Legal
Last updated: May 7, 2026
This Privacy Notice for Clientell Inc. (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you visit our website, use our mobile application, or engage with us in other related ways.
Questions or concerns? Contact us at privacy@clientell.com. If you do not agree with our policies and practices, please do not use our Services.
Table of Contents
1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your information?
5. Do we use cookies and tracking technologies?
6. Do we offer AI-based products?
7. How do we handle your social logins?
8. Is your information transferred internationally?
9. How long do we keep your information?
10. How do we keep your information safe?
11. What are your privacy rights?
12. Controls for Do-Not-Track features
13. Do United States residents have specific rights?
14. Do we make updates to this notice?
15. How can you contact us about this notice?
16. How can you review, update, or delete your data?
We collect personal information that you voluntarily provide when you register, express an interest in our products, participate in activities on the Services, or contact us. This includes:
When necessary, with your consent or as otherwise permitted by applicable law, we process financial data — specifically purchase amounts, lifetime spend, and brand-level spending records you enter about your clients. We do not collect health data, racial or ethnic origin, biometric data, or other special categories of personal data as defined by GDPR Article 9.
If you make purchases through Clientell, payment data is handled and stored by Stripe. We do not store your full card number or CVV. You may review Stripe's privacy notice at stripe.com/privacy.
We offer you the ability to register and log in using your Google account. When you do, we receive your name, email address, and Google profile photo. We store your name and email to identify your account. We do not receive or store your Google password.
When you visit the Services, we automatically collect certain information including your IP address, browser type and version, operating system, referring URLs, pages visited, and timestamps. This data is used solely for service operation and security monitoring — not for behavioral advertising or tracking across other websites.
We process your information to:
We do not sell, rent, or share your personal data with advertisers or data brokers.
This section applies if you are located in the EU, EEA, or UK.
We only process your personal information when we have a valid legal reason:
If you are located in Canada, we may process your information under express or implied consent, or where permitted under applicable law without consent (e.g. legal obligation, emergency, or publicly available information).
We share data only with the following categories of third parties to operate the Services:
| Service | Purpose | Data shared |
|---|---|---|
| Google OAuth | Authentication | Email, name, profile photo |
| Vercel | Hosting & infrastructure | All data (hosting provider) |
| Neon | Database | All data (database provider) |
| Anthropic Claude | AI assistant & nudges | Client context, your messages |
| Stripe | Payment processing | Card data (not stored by us) |
| Twilio (opt-in) | SMS messaging | Phone numbers, message content |
| Google Calendar | Event sync (opt-in) | Event title, date, time |
| Google People | Contacts import (opt-in) | Names, emails, phone numbers |
We may also disclose your information where required by law, in connection with a merger or acquisition, or to protect the rights and safety of Clientell, our users, or others.
Yes. We use cookies strictly necessary to operate the Services. We do not use advertising cookies, cross-site tracking, or third-party analytics services such as Google Analytics. The cookies we set are:
authjs.session-token — Keeps you signed in (30 days)authjs.csrf-token — Protects sign-in forms against CSRF attacks (session)authjs.callback-url — Remembers where to redirect after sign-in (session)__vercel_live_token — Routes requests to the correct deployment (session)For full details see our Cookie Policy.
Yes. Clientell uses Anthropic's Claude API to power the AI assistant and nudge engine. When you interact with these features, your messages and relevant client context are sent to Anthropic to generate responses. Key facts:
Our Services offer you the ability to register and sign in using your Google account (“Social Login”). When you choose to do this, we receive certain profile information from Google including your name, email address, and profile photo. We use this information only to create or identify your Clientell account. We do not receive your Google password and we do not post to your Google account on your behalf.
Optionally, you may grant Clientell access to Google Calendar and Google People (Contacts). These scopes are requested separately and you may revoke them at any time from Settings → Integrations, or directly from your Google Account permissions.
Our servers and database are located in the United States (Vercel and Neon infrastructure). If you access the Services from outside the US, your information will be transferred to, stored in, and processed in the United States.
By using our Services, you consent to this transfer. We take appropriate steps to ensure your data receives adequate protection in accordance with this Privacy Notice. If you are located in the EU/EEA/UK, we rely on Standard Contractual Clauses or equivalent transfer mechanisms where required.
We retain your account and client-book data for as long as your account is active. If you delete your account, all associated personal data is permanently deleted within 30 days, except where we are required by law to retain it (e.g. financial records for tax purposes).
Server log data (IP addresses, page visits) is retained for up to 90 days for security monitoring, then deleted. AI assistant conversation context is not stored beyond what is needed to generate the current response.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if this is not possible, securely store it and isolate it from any further processing until deletion is possible.
We implement industry-standard security measures including:
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. If you believe your account has been compromised, contact us immediately at privacy@clientell.com.
Depending on where you are located, you may have the following rights:
To exercise any of these rights, email privacy@clientell.com or visit our privacy request page. We will respond within 30 days. If you are in the EU/EEA and believe we have unlawfully processed your data, you have the right to lodge a complaint with your local data protection authority.
Account information: You may review or update your account details at any time from Settings. To delete your account entirely, email us at privacy@clientell.com and we will process your request within 30 days.
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.
Because we do not use third-party tracking or advertising cookies, the practical impact on your privacy while using Clientell is minimal regardless of your DNT setting.
California (CCPA/CPRA): California residents may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, opt out of the “sale” of personal information (we do not sell personal information), and not face discrimination for exercising these rights.
Virginia (VCDPA), Colorado (CPA), Texas (TDPSA), and other states: Residents of these states have similar rights to access, correct, delete, and port their data, and to opt out of certain processing. To exercise any of these rights, contact us at privacy@clientell.com.
We do not sell personal information, use it for targeted advertising, or engage in profiling in a manner that produces legal or similarly significant effects.
We may update this Privacy Notice as we add features or as legal requirements change. We will notify active users of material changes by email or in-app notice at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the most recent revision. Your continued use of the Services after changes become effective constitutes acceptance of the updated Notice.
Questions, requests, or concerns about this Privacy Notice or your data:
Clientell Inc.
If you are a resident of the EU/EEA/UK and believe your data has been processed unlawfully, you also have the right to complain to your local supervisory authority.
Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect, to correct it, or to delete it. To submit a request, please:
We will respond to all requests within 30 days of receipt.