Privacy Policy

This policy explains how Clader, LLC (“Clader”, “we”, “us”) collects, uses and shares personal information when you use clader.ai. Clader, LLC is the controller of this information. Questions and requests go to privacy@clader.ai.

Information we collect

• Account information: your email address and, if you sign in with Google or Apple, the basic profile information that provider shares.
• Your content: the messages, files, instructions and project information you provide, and the results produced for you.
• Work records: history, approvals, execution records and usage, which support continuity, recovery and cost visibility.
• Billing information: your subscription status and payment history. Card details are collected and stored by Stripe, and by Link for subscriptions sold through Link; Clader does not receive your full card number.
• Technical information: device, browser and error details, and how the product is used.

How we use it

We use this information to provide and secure the service, carry out the work you request, process payments, show your balance and usage, fix problems, improve the product and communicate with you about your account. We do not sell your personal information and we do not use your content to train AI models.

We automatically analyze service interactions to detect errors and improve Clader. This produces short de-identified notes, is never used to train models, and you can object by emailing support@clader.ai.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running and securing the service, your consent (for example for session recordings) and our legal obligations.

Service providers

We share data with service providers bound by data-processing terms that limit its use. Sign-in providers, GitHub, OpenAI (under your own account) and Stripe also act as independent controllers. The providers are:

• Supabase: Sign-in and the database that stores your account and workspace.
• Vercel: Hosting of the Clader website and application.
• Amazon Web Services: Cloud computing and storage that carry out your work.
• Stripe and Link: Payments, tax calculation and billing records. For some activities, such as fraud prevention and their own legal obligations, Stripe and Link act as independent controllers under their own privacy policies (stripe.com/privacy and link.com/privacy).
• Sentry: Error monitoring, so we can find and fix failures. Browser error reports go directly to our error-monitoring provider, Sentry, which therefore receives your IP address but is configured not to store it..
• PostHog: Product analytics and, only when you allow it, session recordings.
• Meta (Meta Platforms Ireland Limited; Meta Platforms, Inc.): Advertising measurement. The Meta Pixel on our site and Meta's Conversions API on our servers tell Meta when a visitor from our ads views a page, signs up, starts checkout, subscribes or makes a payment. We send a hashed email address, an account identifier, Meta's browser and click identifiers, your IP address, your browser's user agent and, for payments, the amount and currency. We never send the content of your projects or conversations. For visitors in the EEA, the UK and Switzerland, the Meta Pixel does not load, Meta cookies are not set, and no Meta events are sent from the browser or from our servers unless you accept marketing cookies. If you opt out of sale or sharing, or your browser sends a Global Privacy Control signal, we send Meta events only with Meta's Limited Data Use setting. Meta also uses this data as an independent controller under its own privacy policy (facebook.com/privacy/policy)..
• OpenAI: When you connect your ChatGPT account, the work you send through Codex is processed by OpenAI under your own account and OpenAI’s terms.
• DeepSeek: The free team preview built from the goal you type before you subscribe, and AI work paid for with Clader credits. DeepSeek processes this in the People’s Republic of China.
• Google and Apple: Only if you choose them to sign in.
• GitHub: Only if you connect a repository.

We update this list before a new provider receives personal information. We may also disclose information when the law requires it, or as part of a merger or sale of the business with notice to you.

Cookies

Clader uses cookies that are necessary to keep you signed in and to protect your account, and analytics that help us understand how the product is used. Session recordings run only when you allow them, and sensitive content is masked. Outside the European Economic Area, the United Kingdom and Switzerland we also use Meta marketing cookies to measure our advertising. Under some US state privacy laws, such as the California Consumer Privacy Act, sending identifiers and website activity to an advertising partner for this purpose can count as "sharing" personal information. You can opt out at any time under "Your privacy choices", and a Global Privacy Control signal counts as an opt-out. In the European Economic Area, the United Kingdom and Switzerland we use them only after you accept them in the cookie banner, and you can change that choice in Cookie settings.

Connected services and credentials

Signing in to Clader does not connect your repositories or other services. Each connection has its own scope and authorization step. Use the dedicated connection or secret entry flow for credentials rather than putting them in a conversation or project document. Saved secrets are stored write-only and are not shown again.

International transfers

Clader is operated from the United States, and our providers may process information in the United States and other countries. Except for DeepSeek, international transfers rely on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses. Transfers to DeepSeek are not covered by these safeguards.

When you use a DeepSeek model with Clader credits, or try Clader before subscribing, your messages are sent to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) and processed in the People’s Republic of China.

Retention

We keep your information while your account is active. After you ask us to delete your account, we delete or anonymize your personal information within 30 days, except records we must keep for legal, tax, accounting or security reasons. Disconnecting a service does not by itself delete copies already held by that provider, whose own retention rules apply.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain uses. Email privacy@clader.ai from your account address and we will respond within 30 days. You may also complain to your local data protection authority.

Security

We protect information with access controls, encryption in transit and separation between workspaces. No system is perfectly secure, and we will notify you of a breach that affects you as the law requires.

Children

Clader is not intended for anyone under 18, and we do not knowingly collect their information.

Changes

We will post any update here with its date and, for material changes, notify you in advance.