← Back to Home

Privacy Policy

Last Updated: December 21, 2025

1. Introduction

ClutterAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at app.clutter-ai.com (the "Service").

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name
  • Password (encrypted)
  • Profile information you choose to provide

2.2 Connected Service Data

When you connect third-party services (Google Drive, Gmail, Slack, Calendar, Notion), we collect and store:

  • Files and documents you've granted us access to
  • Email messages and metadata
  • Slack messages and channel information
  • Calendar events and details
  • Notion pages, databases, and workspace content

2.3 Usage Information

We automatically collect:

  • Questions you ask our AI
  • Search queries and interactions
  • Device information and IP address
  • Browser type and operating system
  • Usage statistics and analytics

2.4 Payment and Transaction Information

All payments are processed by Gumroad, which acts as our Merchant of Record.This means Gumroad, not ClutterAI, is the seller of record for all transactions. We do not store your credit card information. Gumroad collects and processes:

  • Payment information (credit/debit card details)
  • Billing address and contact information
  • Transaction history and receipts
  • Tax information (VAT, sales tax, etc.)
  • Purchase metadata

Gumroad's use of your payment information is governed by their Privacy Policy, available at: https://gumroad.com/privacy

We receive limited transaction data from Gumroad (such as your email, subscription status, and purchase date) solely to provide you access to the Service. We do not receive your full payment card details.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process your questions through our AI engine
  • Index and search your connected content
  • Verify subscription status and grant access (via Gumroad)
  • Send service updates and support communications
  • Improve our Service and develop new features
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

We do NOT use your data to train AI models. Your content remains private and is only used to answer your specific questions.

4. Data Sharing and Disclosure

We share your information only in these circumstances:

4.1 Service Providers

  • Gumroad: Merchant of record for all transactions, payment processing, tax handling, and subscription management
  • Convex: Database and backend infrastructure
  • Vercel: Hosting and deployment
  • OpenAI: AI processing (prompts only, not stored content)
  • Pinecone: Vector search infrastructure
  • Microsoft Azure: OAuth authentication and connected services

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Legal Basis for Processing (EU/UK Users)

If you are an EU/UK resident, we process personal data on the following legal bases:

  • Contract: To provide the Service and perform our contract with you (account management, subscription access, connected services integration).
  • Legitimate Interest: To improve the Service, detect fraud, ensure security, and analyze usage patterns (we balance these interests against your rights).
  • Consent: Where required (e.g., optional marketing communications or explicit opt‑in features). You may withdraw consent at any time.
  • Legal Obligation: To comply with applicable laws and regulations.

4.4 Business Transfers

If ClutterAI is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or use of your personal information.

5. Data Security

We implement industry-standard security measures to protect your information:

  • TLS/SSL encryption for data in transit
  • Encryption at rest for sensitive data
  • Access controls and authentication requirements
  • Regular security audits and monitoring
  • Secure credential storage (passwords are hashed and salted)

In the event of a data breach affecting personal data, we will notify affected users and regulators as required by applicable law (including within 72 hours for GDPR-covered incidents).

However, no system is 100% secure. While we strive to protect your data using commercially reasonable measures, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 General Rights

Subject to local law, you have the right to:

  • Access: Request a copy of your personal data
  • Correct: Update inaccurate or incomplete information
  • Delete: Request deletion of your account and associated data
  • Restrict Processing: Limit how we use your data
  • Object: Object to processing based on legitimate interests
  • Data Portability: Receive your data in a portable format
  • Withdraw Consent: Withdraw previously given consent
  • Lodge a Complaint: File a complaint with your data protection authority

6.2 How to Exercise Your Rights

To exercise these rights, email support@clutter-ai.com with "Data Request" in the subject line. Include your account email and a description of your request.

We will acknowledge receipt within 5 business days and respond substantively within 30 days (or as required by applicable law). If we cannot comply, we will explain the reasons and any available remedies.

6.3 EU/UK Residents

EU and UK residents may lodge a complaint with their local data protection authority. A list of EU data protection authorities is available at:https://edpb.europa.eu/about-edpb/board/members_en

6.4 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale or sharing of personal information
  • Right to correct inaccurate personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

We do not sell or share personal information as defined by the CCPA/CPRA.

To exercise California privacy rights, email support@clutter-ai.com with "California Privacy Request" in the subject line.

6.5 Subscription and Payment Management

For subscription changes, billing questions, or refund requests, please contact Gumroad directly or manage your subscription through your Gumroad account. You can also email us at support@clutter-ai.com and we will assist you.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

  • Active Accounts: Data retained while your account is active
  • After Account Deletion: Most data deleted within 30 days; backups purged within 90 days
  • Transaction Records: Retained by Gumroad as required for legal, tax, and accounting purposes (typically 7 years)
  • Legal Obligations: Data retained as required by law
  • Aggregated/Anonymized Data: May be retained indefinitely for analytics and service improvement

If you require earlier deletion or a data export, contact support@clutter-ai.com

8. Cookies and Tracking

We use essential cookies necessary for the Service to function:

  • Authentication Cookies: To keep you logged in
  • Session Cookies: To maintain your session and preferences
  • Security Cookies: To detect fraud and abuse

We do not use advertising or third-party tracking cookies.

9. Children's Privacy

The Service is not intended for children under 13 (or 16 in the EU/UK). If you are under the age of consent in your jurisdiction, you must obtain parental consent before using the Service.

If we learn we have collected personal data from a child without appropriate consent, we will delete it promptly. If you believe we may have collected information from a child, please contact us at support@clutter-ai.com

10. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For transfers from the EEA/UK to countries without adequate data protection laws, we rely on appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other lawful transfer mechanisms under GDPR

You may request a copy of the safeguards in place by contactingsupport@clutter-ai.com

11. Third-Party Services

When you connect third-party services (Google Drive, Gmail, Slack, Calendar, Notion), you are also subject to their respective privacy policies:

We only access data you explicitly authorize through OAuth permissions. You can revoke our access at any time through your account settings or the third-party service.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

  • Sending an email to your registered email address
  • Posting a prominent notice on our Service
  • Updating the "Last Updated" date at the top of this policy

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For payment and subscription inquiries, contact Gumroad at:https://gumroad.com/contact