Privacy Policy

Last updated: July 28, 2026

This Privacy Policy explains how Clairely Evidentia Corporation (“Claire,” “we,” “us”), a company incorporated in Toronto, Canada, collects, uses, stores, and shares information in connection with the Claire / GATE℠ service, our websites, and the GATE Claude connector (the “Services”). GATE is a governance and evidence layer for autonomous AI agents.

1. Information we collect

Account & identity — name, work email, organization/tenant, and role, provided when an account is created or an invitation is accepted (managed via our identity provider, Amazon Cognito).
Configuration — tenant settings you enter: branding, brand-voice profile, and model-provider settings. Model-provider API keys are encrypted at rest and never returned in plaintext.
Governance data — the agents you declare, the proposed actions your agents submit, the human approval/edit/rejection decisions, and the resulting tamper-evident audit ledger and trust scores.
Connected-service credentials — where you connect a system of record (e.g., a CRM), we store the credential encrypted to write approved actions on your behalf.
Operational logs — security and diagnostic logs (e.g., authentication events, rate-limit and abuse signals).

2. The GATE Claude connector

When you connect GATE to Claude, the connector authenticates you (OAuth 2.0) and operates only within your own GATE tenant. It provides read tools (list your governed agents, look up a decision’s status, summarize your trust ledger and evidence) and one write tool that records and holds a proposed action for governance. Specifically:

The connector does not access your Claude chat history, memory, conversation summaries, or files. It does not execute payments or move funds. It reads and writes only your own tenant’s GATE governance data, scoped by your authenticated identity.

3. How we use information

To operate GATE — govern agent actions, record decisions, compute trust, and produce audit/evidence for you.
To authenticate users and secure the Services (fraud, abuse, and rate-limit protection).
To provide support and communicate service and security notices.

We do not sell your data, and we do not use your governance data to train AI models.

4. How we share information

We share information only with service providers that operate the Services under contract, and only as needed:

Amazon Web Services — hosting, storage, and identity (us-east-1).
A timestamping authority (DigiCert) — to obtain an external, tamper-evident time anchor for the audit ledger. Only a cryptographic hash is sent, never your content.
Your chosen model provider — only if you configure your own API key; prompts are sent to author drafts in your voice. Governed by that provider’s terms.
Email delivery — to send invitations and notices.

We may disclose information if required by law, or to protect the rights, safety, and security of our users and the Services. GATE is designed for tenant isolation: one customer’s data is never shared with another.

5. Data storage, location, and security

Data is stored in the United States (AWS us-east-1) and encrypted in transit (HTTPS/TLS) and at rest. The audit ledger is hash-chained and tamper-evident. Secrets and model-provider keys are encrypted; access is least-privilege and logged. No method of transmission or storage is perfectly secure, but we maintain administrative, technical, and organizational safeguards appropriate to the sensitivity of the data.

6. Data retention

Account and configuration data are retained while your account is active. Governance and audit records are retained to serve their compliance and evidentiary purpose and per your instructions and applicable law. On verified request we delete or de-identify personal data that we are not required to retain.

7. Your rights

Subject to applicable law (including Canadian PIPEDA and, where relevant, GDPR), you may request access to, correction of, or deletion of your personal data, and may withdraw consent. Contact us using the details below; we respond within the timeframes required by law.

8. Children

The Services are for business use and are not directed to children under 16. We do not knowingly collect their data.

9. Changes

We may update this Policy; material changes will be posted here with a new “Last updated” date.

10. Contact

Clairely Evidentia Corporation — Toronto, Canada.
Privacy inquiries: privacy@clairely.ai