Privacy Policy

This policy covers visitors to our website and account holders who use the Service. Where you connect your own store or marketing tools to Claire, we act as a data processor for the store data we access on your behalf, and as a data controller for your own account and usage data.

• Account data: your name, email address, password (stored hashed), and plan.
• Connected tools: when you connect services such as Google, Shopify, Klaviyo, or Meta, we access the data those tools allow, for example analytics, orders, and email metrics, to produce your audit and tasks.
• Payment data: billing is handled by Stripe. We do not store your full card details; Stripe processes them and shares a limited summary with us.
• Usage data: how you interact with the Service, device and browser information, and cookies where you consent.

We use your data to provide and improve the Service, run your audits and tasks, process payments, send you service and account emails, provide support, and keep the Service secure. We do not sell your personal data.

Under UK GDPR we rely on: performance of our contract with you (to run the Service you signed up for), our legitimate interests (to improve and secure the Service), your consent (for optional cookies and marketing), and legal obligation (for tax and accounting records).

We share data with trusted providers who help us run the Service, including hosting and infrastructure (Vercel), payments (Stripe), email delivery, and the AI providers that power Claire's analysis. Each only receives what they need, and processes it under their own terms and our instructions.

We use essential cookies to run the Service, and analytics or marketing cookies only after you accept them in our cookie banner. You can change your choice at any time.

We keep your data for as long as you have an account, and for a reasonable period afterwards to meet legal, tax, and security obligations. You can ask us to delete your account data at any time.

Some of our providers are based outside the UK. Where data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.

You have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email hello@sayhiclaire.com. You can also complain to the UK Information Commissioner's Office (ICO).

We use encryption in transit, access controls, and reputable infrastructure to protect your data. No system is perfectly secure, but we work hard to keep yours safe and will tell you promptly if a breach affects you.

We may update this policy as the Service evolves. If we make a material change we will let account holders know by email or in the app.