1. Who we are

Claritude is operated by Websi Limited, referred to in this policy as “Claritude”, “we”, “us” or “our”. For data protection enquiries, contact hello@claritude.io.

2. Information we collect

Depending on how you interact with Claritude, we collect:

• contact details, such as your name, work email address and organisation;
• account details, workspace membership, preferences and authentication records;
• website and company information you provide for monitoring or analysis;
• data retrieved from services you choose to connect, including Google Analytics 4, Google Search Console, Google Tag Manager and Google Ads;
• technical scan results, website evidence, issues, opportunities and monitoring history;
• billing, subscription and transaction records;
• support messages, feedback and other communications;
• technical information, including IP address, browser type, device information, logs and service usage.

We do not ask you to provide special category data. You should not submit sensitive personal data through Claritude unless it is strictly necessary and lawful.

3. How we use your information

We use personal data to:

• provide, secure and administer Claritude;
• connect and analyse services you authorise;
• run website checks, monitoring and reports;
• create explanations, recommendations and support responses;
• manage subscriptions, payments and account limits;
• respond to enquiries and early-access requests;
• improve performance, reliability and product features;
• detect abuse, fraud, security incidents and service faults;
• send service messages and, where permitted, product updates;
• meet legal, tax and regulatory obligations.

4. Lawful bases

We process personal data where it is necessary to perform a contract with you, take steps at your request before entering a contract, comply with legal obligations, pursue legitimate business interests, or where you have given consent. Our legitimate interests include operating and improving the service, maintaining security, supporting customers and communicating with organisations interested in Claritude.

5. Connected Google services

Claritude only accesses Google properties and data you authorise. We use connected data to provide the features you request, such as analytics summaries, search insights, tag checks and advertising analysis. You remain responsible for choosing which accounts and properties to connect.

You can remove Claritude’s access through your Claritude integrations settings or your Google Account permissions. Disconnecting a service stops future collection from it, although existing records may remain for the retention periods described below.

6. AI-assisted features

Some paid or optional features use artificial intelligence to explain evidence, answer questions or draft recommendations. Relevant prompts and selected service data may be sent to an AI service provider for processing. Claritude is designed to minimise the information sent. You should review AI-generated output before relying on it or making changes.

7. Sharing and processors

We share personal data only where needed to operate Claritude, comply with law or protect our rights. Service providers may include hosting, database, authentication, analytics, email, payment, monitoring, support and AI providers. These providers act under contractual and confidentiality obligations.

We may disclose information to professional advisers, regulators, law enforcement bodies or a buyer involved in a business sale or restructuring where lawful and necessary. We do not sell personal data.

8. International transfers

Some service providers process information outside the United Kingdom. Where required, we use recognised safeguards, such as adequacy regulations or approved contractual protections.

9. Retention

We retain personal data only for as long as needed for the purpose collected, including providing the service, resolving disputes and meeting legal, accounting or security requirements. Retention depends on the record type, account status and subscription plan. We may retain limited records after account closure where required by law or necessary to establish, exercise or defend legal claims.

10. Cookies and similar technologies

Claritude may use essential cookies or local storage for authentication, security and user preferences. We will request consent before using non-essential analytics or marketing cookies where consent is required. Cookie use may change as the service develops, and the website will present appropriate controls where needed.

11. Security

We use technical and organisational safeguards designed to protect personal data. No online service provides absolute security. You are responsible for protecting your login details, controlling user access and notifying us promptly of suspected unauthorised use.

12. Your rights

Under UK data protection law, you may have rights to access, correct, erase, restrict or object to the processing of your personal data, and to receive certain data in a portable format. You may also withdraw consent where processing relies on consent.

To exercise a right, email hello@claritude.io. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office.

13. Third-party websites and services

Claritude links to and integrates with third-party services. Their privacy practices are governed by their own policies. We are not responsible for how third parties process information outside Claritude.

14. Changes to this policy

We may update this policy as Claritude develops or legal requirements change. We will publish the revised version on this page and update the date above. Material changes may also be communicated through the service or by email.

15. Contact

For questions about this policy or Claritude’s use of personal data, contact hello@claritude.io.