Privacy Policy

Effective Date: January 1, 2026 · Last Updated: January 1, 2026

Cliented ("we," "our," or "us") is committed to protecting the privacy and security of our users and clients. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the Cliented client operating system (collectively, the "Services"). By accessing or using our Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect information you voluntarily provide, including:

• Full name, job title, and company name
• Email address and phone number
• Account credentials (username and encrypted password)
• Billing and payment information (processed securely by Stripe)
• Client data, project information, contracts, and communications you manage on the platform
• Communications with our support and customer success teams

1.2 Automatically Collected Information

We automatically collect technical and usage data, including:

• IP address and approximate geographic location
• Browser type, version, and device information
• Operating system and unique device identifiers
• Pages visited, features used, and time spent on each section
• Interaction logs and usage patterns
• Error logs and performance metrics

1.3 Client Data You Manage

When you use Cliented to manage your client relationships, you may input data about your clients and their projects. This data ("Client Relationship Data") belongs to you. We process it solely to provide the platform services and do not use it for any other purpose.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Cliented platform and all associated services
• Authenticate users and maintain account security
• Process subscription payments and manage billing
• Send transactional communications (account updates, security alerts, invoices)
• Send marketing communications with your consent where required
• Analyze platform usage patterns to improve features and user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our Terms of Service
• Provide customer support and respond to inquiries

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases include:

• Contract Performance: Processing necessary to deliver your subscription services
• Legitimate Interests: Platform improvement, security monitoring, fraud prevention
• Legal Compliance: Meeting applicable legal and regulatory obligations
• Consent: For marketing communications where required

4. Information Sharing and Disclosure

We do not sell your personal information. We may share it with:

• Service Providers: Trusted third-party vendors who operate our platform infrastructure, under strict confidentiality and data processing agreements
• Business Transfers: In connection with a merger or acquisition, with appropriate protections
• Legal Requirements: When required by law, court order, or governmental authority
• With Your Consent: For any other purpose with your explicit consent

5. Data Security

We implement enterprise-standard security measures including:

• AES-256 encryption at rest for all stored data
• TLS 1.3 encryption in transit for all data transmission
• Role-based access controls and multi-factor authentication
• Continuous security monitoring and regular penetration testing
• SOC 2 Type II compliant infrastructure
• Client workspace isolation to prevent cross-account data access

6. Data Retention

We retain personal information for as long as necessary to provide our Services, unless a longer retention period is required by law. Account data is retained for the duration of your subscription and up to 7 years for legal and audit purposes. Client Relationship Data is deleted within 30 days of account closure upon request.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (right to erasure)
• Restrict or object to certain processing activities
• Receive your data in a portable format
• Withdraw consent at any time where processing is consent-based
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@cliented.io.

8. Cookies

We use cookies and similar tracking technologies as described in our Cookie Policy. You can manage your preferences through our cookie consent manager or your browser settings.

9. International Data Transfers

Your information may be processed in countries outside your own. We ensure appropriate safeguards for all cross-border transfers, including Standard Contractual Clauses for transfers from the EEA.

10. Children's Privacy

Our Services are designed for professional business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our platform at least 30 days before taking effect.

12. Contact Us

• Privacy: privacy@cliented.io
• General: hello@cliented.io
• Company: Cliented