Privacy — ClaraBrief

What we collect

We collect two kinds of data: tenant configuration (your brand, sources, recipient list, business context) and operational data (the public articles ingested for your briefings, the embeddings we generate from them, and the decisions our deduplication agent makes).

We do not collect personal data beyond what is necessary to deliver the product: the email addresses of recipients on your distribution list, and the email address of the workspace administrator.

Sources of data

You — when you configure a tenant, add sources, or invite a recipient.
Public feeds — Tavily, RSS, and SEC EDGAR. We ingest only what is publicly available.
Authentication — Supabase Auth handles sign-in via magic links.

How we use it

The data above is used to: (i) compose each morning's briefing, (ii) deduplicate stories across the rolling 30-day window so we don't report the same event twice, (iii) email the brief to your configured recipients, and (iv) operate and improve the service (debugging, monitoring, fraud prevention).

We do not sell your data. We do not use the content of your tenant configuration or your distribution list to train models.

Retention

Tenant configuration is retained while your account is active. The ingested article corpus is retained indefinitely (it is the deduplication memory of the system). Email delivery logs are retained for 30 days. On account deletion, all tenant-specific configuration and recipient lists are removed within 30 days.

Your rights

You can request access to, correction of, or deletion of any personal data we hold by emailing privacy@clarabrief.com. Recipients of a daily briefing can unsubscribe directly from any briefing email, and the address is removed from rotation immediately.

Contact