Privacy Policy

This Privacy Policy describes how Clevra Inc., doing business as Clevra ("Clevra", "we", "us", "our"), a Delaware company with its address at 2810 North Church Street, Wilmington, DE 19802, United States, collects, uses, and shares personal information when you visit clevra.ai, use the Clevra application at app.clevra.ai, or otherwise interact with our services (together, the "Service"). Capitalized terms not defined here have the meaning given in our Terms of Service at https://clevra.ai/terms-of-service.

Clevra is software for home-service businesses. That means we handle personal information in two distinct roles:

• For our customers — the businesses that create Clevra accounts, and the people on their teams — we decide how account, billing, and usage information is handled, as described in this policy.
• For our customers' clients — for example, a homeowner whose contractor sends quotes or invoices through Clevra — we process information on behalf of and under the instructions of that business, as its service provider. Section 2 explains what that means for you.

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Quick Summary

We collect the information needed to run a business software product: your account details, your billing information, the business records you and your team create, and technical data about how the Service is used. We use it to provide and improve the Service, keep it secure, bill you, and communicate with you. We share it with the service providers who help us run Clevra (hosting, payments, messaging, and similar), and we do not sell personal information or share it for cross-context behavioral advertising. The rest of this policy is the detail.

2. If You Are a Client of a Business That Uses Clevra

If a home-service business you hired uses Clevra, it may store your contact details, service addresses, job records, photos, quotes, invoices, payments, and messages in the Service, and may invite you to a client portal to view and approve documents and pay invoices.

That information is the business's Customer Data. The business — not Clevra — decides what is collected and how it is used, and its own privacy practices apply. We process Customer Data only to provide the Service to that business, to keep the Service secure, to comply with law, and as the business instructs.

If you want to access, correct, or delete information a business holds about you, or have questions about how it uses your information, contact that business directly. We will support the business in responding, and if you contact us first, we will refer your request to them where appropriate. Payments you make through the portal are processed by Stripe; Clevra does not receive your full card number.

3. Information We Collect

3.1 Information you provide.

• Account and registration information — your name, email address, phone number, password or sign-in credentials, and role on your team. If you sign in through a third-party identity provider (for example, Google), we receive basic profile information such as your name and email address from that provider.
• Business information — your company name, address, industry, logo, team member details, and settings you configure.
• Billing information — the details needed to charge for paid plans. Card payments are processed by Stripe; we receive billing status, plan, and transaction records, but we do not store full card numbers.
• Customer Data — the records you and your team create in the Service: client contact details, service locations, requests, quotes, jobs, visits, invoices, payments, work forms, reports, photos, files, notes, and the content of messages (email and SMS) sent through the Service.
• Communications with us — the contents of support requests, feedback, and other correspondence with Clevra.

3.2 Information collected automatically. When you use the Service, we and our providers collect log and usage data: IP address, browser and device type, operating system, pages viewed, features used, timestamps, referring pages, crash and error reports, and cookie identifiers. Section 7 covers cookies in more detail.

3.3 Information from third parties. We receive limited information from the providers that help us operate — for example, sign-in events from our authentication provider, payment and payout status from Stripe, and message delivery status from our email and SMS providers.

We do not collect precise GPS location from your device. Address and map features use the service addresses you enter.

4. How We Use Information

We use the information described above to:

• provide, operate, maintain, and improve the Service;
• create and administer accounts, authenticate users, and provide the client portal;
• process subscription billing and, through Stripe, payments between businesses and their clients;
• send transactional and service communications, such as billing notices, security alerts, and product updates that affect your use of the Service;
• provide customer support and respond to requests;
• send marketing communications about Clevra, where permitted by law and subject to your right to opt out (Section 10);
• monitor, detect, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
• analyze usage to understand and improve how the Service performs, including producing aggregated or de-identified statistics that do not identify you or your clients;
• comply with legal obligations and enforce our agreements; and
• for other purposes described to you at the time of collection or with your consent.

