never your primary Apple Account password. You can remove account-data sharing access or revoke an app-specific password in your Apple Account settings. See Apple’s third-party access instructions.
Microsoft accounts: your organization may require administrator approval for a connection. You can review or revoke work or school app permissions through Microsoft My Apps, subject to your organization’s policies, or personal-account permissions through Microsoft account consent settings. Removing access stops future authorized access but does not automatically erase data previously imported into Clai.
Deletion requests: contact legal@goclai.com to request deletion of retained account information, imported content, or derived records. Identify the connected service and the data you want removed; do not send passwords or access tokens. We may need to verify your authority to request deletion. Any required retention for legal obligations, security, or dispute resolution will be explained when responding to your request.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the "Effective Date" above and post the revised policy on our website.
11. Contact us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Clai
Email: legal@goclai.com
For the agreement that governs your use of the product, see our Terms of Service.