Privacy Policy
This policy explains what information Clark Labs Inc collects when you use Clark, how we use and protect that data, who we share it with, and the rights you have over your personal information.
Last updated: July 13, 2026
Fifteen clauses covering collection, use, rights, and protections.
-
01
Information We Collect
We collect information you provide directly, including account information such as your name, email address, and payment details; content you submit to the Services, including prompts, instructions, uploaded files, and credentials you choose to share; communications you send us, such as support requests and feedback; and partner applications, including contact information, primary channel, audience URL and size, and promotion plan. We also automatically collect device and browser information; usage data; technical logs, error reports, and performance metrics; and, when you consent to marketing measurement, campaign parameters, referring domain, landing page, and advertising or affiliate click identifiers.
-
02
AI Inputs & Outputs
When you use Clark, we process the prompts and instructions you provide ("Input") and the responses, actions, and content the agent generates ("Output"). This includes records of websites visited, actions taken, code executed, and files created or modified by the agent on your behalf. We process this information to provide the Services and, unless you opt out, to train and improve our AI models. Opting out of training does not affect our ability to process your data for service delivery, safety reviews, legal compliance, or Terms enforcement.
-
03
How We Use Your Information
We use the information we collect to provide, operate, and maintain the Services; process transactions and send related notices; respond to your requests and provide support; improve, personalize, and develop new features; train and enhance our AI models (subject to your opt-out rights); detect, prevent, and address fraud, abuse, security issues, and policy violations; comply with legal obligations and enforce our Terms; send service-related communications; and conduct research and analytics to understand how the Services are used.
-
04
Data Sharing
We do not sell your personal information. We may share information with service providers and sub-processors; AI model and sandbox providers that perform the work you request; advertising and affiliate measurement providers, such as Google, TikTok, and an affiliate network that referred you, when you consent or another lawful basis applies; affiliates and corporate partners under common ownership or control; parties to a corporate transaction; authorities when legally required; and other parties with your explicit consent. We do not send prompts, chat contents, or uploaded files to advertising or affiliate networks.
-
05
Sub-Processors & Third-Party Infrastructure
Clark relies on third-party infrastructure to deliver the Services, including cloud compute providers for sandbox execution, LLM providers for AI model inference, and standard infrastructure services for hosting, storage, and monitoring. Your content may be transmitted to and processed by these providers as necessary to deliver the Services. We maintain contracts with our sub-processors that require them to protect your data consistent with this Privacy Policy. A current list of sub-processors is available upon request.
-
06
Google Workspace Data & Limited Use
When you connect Google, Clark accesses only the Google services and permissions you select. Depending on those selections, this may include email recipients and content you ask Clark to send, calendar event details and attendees, and the contents or metadata of Drive files, Docs, and Sheets you choose to use with Clark. Clark uses raw, aggregated, anonymized, and derived Google Workspace data solely to provide or improve the user-facing features you request. Relevant data may be transmitted to contracted hosting and AI inference providers only as necessary to perform those features and only with zero-data-retention and no-training controls. Clark does not sell Google Workspace data, use it for advertising, lending, or generalized AI model training, or transfer it to data brokers or information resellers. OAuth tokens are encrypted at rest and retained only while the connection remains active. Disconnecting Google revokes the Google grant and deletes Clark's stored tokens. Google-derived conversation content follows the conversation deletion schedule described below and is excluded from generalized model training and indefinite research retention. Human access is limited to cases where you explicitly authorize support access to specific data, where access is necessary for security, or where required by law. Clark's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
-
07
Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this policy, maintain your account, review and administer a partner application, comply with legal obligations, resolve disputes, and enforce our agreements. Deleted conversations are removed from your visible history immediately and purged from our backend systems within 30 days. Aggregated or de-identified data that cannot reasonably be used to identify you may be retained indefinitely for research and analytics purposes. When your account is closed, we will delete or de-identify your personal information within 90 days, except where retention is required by law. A partner applicant may request deletion through [email protected], subject to the same legal exceptions.
-
08
Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, and destruction. These include encryption in transit and at rest, access controls, regular security assessments, and isolated sandbox environments for code execution. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
-
09
Cookies & Tracking
We use essential cookies and local storage to operate the Services, maintain your session, remember security and privacy preferences, and preserve an opaque sign-in continuation. Analytics storage is disabled unless you permit it. Marketing storage is disabled unless you permit it; when enabled, Clark may retain campaign parameters and advertising or affiliate click identifiers for up to 30 days, associate one attribution with your account and checkout, and report subscription, refund, or dispute events to the referring platform. Server-side measurement follows the same consent choice. You can accept, reject, or change these choices through the consent banner or the Cookie settings link in the site footer. We honor Global Privacy Control by disabling nonessential tracking.
-
10
Your Rights
Depending on your jurisdiction, you may have the right to access the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; obtain a portable copy of your data; object to or restrict certain processing activities; withdraw consent where processing is based on consent; and opt out of the use of your data for AI model training via your account settings. To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.
-
11
CCPA Disclosures
If you are a California resident, you have the right to know what personal information we collect, disclose, sell, or share; request correction or deletion; opt out of sale or sharing; limit certain uses of sensitive personal information; and receive equal service when exercising those rights. We do not sell personal information. Some consented advertising measurement may be considered sharing under California law; you can opt out through Cookie settings or Global Privacy Control. In the preceding 12 months, we have collected the categories described in the Information We Collect section and disclosed them as described in Data Sharing.
-
12
GDPR & International Transfers
If you are located in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing include performance of our contract with you, your consent, our legitimate interests (service improvement, security, fraud prevention), and compliance with legal obligations. Your personal information may be transferred to and processed in the United States and other jurisdictions. We rely on Standard Contractual Clauses approved by the European Commission and other appropriate safeguards for international transfers. You may lodge complaints with your local supervisory authority.
-
13
Children's Privacy
The Services are not directed to individuals under 18 years of age. We do not knowingly collect, use, or disclose personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
-
14
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the Services before they take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy. We encourage you to review this page periodically.
-
15
Contact
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected]. For general support, contact [email protected]. Clark Labs Inc, San Francisco, California, United States.