5. AI Features

The Service includes AI-powered features that generate content and suggestions based on your inputs and account data. Your AI inputs and outputs are Customer Data and are handled under this policy. We use a third-party AI provider (currently Amazon Bedrock, a service of Amazon Web Services) to deliver these features; it processes the relevant data as our service provider, and we do not permit it to use your data to train general-purpose models. AI output can be inaccurate — review it before relying on it, and avoid submitting information to AI features that you do not have the right to share.

5.1 AI assistant connector

Clevra offers an optional connector that lets an authorized member of your team use Clevra from an AI assistant of their choice, such as Claude (provided by Anthropic) or ChatGPT (provided by OpenAI). The connector is off unless the member connects it, and your company's administrators can pause it or restrict it to read-only at any time in Settings → Connected apps.

How it works. A member connects by signing in with their Clevra account and approving access. The assistant then receives a revocable access credential. Clevra never receives the member's password for the assistant, and the assistant never receives the member's Clevra password. Each request the assistant makes is handled as that member, with the same role, permissions and field restrictions as in the Clevra app. The assistant cannot use the connector to write or send its own messages, take payments, delete records, or change billing, team or company settings. Booking a visit through the connector sends the same automatic confirmation and reminder messages your company has set up for visits booked in Clevra.

What Clevra shares with the assistant's provider. When a connected member asks their assistant something, Clevra returns only the business data needed to answer that request and that the member is permitted to see. It may include client, job, schedule, invoice, estimate, request, activity, team and report information. This sharing happens at the member's direction, as described in section 6.6. The assistant's provider processes this data as the provider of the member's assistant service, under the member's or their organization's agreement with that provider and that provider's privacy policy. The assistant's provider is not Clevra's service provider for this feature.

What Clevra collects. Clevra does not receive the member's conversations with the assistant. For each request, Clevra keeps an access record: the connection, the capability used, the outcome and the time it took. It never keeps the content of the request or the data returned. Actions taken through the assistant, such as creating a client or drafting an estimate, are stored like any other Clevra record and noted in the audit trail as made through the connector.

How Clevra uses it. Clevra uses the requests it receives through the connector only to carry them out and to operate, secure and support the connector. We do not sell this information, use it for advertising or to build profiles, or use it to train AI models. Records a member creates through the connector are Customer Data and are handled like any other record under this policy.

Retention. Access records are deleted after 90 days. Short-lived records used to prevent an action from running twice are deleted after one day. Records of each connection (who connected, from which assistant, when, and its status) are kept with your account's other records, as described in section 8.

Your choices. A member can disconnect at any time in Clevra (Settings → Connected apps) or in the assistant's settings. Disconnecting stops all further access immediately. Data the assistant's provider has already received is governed by that provider's policies.

6. How We Share Information

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising. We share information only as follows:

6.1 Service providers. We use a small set of providers to run Clevra. They process information on our behalf, only as needed to perform their function, under contractual confidentiality and data-protection obligations. The current categories and providers are:

• Cloud hosting and storage — Amazon Web Services; Cloudflare (media storage and delivery)
• Identity and authentication — WorkOS (sign-in sessions and portal login links)
• Payments and billing — Stripe (our subscription billing, and payment processing between businesses and their clients)
• Text messaging — Twilio
• Transactional email — Resend
• Maps and address services — Google Maps Platform
• AI features — Amazon Web Services (Amazon Bedrock)
• Error monitoring — Sentry
• Marketing website hosting — Webflow
• Usage analytics — analytics providers that help us understand how the Service is used

We may update this list as the Service evolves; material changes will be reflected in this policy.

6.2 Within your account. Customer Data and activity in your account are visible to your Account Owner, administrators, and team members according to the roles and permissions your business configures. If your business invites a client to the portal, the documents and records it chooses to share are visible to that client.

6.3 Payment processing. If your business uses online payments, information needed to process transactions is handled by Stripe under Stripe's own privacy policy and agreements, including the Stripe Connected Account Agreement.

6.4 Legal and protection. We may disclose information where we believe in good faith that it is required by law, regulation, legal process, or governmental request, or where necessary to enforce our agreements, to detect and prevent fraud, security, or technical issues, or to protect the rights, property, or safety of Clevra, our users, or the public.

6.5 Business transfers. If Clevra is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, or disclosed during due diligence under confidentiality obligations. It will remain subject to the protections of the then-current privacy policy.

