Legal

Privacy Policy

Last updated: April 11, 2026

Clairity Cutover Management ("Clairity", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

By using Clairity, you agree to the practices described in this policy. If you do not agree, please do not use the service.

1. What Data We Collect

We collect the following categories of personal data:

• ›Account information — your name, email address, and hashed password when you register
• ›Organisation information — the name of your organization as provided during sign-up
• ›Content you create — projects, tasks, phases, risks, notes, and any other data you enter into the platform
• ›Team member information — names and email addresses of team members you add or invite
• ›Usage data — pages visited, actions taken, and timestamps, used to operate and improve the service
• ›Authentication tokens — session cookies used to keep you signed in

We do not collect payment card information directly. If payment processing is introduced in the future, it will be handled by a PCI-compliant third-party processor and this policy will be updated.

2. How We Use Your Data

We use your personal data only for the following purposes:

• ›To create and manage your account and organization
• ›To deliver the features and functionality of the platform
• ›To send transactional emails — such as invitation emails — that are necessary to operate the service
• ›To provide customer support if you contact us
• ›To monitor and improve the security and reliability of the service
• ›To comply with our legal obligations

We do not sell your personal data. We do not use your data for advertising or profiling.

3. Data Storage and Sub-Processors

Your data is stored and processed using the following third-party infrastructure providers. Each acts as a data processor on our behalf:

• ›Neon (neon.tech) — PostgreSQL database hosting. Your account, project, and task data is stored here. Servers are located in the United States (AWS us-east-1).
• ›Resend (resend.com) — Transactional email delivery. Used to send invitation emails. Only the recipient email address and your organization name are shared.
• ›Vercel (vercel.com) — Application hosting and deployment. Your requests to the platform pass through Vercel's infrastructure.

We take reasonable steps to ensure these providers maintain appropriate security standards. Links to their own privacy policies are available on their respective websites.

4. Data Retention

We retain your personal data for as long as your account is active. If you close your account or request deletion:

• ›Your account and profile data will be deleted from our systems
• ›Project and task data associated with your organization will be deleted
• ›Audit log entries referencing your name or email may be retained for up to 30 days in backups before being purged

To request account deletion, contact us at the email address listed in Section 8.

5. Cookies

Clairity uses cookies only for authentication. Specifically, we set a session cookie when you sign in that keeps you authenticated across page loads. This cookie is strictly necessary to operate the service and cannot be disabled while using the platform.

We do not currently use analytics cookies, advertising cookies, or any third-party tracking scripts. If this changes, this policy and our Cookie Policy will be updated and you will be notified.

For more detail, see our Cookie Policy.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• ›Right of access — request a copy of the personal data we hold about you
• ›Right to rectification — ask us to correct inaccurate or incomplete data
• ›Right to erasure — ask us to delete your personal data
• ›Right to restriction — ask us to limit how we process your data
• ›Right to data portability — request your data in a machine-readable format
• ›Right to object — object to processing based on legitimate interest

To exercise any of these rights, contact us using the details in Section 8. We will respond within 30 days. If you are in the EU or UK and believe we have not handled your request appropriately, you have the right to lodge a complaint with your local supervisory authority.

7. International Transfers

Clairity is hosted in the United States. If you are accessing the service from the European Union, United Kingdom, or another jurisdiction with data protection laws, please be aware that your data is transferred to and processed in the US. We rely on standard contractual clauses and the data processing terms of our sub-processors where applicable.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a prominent notice within the application. Your continued use of Clairity after changes are posted constitutes your acceptance of the revised policy.