Privacy Policy

1. Two roles: business and service provider

• Site, marketing and recruiting. We decide how this information is used, so we act as a “business” (or “controller”) under US state privacy laws. Sections 2 to 9 cover this information.
• The Platform. Our customers use the Platform to govern their workforce’s access to systems. We process that workforce data only on the customer’s instructions and under our agreement with them, as a “service provider” (or “processor”). Section 10 covers this data. If you are an employee or contractor of one of our customers, your employer controls your data, and requests about it should go to them first.

2. Personal information we collect

In the past 12 months we collected the following categories of personal information, as the California Consumer Privacy Act (CCPA) defines them.

We do not collect precise geolocation, government identifiers, financial account numbers or other sensitive personal information through the Site. We do not use or disclose sensitive personal information for any purpose that would require us to offer a right to limit its use.

3. How we use personal information

• To respond to your requests, schedule demos and provide support.
• To send marketing emails about our products and events. You can unsubscribe from any marketing email using its “unsubscribe” link.
• To understand how the Site is used and improve it, including through analytics and session recording.
• To show you advertising for Clarity on other websites and measure how well it works.
• To evaluate job applications.
• To secure the Site, prevent fraud and abuse, and comply with the law.

4. Cookies, pixels and similar technologies

The Site uses cookies, pixels and scripts from the following providers.

You can block or delete cookies in your browser settings. Parts of the Site may not work properly without them. To opt out of advertising cookies and pixels, use the “Your Privacy Choices” link in the Site footer, or turn on Global Privacy Control in your browser (see section 6).

5. How we disclose personal information

We do not sell personal information for money. Allowing the advertising providers in section 4 to collect identifiers and internet activity through the Site for cross-context behavioral advertising counts as “sharing” under the CCPA, and may count as “selling” or “targeted advertising” under other state laws. In the past 12 months we shared identifiers, internet or network activity and inferences this way. You can opt out at any time (section 6).

We also disclose personal information to:

• Service providers that process it for us under contracts that limit their use of it to the services they provide: hosting, our CRM and marketing platform (HubSpot), analytics, email delivery, video conferencing and recruiting software.
• Professional advisers such as lawyers, auditors and insurers, under confidentiality obligations.
• Authorities, when we believe in good faith that the law or legal process requires it, or to protect the rights, property or safety of Clarity Security, our customers or others.
• A successor in a merger, acquisition or sale of assets. We will notify you by email or a prominent notice on the Site before your information becomes subject to a different privacy policy.

We do not knowingly sell or share the personal information of anyone under 16.

6. Your privacy rights

Depending on the state you live in, including California, Virginia, Colorado, Connecticut, Texas and other states with consumer privacy laws, you have the right to:

• Know and access the personal information we hold about you, including the categories, sources, purposes and the third parties we disclose it to, and get a copy in a portable format.
• Correct inaccurate personal information.
• Delete personal information we collected from you, subject to legal exceptions.
• Opt out of sale, sharing and targeted advertising. Use the “Your Privacy Choices” link in the Site footer. We treat a Global Privacy Control signal from your browser as a valid opt-out for that browser.
• Opt out of profiling that produces legal or similarly significant effects. We do not use personal information for such profiling.
• Not be discriminated against for using any of these rights.

To make a request, email privacy@claritysecurity.com. We will confirm receipt within 10 business days and respond within 45 days, or tell you if we need up to 45 more days. To protect your information, we verify your identity by matching information you give us against what we hold. An authorized agent can make a request for you with your signed permission, and we may ask you to confirm your identity with us directly.

If we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. We will respond to an appeal within 45 days (60 days in Colorado). If the appeal is denied, you can contact your state attorney general.

7. How long we keep personal information

8. How we protect personal information

We protect personal information with administrative, technical and physical safeguards, including encryption in transit and at rest, multi-factor authentication, access limited to those who need it, and annual independent SOC 2 Type 2 audits. No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you as the law requires.

9. Children

The Site is not directed to children under 16, and we do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

10. Personal information in the Clarity platform

Customers connect the Platform to their identity, HR and business systems. The Platform processes workforce identity data from those systems: names, business email addresses, job titles, departments, managers, employee and account identifiers, group memberships, entitlements and access activity. We process this data only to provide the Platform under the customer’s agreement, and we do not sell or share it, use it for advertising, or combine it with other customers’ data or with our marketing data.

We use these subprocessors for Platform data:

The Platform’s AI features process customer data only when a feature runs. Neither Clarity Security nor our AI providers use customer data to train AI models.

Platform data is kept for as long as the customer’s agreement requires and deleted afterward according to that agreement. If you send us a privacy request about Platform data, we will forward it to your employer and help them respond.

11. Location of processing

We store and process personal information in the United States. The Site and the Platform are intended for use in the United States.

12. Changes to this policy

When we change this policy, we post the new version here and update the date at the top. If we make a material change, we will also notify customers’ named contacts by email and post a notice on the Site before the change takes effect.

13. Contact us

Privacy questions and requests: privacy@claritysecurity.com

Clarity Security Corporation, 9600 Great Hills Trail, Suite 150W, Austin, TX 78759