Privacy Policy

1. Who we are

ClarityApex Limited is the controller of personal data processed through ClarityApex, except where a third-party provider acts as an independent controller for its own services. You can contact us at privacy@clarityapex.com.

2. Information we collect

• Account details: email address, name, profile image, authentication identifiers, trial status, subscription status, and access entitlements.
• Billing details: Stripe customer ID, checkout session IDs, subscription plan, payment status, renewal or access expiry dates, invoice references, and limited billing metadata. Full card details are handled by Stripe and are not stored by us.
• Workspace activity: saved favourites, blocked properties, notes, viewings, scenarios, alerts, search filters, exports, and analysis history.
• Calculator and analysis inputs: property URLs, purchase assumptions, rent assumptions, finance assumptions, and other inputs you submit to calculators or AI-assisted analysis.
• Contact and support data: messages, feedback, viewing requests, support enquiries, and related correspondence.
• Technical and usage data: IP address, device and browser information, pages viewed, referral URLs, timestamps, logs, error reports, and security events.
• Cookies and similar technologies: session cookies, security cookies, preference storage, and analytics or marketing pixels where used.

3. How we use your information

• Provide sign-in, account management, free trial access, paid access, and billing support.
• Operate property dashboards, calculators, saved workspace features, alerts, exports, and AI-assisted analysis.
• Send transactional emails such as sign-in codes, welcome emails, payment receipts, account notices, and support replies.
• Improve product quality, data accuracy, performance, security, and user experience.
• Detect, investigate, and prevent fraud, abuse, scraping, unauthorised access, and security incidents.
• Comply with legal, tax, accounting, regulatory, and dispute-resolution obligations.

4. Legal bases

Where UK GDPR applies, we rely on the following legal bases:

• Contract: to provide your account, trial, paid plan, billing support, and requested product features.
• Legitimate interests: to secure, improve, analyse, and operate the service, prevent misuse, and respond to support requests.
• Consent: for optional marketing communications and non-essential cookies where required.
• Legal obligation: for tax, accounting, consumer, regulatory, and compliance requirements.

5. AI-assisted analysis

When you use AI-assisted analysis, relevant property data, URLs, assumptions, calculated metrics, and prompt context may be sent to AI service providers so they can generate a response. Do not submit confidential, highly sensitive, or unnecessary personal data in free-text fields. AI outputs may be stored with your account for history, audit, and product improvement unless deleted or overwritten according to our retention practices.

6. Sharing and processors

We do not sell your personal data. We may share limited data with:

• Hosting and database providers used to run the application and store account/workspace data.
• Authentication providers such as Supabase Auth and Google sign-in where enabled.
• Payment providers such as Stripe for checkout, subscriptions, invoices, fraud checks, and billing portal access.
• Email providers used to send sign-in codes, receipts, and service emails.
• Analytics and marketing providers used to understand aggregate usage and improve the product.
• AI providers used to generate analysis from submitted inputs and platform data.
• Professional advisors, regulators, or authorities where needed for legal rights, compliance, disputes, or lawful requests.

7. International transfers

Some providers may process data outside the United Kingdom. Where required, we rely on appropriate safeguards such as adequacy regulations, Standard Contractual Clauses, the UK International Data Transfer Agreement, or equivalent contractual and technical protections.

8. Data retention

We keep account and workspace data while your account is active. Billing, tax, fraud-prevention, and accounting records may be kept for longer where required by law or legitimate business needs. Logs and analytics may be kept for a shorter operational period or in aggregated form. You can request deletion, but some records may need to be retained where legally required or necessary for disputes, security, or accounting.

9. Your rights and choices

• Request access to, correction of, deletion of, or portability of your personal data.
• Object to or request restriction of certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of marketing emails using unsubscribe links or by contacting us.
• Manage cookies through your browser settings and any consent tools we provide.

To exercise your rights, email privacy@clarityapex.com. You also have the right to complain to the UK Information Commissioner's Office.

10. Security

We use technical and organisational measures intended to protect personal data, including access controls, authentication, encrypted transport, provider security controls, and operational monitoring. No online service can guarantee absolute security.

11. Children

ClarityApex is not intended for children. You must be at least 18 to create an account or use paid features.

12. Updates to this policy

We may update this policy to reflect product, provider, legal, or operational changes. The date below shows the latest version.

13. Contact

Questions about this policy or your data rights can be directed to privacy@clarityapex.com or by writing to: