Legal

Clarity Sidekick Privacy Policy

Effective date: August 10, 2026

Clarity Sidekick is a product brand of ClarityPath AI Consulting, LLC, a Tennessee limited liability company ("Clarity Sidekick," "Clarity," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use Clarity Sidekick websites, web applications, mobile applications, APIs, connected services, and related features (collectively, the "Services").

Our goal is straightforward: use the information needed to provide a useful, governed AI service while giving users meaningful control over their data.

1. Scope

This Privacy Policy applies to information processed by Clarity in connection with the Services. It does not govern third-party services that you choose to connect, such as Google, Apple, or a payment provider, except for our handling of information we receive from or send to those services.

If a separate written agreement with Clarity applies to your organization or account and conflicts with this Privacy Policy, the written agreement controls to the extent of the conflict.

2. Information We Collect

2.1 Account and identity information

We may collect information used to create, authenticate, and administer your account, such as your name, email address, account identifiers, profile details, organization or workspace information, authentication status, and sign-in or OAuth connection metadata.

When you connect a Google account, we may receive basic Google identity information authorized by you, such as your Google account email address and profile information.

2.2 Content you provide to Clarity

Depending on the features you use, you may provide content such as:

  • chat messages and prompts;
  • notes, tasks, open items, projects, decisions, preferences, and saved memory;
  • documents, spreadsheets, images, screenshots, attachments, and other uploaded files;
  • voice input, transcriptions, and related text;
  • feedback, corrections, ratings, support requests, and other communications; and
  • information you deliberately enter or import from other services.

We call this "User Content."

2.3 Governed memory and work-state information

Clarity is designed to maintain structured context and memory so users do not have to repeatedly explain the same information. Depending on the feature and your choices, the Services may store approved information such as profile facts, preferences, decisions, constraints, requirements, goals, open loops, entities, project context, and operating rules.

Clarity is designed so saved information can be inspected, corrected, managed, and deleted. System-inferred information is not intended to become trusted durable memory through a silent write path.

2.4 Google Workspace data

If you choose to connect Google, Clarity may request access to Gmail and Google Calendar for the features you enable.

Gmail. Clarity's current Gmail connector retrieves limited message information rather than full message bodies. The synced fields may include sender/from information, subject, Gmail's short message snippet, date and timestamps, labels, read state, thread and message identifiers, and related mailbox metadata. Clarity does not currently sync full Gmail message bodies or attachments into its Gmail connector database.

Clarity may use this limited Gmail information to show inbox context, identify follow-ups, help triage messages, and preview user-requested actions. When you use supported email-action features, Clarity may send email on your behalf or modify permitted Gmail state, including moving selected messages to Trash, subject to the user-facing workflow and applicable approval controls.

Limited Gmail preview information, such as sender, subject, and snippet, may also become part of saved chat or tool history when you ask Clarity to discuss, preview, or act on that information.

Google Calendar. Clarity may access the list of calendars you can read and event information needed to provide scheduling features. Event information may include titles, dates and times, attendees, descriptions, conference or Google Meet details, identifiers, and related event metadata. Where you have appropriate permission, Clarity may read, create, update, and delete calendar events, including events with invitees or conferencing details, when you use a feature that calls for that action and the applicable approval flow is satisfied.

OAuth credentials. We may store OAuth access tokens, refresh tokens, connection state, and related identifiers needed to maintain Google connections. These credentials are treated as sensitive and are intended to be encrypted and access-controlled.

Google connection data is treated as connected source context, not as an automatic durable-memory feed. Clarity does not silently convert Gmail or Calendar content into trusted long-term memory merely because the account is connected.

2.5 Voice and audio data

When you use voice features, microphone audio may be transmitted to speech-processing providers to perform speech recognition. Assistant-generated speech may be transmitted to a text-to-speech provider. Clarity's current product posture is not to intentionally retain raw microphone audio after processing unless you deliberately upload or save an audio file as content. Transcripts or text derived from voice input may be retained for a limited period or stored as conversation content when needed to provide the Services.

2.6 Usage, device, and technical information

We may collect technical information needed to operate, secure, and improve the Services, including:

  • IP address and approximate network information;
  • browser, device, operating-system, and app-version information;
  • authentication and session information;
  • timestamps, request identifiers, trace identifiers, feature usage, and connector status;
  • error reports, performance metrics, security events, and diagnostic logs; and
  • cookie, local-storage, or similar information used for authentication, security, preferences, and service operation.

2.7 Payment and subscription information

If you purchase a paid service, our payment processor may collect payment-card or banking information directly. Clarity may receive transaction, subscription, billing-status, invoice, and limited payment metadata needed to administer your account. We do not need to store full payment-card numbers when payment processing is handled by a payment provider.

