Privacy Policy

This policy explains what information Clark Labs Inc collects when you use Clark, how we use and protect that data, who we share it with, and the rights you have over your personal information.

Last updated: April 13, 2026

Fourteen clauses covering collection, use, rights, and protections.

1. 01

   Information We Collect

   We collect information you provide directly, including account information such as your name, email address, and payment details; content you submit to the Services, including prompts, instructions, uploaded files, and credentials you choose to share; and communications you send us, such as support requests and feedback. We also automatically collect device and browser information, including operating system, browser type, IP address, and approximate location; usage data such as pages visited, features used, session duration, and interaction patterns; and technical logs, error reports, and performance metrics.

2. 02

   AI Inputs & Outputs

   When you use Clark, we process the prompts and instructions you provide ("Input") and the responses, actions, and content the agent generates ("Output"). This includes records of websites visited, actions taken, code executed, and files created or modified by the agent on your behalf. We process this information to provide the Services and, unless you opt out, to train and improve our AI models. Opting out of training does not affect our ability to process your data for service delivery, safety reviews, legal compliance, or Terms enforcement.

3. 03

   How We Use Your Information

   We use the information we collect to provide, operate, and maintain the Services; process transactions and send related notices; respond to your requests and provide support; improve, personalize, and develop new features; train and enhance our AI models (subject to your opt-out rights); detect, prevent, and address fraud, abuse, security issues, and policy violations; comply with legal obligations and enforce our Terms; send service-related communications; and conduct research and analytics to understand how the Services are used.

4. 04

   Data Sharing

   We do not sell your personal information. We may share your information with service providers and sub-processors who assist in operating the Services, including cloud infrastructure providers, payment processors, and analytics services; AI model providers that process your inputs to generate outputs; sandbox execution providers that run code on your behalf in isolated environments; affiliates and corporate partners under common ownership or control; third parties in connection with a merger, acquisition, or sale of assets, with notice to you; law enforcement or governmental authorities when required by law, subpoena, or court order; and other parties with your explicit consent.

5. 05

   Sub-Processors & Third-Party Infrastructure

   Clark relies on third-party infrastructure to deliver the Services, including cloud compute providers for sandbox execution, LLM providers for AI model inference, and standard infrastructure services for hosting, storage, and monitoring. Your content may be transmitted to and processed by these providers as necessary to deliver the Services. We maintain contracts with our sub-processors that require them to protect your data consistent with this Privacy Policy. A current list of sub-processors is available upon request.

6. 06

   Data Retention

   We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. Deleted conversations are removed from your visible history immediately and purged from our backend systems within 30 days. Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for research and analytics purposes. When your account is closed, we will delete or de-identify your personal information within 90 days, except where retention is required by law.

7. 07

   Data Security

   We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, and destruction. These include encryption in transit and at rest, access controls, regular security assessments, and isolated sandbox environments for code execution. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. 08

   Cookies & Tracking

   We use essential cookies to operate the Services, maintain your session, and remember your preferences. We do not use third-party advertising or behavioral tracking cookies. We may use analytics tools to understand aggregate usage patterns. You can control cookie settings through your browser, though disabling essential cookies may impair functionality.

9. 09

   Your Rights

   Depending on your jurisdiction, you may have the right to access the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; obtain a portable copy of your data; object to or restrict certain processing activities; withdraw consent where processing is based on consent; and opt out of the use of your data for AI model training via your account settings. To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.

10. 10

    CCPA Disclosures

    If you are a California resident, you have the right to know what personal information we collect, disclose, and sell (we do not sell personal information); the right to request deletion; the right to opt out of sales (not applicable); and the right to non-discrimination. In the preceding 12 months, we have collected the categories of information described in the "Information We Collect" section. We disclose personal information to service providers and sub-processors as described in "Data Sharing" for business purposes only.

11. 11

    GDPR & International Transfers

    If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing include performance of our contract with you, your consent, our legitimate interests (service improvement, security, fraud prevention), and compliance with legal obligations. Your personal information may be transferred to and processed in the United States and other jurisdictions. We rely on Standard Contractual Clauses approved by the European Commission and other appropriate safeguards for international transfers. You may lodge complaints with your local supervisory authority.

12. 12

    Children's Privacy

    The Services are not directed to individuals under 18 years of age. We do not knowingly collect, use, or disclose personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

13. 13

    Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the Services before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy. We encourage you to review this page periodically.

14. 14

    Contact

    If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected]. For general support, contact [email protected]. Clark Labs Inc, San Francisco, California, United States.