Privacy Policy
Last updated: February 28, 2025
Clavro is a service operated by Key Pulse Systems, LLC. This Privacy Policy describes how we collect, use, and protect information when you use the Clavro website (clavro.org), the Clavro control plane dashboard, APIs, and SDKs (collectively, the "Service").
1. Information We Collect
Account Information
When you create a Clavro account, we collect your name, email address, and password (stored as a salted hash). If you sign in via a social provider (e.g., Google, Apple), we receive your name, email, and profile picture URL from that provider.
End-User Data
When your application's end users authenticate through Clavro, we process their credentials and profile information on behalf of your application. You are the data controller for your end users' data; Clavro acts as a data processor.
Usage & Log Data
We collect server logs that may include IP addresses, request timestamps, user agents, and API endpoints accessed. This data is used for security monitoring, debugging, and rate limiting.
2. Cookies & Local Storage
Authentication Cookies
When you sign in to the Clavro dashboard, we set an httpOnly, secure, same-site cookie
(clavro_cp_access)
to maintain your session. This cookie is strictly necessary for the Service to function and cannot be disabled.
Preferences
We use browser localStorage
to remember your theme preference (light/dark mode). No personal data is stored in localStorage.
No Third-Party Tracking
We do not use third-party analytics, advertising cookies, or tracking pixels. We do not use Google Fonts or any third-party service that transfers user data to third parties. Fonts are loaded from Bunny Fonts, a GDPR-compliant, privacy-focused font CDN.
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To authenticate you and maintain your session
- To process your end users' authentication requests on your behalf
- To send transactional emails (password resets, email verification, account notifications)
- To monitor for abuse, enforce rate limits, and maintain security
- To respond to support requests
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Storage & Security
All data is encrypted in transit (TLS) and at rest. Passwords are hashed using industry-standard algorithms and are never stored in plaintext. API keys and secrets are encrypted before storage.
Each application instance on Clavro maintains isolated data — one instance's users, sessions, and configuration are never accessible to another instance.
5. Data Retention
We retain your account data for as long as your account is active. Server logs are retained for up to 90 days. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict certain processing
To exercise any of these rights, contact us at [email protected].
7. Third-Party Services
The Service may integrate with third-party identity providers (Google, Apple) at your direction. When you or your end users authenticate via a social provider, that provider's privacy policy applies to the data they process. We only receive the information described in Section 1.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Key Pulse Systems, LLC