3. How We Use Information

We use information to:

  • provide, maintain, authenticate, and secure the Services;
  • respond to your requests and generate AI-assisted outputs;
  • assemble relevant context from your approved information and connected sources;
  • provide governed memory, notes, tasks, open-loop, project, and work-state features;
  • provide Gmail and Calendar features you choose to connect;
  • prepare actions and, where supported, carry out actions you explicitly request and authorize;
  • create limited audit, status, and trace records needed to make actions explainable and supportable;
  • troubleshoot failures, prevent abuse, investigate security incidents, and maintain reliability;
  • provide customer support and respond to privacy or account requests;
  • administer subscriptions, billing, and service communications;
  • understand product performance and improve the Services using data we are permitted to use for that purpose; and
  • comply with law, enforce our agreements, and protect users, Clarity, and others.

4. AI Processing and Model Providers

Clarity uses artificial-intelligence models and related service providers to provide features such as conversation, summarization, drafting, classification, retrieval, and other user-requested assistance. Information relevant to your request may be transmitted to approved model or infrastructure providers so they can process it on Clarity's behalf.

For example, selected Google-derived information may be included in the context sent to Clarity's primary AI inference provider when needed to answer a request or perform an approved tool workflow. Google-derived information may also reach a paid Gemini API service when that information is already part of the chat, assembled context, or an approved knowledge or memory workflow. Clarity does not directly route Gmail or Calendar connector payloads to its current microphone speech-recognition or text-to-speech providers.

Clarity does not sell your User Content. Clarity does not use Google Workspace data to create, train, or improve generalized or non-personalized AI or machine-learning models. Google Workspace data is used only for permitted user-facing features and related security, legal, and operational purposes allowed by Google's policies.

If Clarity later offers an optional program that would use non-Google private User Content to train a generalized Clarity model, that use would require a separate, clear disclosure and an affirmative choice where required. This Privacy Policy does not grant Clarity an unrestricted right to train generalized models on private User Content.

5. Google Workspace Limited Use

Clarity Sidekick's use and transfer of information received from Google Workspace APIs will comply with the Google Workspace API User Data and Developer Policy, including applicable Limited Use requirements.

In particular, Clarity does not use Google Workspace data for advertising, data brokerage, creditworthiness or lending decisions, or generalized AI or machine-learning model training. We limit access, use, and sharing of Google Workspace data to permitted user-facing features, security, legal compliance, and other uses allowed by Google's policies.

Human access to Google Workspace data is restricted. Clarity personnel or contractors should not read a user's Google Workspace data except when the user has provided specific consent for support, when access is necessary for security or abuse investigation, when the data has been appropriately aggregated or de-identified for a permitted purpose, or when required by law.

6. When We Share Information

6.1 Service providers and subprocessors

We use vendors that help operate the Services, including providers of cloud hosting and storage, databases and search infrastructure, AI inference, voice processing, authentication, payment processing, monitoring, communications, and security. These providers may process information only as needed to perform services for Clarity and are expected to protect it under contractual, technical, or legal obligations appropriate to the information they receive.

For Google Workspace data, transfers to service providers are limited to transfers permitted by Google's policies and, where required, the user's consent for the user-facing feature.

6.2 At your direction

We may share information when you intentionally direct the Services to do so, such as sending an email to a recipient, creating a calendar event with attendees, exporting content, sharing an artifact, or connecting another service.

6.3 Security, legal, and safety

We may disclose information when reasonably necessary to investigate fraud, abuse, security incidents, or violations of our terms; protect rights, property, or safety; respond to lawful process; or comply with applicable law.

6.4 Corporate transactions

Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and contractual restrictions. If Google Workspace data is involved, we will follow Google's requirements, including obtaining prior user consent where Google policy requires it.

7. What We Do Not Do

Unless this policy is updated and any required consent is obtained, Clarity does not:

  • sell personal information or Google Workspace data to data brokers or advertisers;
  • use Google Workspace data for targeted advertising or retargeting;
  • use Google Workspace data to determine creditworthiness or make lending decisions;
  • use Google Workspace data to train generalized AI or machine-learning models;
  • silently treat connected Gmail or Calendar content as trusted durable Clarity memory; or
  • intentionally create hidden autonomous authority from a connected service.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, subject to the nature of the data, user choices, technical requirements, security needs, contractual obligations, and legal requirements.

Retention may differ by data type:

  • Account information may be retained while your account is active and for a limited period afterward as needed for security, billing, dispute resolution, or legal obligations.
  • User Content and durable memory may remain until you delete it, replace it, close the account, or an applicable lifecycle or expiration rule removes it.
  • Gmail connector data may include the limited metadata and snippets described above. Disconnecting Gmail stops new authorized connector access, but previously synced connector records may remain in your Clarity account until deleted through applicable controls, removed under retention rules, or deleted with the account.
  • Calendar connector data may include synced event and calendar-list records. Disconnecting Calendar stops new authorized connector access, but previously synced connector records may remain until deleted through applicable controls, removed under retention rules, or deleted with the account.
  • OAuth credentials may be retained while a connection is active. Stored OAuth credential records are deleted when the account is deleted. You may also revoke Clarity's Google access directly through your Google Account controls.
  • Raw voice audio is not intended to be retained by Clarity after processing unless you deliberately save or upload the audio as content.
  • Transcripts, chat/tool history, logs, traces, and artifacts may be retained for periods appropriate to their purpose. Where Google-derived information becomes part of chat or tool history at your request, it is handled under the same Google data restrictions and your applicable deletion controls.
  • Billing records may be retained as required for tax, accounting, fraud prevention, or other legal obligations.

Backups and security logs may persist for a limited period after a deletion request before aging out of protected backup systems. Data that Clarity is legally required to retain may be preserved only for the required purpose and period.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information. Current security architecture and operating practices include or are designed around measures such as:

  • encrypted network transport using HTTPS/TLS;
  • encryption and access controls for sensitive stored data and credentials;
  • secrets management rather than exposing production credentials in client code;
  • least-privilege access principles and multi-factor authentication for company systems where supported;
  • separation between frontend and backend services;
  • logging, monitoring, incident-response procedures, and security review;
  • controls intended to reduce prompt-injection and untrusted-context risks; and
  • governed approval boundaries around external mutations such as email and calendar actions.

No system can guarantee absolute security. If we discover a security incident affecting your information, we will respond in accordance with applicable law and our contractual obligations.

Clarity is building toward SOC 2-aligned security maturity. Unless Clarity expressly states otherwise in a current written notice, this is not a claim that Clarity has completed or obtained SOC 2 certification.

10. Your Choices and Controls

Depending on the feature and platform, you may be able to:

  • review, edit, or delete saved Clarity memory and content;
  • remove or complete open items and other work-state records;
  • disconnect connected services;
  • revoke Clarity's Google access through your Google Account permissions;
  • request deletion of eligible Google-connected data;
  • request deletion of your Clarity account and associated personal data;
  • correct inaccurate account information; and
  • contact us with a privacy request or concern.

Disconnecting Google stops new authorized access from that connection. It does not automatically delete previously synced connector records or chat/tool history that already contains information you asked Clarity to use. You may request deletion of eligible connected data as described on our Data Controls page.

11. Account Deletion

You may request deletion of your Clarity Sidekick account. When account deletion is completed, Clarity deletes or de-identifies account-associated personal data, including stored chat history, saved memory, OAuth credential records, and synced Gmail and Calendar connector caches, except information that must be retained for legitimate security, fraud-prevention, billing, tax, legal, or regulatory reasons. Protected backups may take additional time to age out.

Mobile applications that support account creation provide or are intended to provide an in-app account-deletion path consistent with applicable app-store requirements. An external deletion and data-control resource is also available on the Clarity Sidekick website.

12. Privacy Rights

Depending on where you live, applicable law may give you rights to access, correct, delete, obtain a copy of, or restrict certain processing of your personal information, and to appeal certain privacy decisions. Clarity will honor verified requests as required by applicable law.

We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right protected by law.

13. Children

Clarity Sidekick is intended for adults. Standard Clarity Sidekick accounts are for users who are at least 18 years old or the age of legal majority in their jurisdiction. Clarity does not knowingly offer the standard Services to children.

If you believe a minor has provided personal information to Clarity in violation of this policy, contact us so we can review and take appropriate action.

14. International Processing

Clarity and its service providers may process information in the United States and other countries where they operate. Data-protection laws may differ from those in your location. Where required, we use appropriate safeguards for cross-border transfers.

15. Changes to This Policy

We may update this Privacy Policy as the Services, laws, or our data practices change. We will post the updated policy and revise the effective or last-updated date. If a change materially expands how we use sensitive information, we will provide additional notice or obtain consent when required.

For Google Workspace data, Clarity will not begin using the data for a materially new purpose that was not disclosed to the user without providing any notice and consent required by Google's policies.

16. Contact Us

ClarityPath AI Consulting, LLC Clarity Sidekick 175 Cypress Creek Dr Camden, TN 38320 United States Email: zac@claritysidekick.com

For privacy requests, please include enough information for us to identify the relevant account and the nature of your request. Do not send passwords, OAuth tokens, payment-card numbers, or other credentials by email.