6.6 With your direction or consent. We share information when you enable an integration, connect a third-party product, or otherwise direct or consent to the sharing. Third-party products you connect are governed by their own privacy policies. For example, when a member of your team connects Clevra to an AI assistant, Clevra provides that assistant's provider with the data needed to answer that member's requests, as described in section 5.1.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service:

• Essential cookies keep you signed in and keep the Service secure — for example, the encrypted session cookies used for staff sign-in and client portal sessions. The Service does not work without them.
• Functional cookies remember preferences such as interface settings.
• Analytics help us understand how the websites and app are used, in aggregate, so we can improve them.

You can control cookies through your browser settings; blocking essential cookies will prevent sign-in. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of, and browser signals such as "Do Not Track" or Global Privacy Control do not change our practices.

8. Retention

We keep personal information for as long as needed to provide the Service and for legitimate business purposes such as billing records, security, dispute resolution, and legal compliance. When an account is cancelled or terminated, an export mechanism is available on request for 30 days (as described in our Terms of Service), after which we may delete Customer Data in the ordinary course. Copies may persist in encrypted backups for a limited period until those backups roll off, and we may retain de-identified or aggregated data that no longer identifies anyone. Records of requests made through the AI assistant connector are kept for 90 days, as described in section 5.1.

9. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information — including encryption in transit, tenant-level data isolation, role-based access controls, and secure session management. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password, protect the email account you use for sign-in, and tell us promptly at hi@clevra.ai if you suspect unauthorized access.

10. Your Rights and Choices

• Access, correction, deletion, and export. You can view and update most account information directly in the Service. You may also contact us to request access to, correction of, deletion of, or a copy of the personal information we hold about you. We will respond within the time required by applicable law, and may need to verify your identity first. Some information may be exempt from deletion — for example, records we must keep for legal, billing, or security reasons; where that applies, we will tell you.
• Marketing opt-out. You can opt out of marketing emails at any time using the unsubscribe link in the message or by contacting us. Transactional and service messages (such as billing and security notices) are sent as part of the Service and are not affected by a marketing opt-out.
• Text messages. Reply STOP to opt out of text messages from a number used by the Service.
• Customer Data. If your request concerns information a business holds about you in its Clevra account, Section 2 applies: the business controls that data, and we will refer your request to it where appropriate.

11. Canadian Privacy Rights

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You have the right to access the personal information we hold about you, to challenge its accuracy and completeness, and to have it corrected. You may withdraw consent to our handling of your personal information, subject to legal and contractual restrictions and reasonable notice; withdrawing consent may mean we can no longer provide the Service to you. We have designated a Privacy Officer who is accountable for our compliance; you can reach them at hi@clevra.ai. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

12. US State Privacy Rights

If you live in a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Texas, or Virginia), you may have the right to know what personal information we collect, to access and receive a copy of it, to correct it, to delete it, and to not be discriminated against for exercising those rights. The categories we collect and our purposes are described in Sections 3 and 4; the categories of recipients are described in Section 6. We do not sell personal information, and we do not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of; we also do not use or disclose sensitive personal information for purposes requiring a right to limit. To exercise your rights, contact us at hi@clevra.ai; we will verify your request (for example, by confirming control of the email address on the account) and respond within the time required by law. You may use an authorized agent where the law allows, subject to verification. If we decline a request, you may appeal by replying to our response.

13. International Processing

We are a US company, and personal information is stored and processed in the United States and in other locations where our service providers operate, which may have data-protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for these transfers. The Service is directed to businesses in the United States and Canada. If you use the Service from the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, our legal bases for processing are the performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where required — and you may have additional rights under local law, which you can exercise by contacting us.

14. Children

The Service is a business tool and is not directed to children. You must be at least the age of majority in your jurisdiction to create an account, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at hi@clevra.ai and we will delete it.

15. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you by email or in-app notice before the change takes effect; the "Last Updated" date at the top reflects the latest version. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

16. Contact

Questions, requests, or complaints about privacy:

Privacy Officer — hi@clevra.ai Clevra Inc. (dba Clevra), 2810 North Church Street, Wilmington, DE 19802, United States