Privacy Policy
Caitlyn Eggert LLC, doing business as ECLARA AI
Last updated: August 1, 2026
1. Overview
This policy explains what information ECLARA AI collects, how we use it, and what control you have over it. It covers the ECLARA platform and eclara.agency.
We are Caitlyn Eggert LLC, a Washington limited liability company.
Two kinds of data. Some data is about you as our customer. Other data is about third parties — prospects, leads, and businesses whose websites you audit — that you bring into the platform. We treat these differently, and Section 5 explains how.
2. Information we collect
Account information. Name, email address, password (stored hashed, never in readable form), organization name, role, and the plan you selected. We also collect what you tell us during onboarding, such as your intended use and how you heard about us.
Payment information. Handled by Stripe. We receive your subscription status, billing period, and the last four digits and card type — never your full card number.
Content you provide. Brand descriptions, tone rules, uploaded images and logos, website URLs, pasted text, uploaded PDFs, campaign goals, and any notes you enter.
Third-party data you provide. Lead records including names, job titles, email addresses, company names, locations, and profile URLs.
Content the platform generates. Audits, drafts, recommendations, and generated copy created for your account.
Integration data. If you connect a third-party service, we collect the access credentials you provide and data returned by that service, limited to what the connection scope allows.
Usage data. Which features you use, how many runs you make, token counts, credit consumption, timestamps, and error records. We use this to bill accurately, understand costs, and improve the product.
Technical data. IP address, browser type, device information, and log data collected automatically when you use the Service.
What we do not collect. We do not use advertising cookies or third-party trackers. We do not sell personal information, and we have not done so in the preceding twelve months.
3. How we use information
- ·To provide and operate the Service
- ·To authenticate you and keep your account secure
- ·To generate the audits, content, and drafts you request
- ·To meter credit usage and bill you accurately
- ·To send transactional messages such as invitations, password resets, and confirmations
- ·To respond to support requests
- ·To detect fraud, abuse, and security incidents
- ·To understand aggregate usage and improve the product
- ·To comply with legal obligations
Our legal bases where GDPR applies: performing our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with legal obligations.
4. AI processing
The Service sends content to Anthropic's API to generate output. This includes brand information, source material you provide, lead details, and website content the platform reads.
Under Anthropic's commercial terms, data sent through the API is not used to train their models.
Do not enter information you are not comfortable transmitting to a third-party AI provider — including sensitive personal data, health information, financial account details, or government identifiers. The Service is not designed for that data and should not be used to process it.
5. Data about people who are not our customers
When you upload leads or run an audit on a company's website, you are bringing us information about people and businesses who are not our customers.
For that data, you are the controller and we are your processor. We process it only to provide the Service to you. We do not use it for our own purposes, do not sell it, and do not share it with other customers.
Your obligations. You are responsible for having a lawful basis to collect and process that information, for complying with applicable privacy and marketing law, and for honoring requests from those individuals.
Requests from third parties. If someone contacts us directly to access or delete data you uploaded, we will forward the request to you and support you in responding, rather than acting unilaterally on data we hold on your behalf.
Website audits. The Service reads publicly accessible pages on websites you specify, in the same way a search engine crawler does. It does not access password-protected areas or bypass technical restrictions.
6. How we share information
We do not sell personal information. We share it only in these cases.
Service providers (subprocessors) who help us operate:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Vercel | Application hosting | United States |
| Anthropic | AI model processing | United States |
| Stripe | Payment processing | United States |
Each is bound by contractual confidentiality and security obligations. We will update this list when it changes.
Within your organization. Members of your organization can see data in that organization. Organizations are isolated from each other at the database level; one customer cannot access another's data.
Legal requirements. We may disclose information if required by law, subpoena, or court order, or to protect our rights, safety, or property. Where legally permitted, we will notify you first.
Business transfer. If ECLARA is acquired or merges, information may transfer as part of that transaction. You will be notified.
7. Security
We use encryption in transit and at rest, row-level database isolation between organizations, and credential storage designed so that integration secrets cannot be read by the application client — only by server-side functions that verify your membership first.
No system is perfectly secure. If a breach affects your personal information, we will notify you and any required authorities as promptly as the law requires.
8. Data retention
Account data is retained while your account is active.
After cancellation, data is retained for 30 days so you can reactivate or export it, then may be permanently deleted.
Archived projects are retained until you permanently delete them.
Usage and billing records are retained as long as needed for tax, accounting, and legal compliance.
Backups may persist for a limited period after deletion as part of normal backup rotation.
9. Your rights
Depending on where you live, you may have the right to:
- ·Access the personal information we hold about you
- ·Correct inaccurate information
- ·Delete your information
- ·Export your data in a portable format
- ·Object to or restrict certain processing
- ·Withdraw consent where processing is based on consent
California residents (CCPA/CPRA) additionally have the right to know what categories of personal information we collect and disclose, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any right, contact caitlyn@eclara.agency. We will respond within the time the applicable law requires — generally 30 days, or 45 days under the CCPA. We may need to verify your identity first.
You can also access, correct, and delete most of your information directly in the Service.
10. International transfers
We operate from the United States and our providers store data there. If you access the Service from outside the U.S., your information is transferred to and processed in the United States, which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
11. Cookies
We use cookies that are strictly necessary to operate the Service — keeping you signed in, maintaining your session, and remembering interface preferences such as whether your sidebar is collapsed.
We do not use advertising, analytics, or third-party tracking cookies. Blocking necessary cookies will prevent you from signing in.
12. Children
The Service is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
13. Changes to this policy
We may update this policy. If changes are material, we will notify you by email or in the Service before they take effect. The "last updated" date above always reflects the current version.
14. Contact
Questions, requests, or complaints:
Caitlyn Eggert LLC (dba ECLARA AI) 20329 194th Pl NE Woodinville, WA 98077 caitlyn@eclara.agency
If you are in the EEA or UK and believe we have not resolved your concern, you may lodge a complaint with your local data protection authority.