Privacy Policy

1. Introduction

Welcome to ClarityCommerce ("we," "our," or "us"). We operate the Autonomous Commerce Operating System, a platform designed to unify commerce data, deploy specialist AI agents, and execute strategic business missions. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform, specifically regarding your commerce data, AI telemetry, and third-party integrations.

By accessing or using ClarityCommerce, you agree to the terms of this Privacy Policy. If you are using the Platform on behalf of a business, you represent that you have the authority to bind that entity to this policy.

2. Information We Collect

We collect information necessary to operate the Autonomous Commerce Operating System and provide you with actionable intelligence. This includes:

• Account Data: Email address, name, and authentication tokens managed via our secure identity provider (Supabase).
• Commerce Data: Products, orders, inventory levels, customer metadata, and financial metrics synced from your connected platforms (e.g., Shopify, WooCommerce, Stripe, QuickBooks).
• AI Telemetry & Commerce Memory: The strategic objectives you submit, the execution plans generated by the Executive AI, and the historical business topology stored in your isolated Knowledge Graph (Neo4j).
• Integration Credentials: API keys and OAuth tokens used to connect to third-party services. These are encrypted at rest and used solely to execute authorized missions.
• Usage Data: Platform interactions, feature usage, and system logs for performance monitoring and security auditing.

3. AI Data Processing & The Zero-Retention Guarantee

ClarityCommerce utilizes advanced Large Language Models (LLMs) to power the Executive AI and Specialist Agents. We adhere to a strict Zero-Retention Policy regarding your proprietary data:

• No Training on Your Data: We do not use your proprietary business data, Commerce Memory, Knowledge Graph, or customer PII to train foundational public AI models.
• Ephemeral Processing: Where available, we enforce zero-data-retention agreements with our cloud LLM providers. Your data is processed ephemerally to generate strategic insights and is immediately discarded by the AI provider after the session concludes.
• Context Isolation: The Model Context Protocol (MCP) ensures that AI agents only access the specific data nodes required for a mission, minimizing data exposure.

4. Data Storage, Security & Multi-Tenant Isolation

We employ enterprise-grade security measures to protect your information:

• Encryption: All data is encrypted at rest using AES-256 standards and in transit using TLS 1.3.
• Row-Level Security (RLS): We utilize PostgreSQL Row-Level Security to ensure strict multi-tenant isolation. Your Commerce Memory, Knowledge Graph, and integration credentials are cryptographically scoped to your unique Tenant ID.
• Infrastructure: Our platform is hosted on enterprise-grade cloud infrastructure (Vercel, Supabase, Render) with continuous monitoring and automated threat detection.

5. Third-Party Integrations & The Model Context Protocol

When you connect external platforms (e.g., Shopify, WooCommerce, Meta Ads), ClarityCommerce acts as a Data Processor. We only request the minimum API scopes necessary for the Digital Workforce to execute approved missions. You can revoke these connections at any time via your Settings > Integrations dashboard, which immediately invalidates the tokens and halts data synchronization.

6. Data Retention & Deletion

We retain your account and commerce data for as long as your account is active or as needed to provide you services. You may request the deletion of your data at any time. Upon account termination, we will delete or anonymize your personal information and Commerce Memory within 30 days, except where we are required to retain it for legal or compliance purposes.

7. Your Privacy Rights (GDPR, CCPA, DPDP)

Depending on your jurisdiction, you have specific rights regarding your personal data:

• Access & Portability: You can export all your missions, topology data, and RFM segments instantly via the Data Management tab in your Settings.
• Rectification: You may correct inaccurate personal data via your profile settings.
• Erasure: You may request permanent account deletion, which purges your data from our active databases and backups.

To exercise these rights, please contact our privacy team at privacy@claritycommerce.cc.

8. Children's Privacy

ClarityCommerce is a B2B platform intended for use by businesses and professionals. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to remove that information from our servers.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer: