Privacy Policy

This policy describes what Clandar (“the app,” “we”) collects, why, and how it’s used, for the account holder and anyone they invite to their organization’s workspace. Operator: XNJGROUP LLC. Contact: privacy@clandar.com.

What we collect

• Google account info. Signing in with Google shares your name, email address, and profile photo. This creates your account and lets your teammates see who’s who — it’s never used for anything else.
• Gmail and Calendar data — only if you connect an account. Connecting Gmail (on the Connectors page) grants read/write access (the gmail.modify scope: reading, organizing, labeling, trashing, and sending mail — never permanently deleting anything, and never sending anything without you clicking “Send”). Connecting Calendar grants read-only access. This data is read live from Google each time it’s needed; the app does not keep a standing copy of your mailbox.
• Apple Calendar — only in the iPhone app, and only if you connect it. Events are read on your iPhone to show them next to your schedule. If you allow the assistant to read your calendar, the next two weeks of events are sent with your chat messages so it can answer about them; they aren’t stored separately. The app adds or deletes a calendar event only when you confirm that change in the app.
• Business data you enter. Customers, jobs, estimates, schedule entries, tasks, invoices, vendors, and any photos or files you upload for a job. This is stored in our database and file storage so the app can show it back to you and your team.
• AI provider credentials. If you configure an LLM provider (OpenAI, a local server, etc.) on the Settings page, its API key is encrypted (AES-256-GCM) before it’s stored and is never shown back to you or sent anywhere except that provider.
• Session data. A signed, httpOnly cookie identifies your session. We don’t use advertising cookies or tracking pixels.
• Usage analytics. We use Google Analytics to count visits and see which parts of the app are used. It sets cookies and receives your IP address, browser details and which pages you view. We only send page names with record ids removed (for example “/projects/:id”) — never search terms, filters, or any of your customers, jobs, email or other business data. You can opt out with Google’s opt-out browser add-on or by blocking cookies for clandar.com.

How AI features use your data

Quoting (photos → estimate) and inbox cleanup suggestions work by sending the relevant content — job photos and a short description for quoting, or message metadata for cleanup — to whichever AI provider your organization has configured on the Settings page. That may be OpenAI, another cloud provider, or a server you run yourself. We do not use your data to train any AI model. What that third-party provider does with the data it receives is governed by its own terms — review them before connecting a provider you don’t control.

How we use Gmail data specifically

Gmail access exists to power features you explicitly use: showing your inbox, drafting/sending a reply or an estimate email, and suggesting low-value messages to clean up. Gmail data is never sold, never used for advertising, and never shared except with the AI provider you’ve configured, and only for the specific action you triggered (e.g., summarizing the message you’re looking at). This use is consistent with Google’s API Services User Data Policy, including its Limited Use requirements.

Sharing

We don’t sell personal data. Data is shared only with: Google (to authenticate you and, if you connect it, to read/send mail or calendar events on your behalf; and Google Analytics for page-view statistics, as described above), the AI provider your org configures, and other members of your own organization (customers, jobs, invoices, etc. are visible to your teammates by design).

Data retention and deletion

Business data is kept until you delete it or your account is closed. Deleting a job also deletes its uploaded photos and files from storage. To close your account or request deletion of your data, contact privacy@clandar.com.

Security

API keys and connector secrets are encrypted at rest (AES-256-GCM). Sessions use signed, httpOnly cookies. Access to your organization’s data is limited to signed-in members of that organization.

Children

Clandar is a business tool and isn’t directed at or knowingly used by children under 13.

Changes to this policy

If this policy changes materially, we’ll update the date above. Continued use after a change means you accept the update.

Contact

Questions about this policy or your data: privacy@clandar.com.