Privacy Policy

GoClarion ("we", "our", or "us") is operated by an individual based in India. This Privacy Policy explains what information we collect when you use GoClarion at goclarion.app, how we use it, and what rights you have over it.

By using GoClarion, you agree to the collection and use of information described in this policy.

1. What We Collect

1a. Account Information

When you create an account, we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service.

1b. Mailbox Access (Gmail, Outlook and other providers)

To send outreach from your own address, you connect a mailbox: Outlook / Microsoft 365 via Microsoft OAuth, or any provider — including Gmail and Google Workspace — via SMTP and IMAP using an app password. GoClarion does not use the Gmail API and does not request any Gmail permission from your Google Account; signing in with Google only shares your name, email address and profile picture (see 1a). GoClarion uses mailbox access for three functions only:

• Send approved emails:when you click “Approve & Send”, or turn on automatic sending for later steps of a sequence you created, GoClarion sends that email from your mailbox. The first email to each contact is always approved by you.
• Create drafts(Outlook and SMTP/IMAP mailboxes): when you choose “Approve & Create Draft”, GoClarion places the email in your mailbox's Drafts folder for you to send yourself.
• Detect replies(Outlook and SMTP/IMAP mailboxes): GoClarion checks your inbox for replies and delivery-failure notices related to emails sent through GoClarion — matched by conversation or by the address of a contact you emailed — so it can categorise the response, stop scheduled follow-ups, and honour unsubscribes.

Important:We do not read, store, or process messages unrelated to outreach you initiated through GoClarion. For a matched reply we store its category, a short summary, and the time it arrived. Mailbox data is never used for advertising, never sold, never shared with third parties beyond what is necessary to operate the service, and never used to train AI models. You can disconnect a mailbox at any time in Settings, delete the app password you created for GoClarion in your email provider's security settings, or revoke access from your Microsoft account app permissions.

The only data GoClarion receives from Google APIs is your basic profile (name, email address, profile picture) when you sign in with Google. GoClarion's use and transfer of that information adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data we receive from Google APIs is:

• used only to create, identify and secure your GoClarion account;
• not transferred to anyone else, except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you;
• never used for advertising, and never used to train AI models;
• not read by any person, unless you ask us to (for example, for support), it is needed for security or to investigate abuse, or it is required by law.

1c. Teammates and Invitations

If you invite someone to your workspace, we store their email address and role and send them an invitation email. Everyone in a workspace can see that workspace's accounts, contacts, drafts and replies. Owners and admins can remove members at any time.

1d. Information About Your Prospects

To research companies and draft outreach, GoClarion processes business information about the companies and people you target — such as company details, names, job titles and work email addresses — that you provide or that GoClarion gathers from publicly available business information. It is used only to provide the service to you. Anyone who asks not to be contacted is added to your workspace's suppression list, and a person can ask us to delete information about them by emailing hello@goclarion.app.

1e. Your AI API Keys

GoClarion does not provide AI capabilities from its own infrastructure. Instead, you connect your own API keys from AI providers such as OpenAI, Anthropic, or Google Gemini. These keys are stored encrypted in our database and are used solely to make AI calls on your behalf — for company research and email draft generation. We do not use your API keys for any other purpose and do not share them with any third party.

When GoClarion makes an AI call using your key, your workspace configuration (product details, ICP definition) and publicly researched company information are sent to your chosen AI provider. To categorise a reply, the text of that reply (and nothing else from your mailbox) is sent to your own AI provider using your key. If no AI key is configured, replies are categorised with simple keyword rules instead.

1f. Workspace Configuration

During onboarding, you provide details about your company, product, and ideal customer profile. This information is stored in your workspace and used to personalise the AI-generated research and email drafts GoClarion produces for you.

1g. Usage Data

We track usage counts such as the number of accounts researched and emails drafted per billing period. This is used to enforce plan limits and show you your current usage in the dashboard.

1h. Log Data

Our servers automatically record technical information including your IP address, browser type, pages visited, and timestamps. This is used for debugging and security purposes only.

2. How We Use Your Information

• To provide and operate the GoClarion service
• To send the emails you approve, or create them as drafts, from your connected mailbox
• To detect and categorise replies and delivery failures for your outreach emails
• To make AI calls using your connected API keys for research and draft generation
• To enforce plan usage limits
• To send service emails — team invitations, trial reminders, and a weekly summary of your pipeline (which you can switch off in Settings)
• To debug errors and improve the service

We do not sell your personal data. We do not use your data for advertising. We do not use mailbox data or your AI-generated content to train machine learning models.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase. AI API keys and SMTP/IMAP passwords are encrypted at rest (AES-256-GCM); OAuth tokens are stored in our access-controlled database. We use industry-standard security practices to protect your data.

GoClarion is hosted on Vercel (frontend) and Railway (backend), both of which are GDPR-aware infrastructure providers.

4. Third-Party Services

GoClarion uses the following third-party services to operate:

• Google Sign-In: If you sign in with Google — to receive your name, email address and profile picture. GoClarion does not use the Gmail API. Governed by Google's Privacy Policy.
• Microsoft (Graph API): If you connect Outlook or Microsoft 365 — to send approved emails, create drafts, and detect replies. Governed by the Microsoft Privacy Statement.
• Your email provider (SMTP / IMAP): If you connect a mailbox with an app password — to send approved emails, save drafts, and detect replies.
• Your chosen AI provider (OpenAI / Anthropic / Google Gemini): AI calls are made using your own API keys. Your workspace config and researched company data is sent to these APIs, plus the text of replies when categorising them.
• Supabase: Database hosting
• Vercel / Railway: Application hosting
• Resend: Transactional email delivery
• Stripe: Payment processing (when billing is active)

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

Mailbox credentials (encrypted app passwords and Microsoft OAuth tokens) and AI API keys are deleted immediately upon account deletion or when you disconnect them from your workspace settings. Tokens from GoClarion's former Google (Gmail) connection are revoked at Google and deleted when you disconnect that mailbox.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Disconnect any mailbox at any time from your workspace settings
• Remove your AI API keys at any time from your workspace settings
• Revoke Google Sign-In access at any time via your Google Account permissions page

To exercise any of these rights, email us at hello@goclarion.app. We will respond within 30 days.

7. Children's Privacy

GoClarion is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Continued use of GoClarion after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, contact: