Privacy Policy

Effective date: February 28, 2026

1. Introduction

Cloverly ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Information You Provide

Account information: name, email address, and password when you create an account.
Payment information: billing details are collected and processed directly by Stripe. We do not store your credit card number on our servers.

Information Collected Automatically

Device & browser data: IP address, browser type and version, operating system, and device type.
Usage data: pages visited, features used, timestamps, and referring URLs.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service.
Process transactions and manage your subscription.
Send transactional emails (e.g., subscription confirmations, billing receipts, and policy updates).
Improve and personalize your experience with the Service.
Detect and prevent fraud, abuse, and security incidents.
Comply with legal obligations.

4. Third-Party Services

We use the following third-party services to operate Cloverly:

Stripe — payment processing. Stripe collects and processes your payment information under its own privacy policy: stripe.com/privacy.
Vercel — hosting and infrastructure. Vercel may process server logs containing IP addresses: vercel.com/legal/privacy-policy.
NextAuth.js — authentication. Session data is stored securely and is not shared with third parties.

We do not sell your personal data to any third party.

5. Cookies & Tracking

We use only essential cookies required for the Service to function (e.g., session cookies for authentication). We do not use advertising cookies or third-party tracking pixels. No data is shared with ad networks.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will permanently remove your personal data within 30 days, except where we are required by law to retain certain records (e.g., billing history for tax purposes).

7. Your Rights — GDPR (European Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

Access: Request a copy of your personal data.
Rectification: Request correction of inaccurate data.
Erasure: Request deletion of your personal data.
Portability: Request your data in a machine-readable format.
Restriction: Request that we limit processing of your data.
Objection: Object to processing based on legitimate interests.

To exercise these rights, contact us at support@cloverly.io. We will respond within 30 days.

8. Your Rights — CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act gives you the following rights:

Right to Know: Request disclosure of the categories and specific pieces of personal information we collect.
Right to Delete: Request deletion of your personal information.
Right to Opt-Out: Opt out of the sale of your personal information — however, we do not sell personal data.
Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

9. Data Security

We take reasonable measures to protect your information, including: transmitting all data over HTTPS (TLS encryption), hashing passwords using industry-standard algorithms, and limiting access to personal data to authorized personnel. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the email address associated with your account. The "Effective date" at the top of this page indicates when the policy was last revised.

12. Contact

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@cloverly.io.