Privacy Policy

Last updated: June 2026

1. Who We Are

Clarion AI is operated by ClearConsent DataSec Private Limited, a company registered in India. We provide AI trust labeling, PII detection, and compliance analysis services.

2. Data We Collect

Data Type	Purpose	Retention
Email, name	Account creation, communication	Until account deletion
Password (bcrypt hash)	Authentication	Until account deletion
API usage logs	Billing, rate limiting, analytics	Per plan (7–365 days)
Payment info	Subscription billing via Razorpay	Managed by Razorpay
IP address	Rate limiting, security	Not logged permanently

3. Data We Do NOT Collect

Your AI prompts and responses — We do not store the text you submit for analysis beyond the current request processing. Conversation history is session-scoped.
PII detected in your text — PII detection happens in-memory and results are returned to you without storage.
BYOK API keys in plaintext — User-provided API keys are encrypted at rest using AES-256.

4. How We Use Your Data

To provide and maintain the Service
To process payments and manage subscriptions
To send transactional emails (OTP, password reset, billing receipts)
To enforce usage limits and prevent abuse
To improve the Service (aggregated, anonymized analytics only)

5. Data Sharing

We do not sell your personal data. We share data only with:

Razorpay — Payment processing (governed by their privacy policy)
Google Cloud / Vertex AI — AI model inference (your prompts are processed per Google's data processing terms)
Anthropic — AI model inference (for Claude models, per Anthropic's usage policy)
Email provider (Resend) — Transactional emails only

6. Data Security

Passwords stored as bcrypt hashes (never plaintext)
BYOK API keys encrypted with AES-256 at rest
JWT tokens with expiry (24h user, 8h admin)
HTTPS/TLS encryption in transit
Tenant isolation — users cannot access other users' data

7. Your Rights

Under applicable data protection laws (including DPDP Act 2023, GDPR), you have the right to:

Access — View your personal data via the dashboard
Correction — Update your profile information
Deletion — Delete your account and all associated data
Portability — Export your usage data
Withdraw consent — Stop using the Service at any time

8. Cookies

Clarion AI uses localStorage (not cookies) for session management. We do not use tracking cookies or third-party analytics cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from minors.

10. International Data Transfers

Your data may be processed in India, Singapore, and the United States (where our AI model providers operate). We ensure appropriate safeguards are in place per applicable laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

12. Data Protection Officer

For privacy-related queries, contact our Data Protection Officer at dpo@clarion-ai.io.

13. Grievance Redressal

Under the DPDP Act 2023, you may raise grievances with our Grievance Officer at grievance@clarion-ai.io. We will respond within 30 days.