Privacy Policy

This Privacy Policy explains how Claorova (“Claorova,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our website at claorova.com and our services, including the Claorova bookkeeping analyzer (together, the “Services”). If you do not agree with this policy, please do not use the Services.

1. Who we are and how to contact us

Claorova is a digital studio operating in the United States. For any privacy question or request, email us at selsaady@claorova.com.

2. Scope

This policy applies to information we process through the Services. It does not apply to third-party websites, products, or services that we do not control, even if we link to them.

3. Information we collect

Account information

When you create an account or sign in, we collect the information needed to authenticate you. If you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. If you register with an email and password, we collect your email address and a securely stored credential. We also store your subscription status.

Uploaded financial statements and extracted data

When you use the bookkeeping analyzer, you may upload bank or credit-card statements (PDF, image, or CSV) so the tool can read them and extract your transactions. These files are processed to generate your results and are not stored on Claorova’s servers. The extracted transaction data (dates, descriptions, amounts, categories, and the resulting Profit & Loss) is generated for your session and can be exported by you; you control those exported files.

Billing information

Paid subscriptions are processed by our payment processor, Stripe. Stripe collects and processes your payment details (such as card information and billing address) directly. Claorova does not receive or store your full card number; we store a billing reference and your subscription status.

Usage and log data

Our hosting provider automatically records standard technical information when you use the Services, such as IP address, browser and device type, pages requested, and timestamps. We use this for security, diagnostics, and to keep the Services running.

Cookies

We use strictly necessary cookies to keep you signed in and maintain your session. We do not use advertising or third-party tracking cookies. Your language preference may be stored locally in your browser. See “Cookies” below.

4. How we use information

• To provide, operate, and secure the Services and your account;
• To read uploaded statements and produce your bookkeeping outputs;
• To process payments, manage subscriptions, and prevent fraud and abuse;
• To respond to your requests and provide support;
• To comply with legal obligations and enforce our Terms of Service.

5. Service providers (sub-processors)

We share information only with the service providers we actually use to run the Services, and only as needed for them to perform their function:

• Supabase: authentication and account data storage.
• Anthropic (Claude) and/or Google (Gemini): the AI that reads your uploaded statements to extract transactions. Statement content is sent to this provider to perform the extraction and is processed transiently.
• Stripe: payment processing and subscription billing.
• Vercel: website and application hosting and server logs.

Your uploaded statements and the data extracted from them are used only to generate your own bookkeeping outputs. We never sell your data, and we do not use it for advertising or to train third-party AI models. Our AI providers process your content to return results and, under their terms, do not use API content to train their models.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

6. Data retention and deletion

We do not retain your uploaded statements on our servers after processing. We retain your account information for as long as your account is active and as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Billing records are retained by Stripe and by us as required for tax and accounting purposes.

You can request deletion of your account and associated personal information by emailing selsaady@claorova.com. We will honor verified requests to the extent required by applicable law.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), reputable infrastructure providers, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International data transfers

We and our service providers are based in the United States and may process information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers. By using the Services, you understand your information may be processed in the United States.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email selsaady@claorova.com. We will not discriminate against you for exercising your rights.

EEA/UK (GDPR): you may have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. California (CCPA/CPRA):you may have rights to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are commonly understood.

10. Children

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Cookies

We use only strictly necessary cookies to authenticate you and maintain your session. We do not use advertising, marketing, or third-party analytics cookies. You can control cookies through your browser settings, but disabling necessary cookies may prevent you from signing in or using parts of the Services.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be indicated as appropriate. Your continued use of the Services after an update means you accept the revised policy.

13. Contact

Questions about this policy or your information? Email selsaady@claorova.com.

This document is provided as general information and is not legal advice.