CLARA Privacy Policy

Location data: we collect your precise device location to provide real-time environmental data (wind, air quality, heat, and noise) for your exact surroundings and to help you plan safe routes.

Legal reason: your explicit consent. You can withdraw this consent at any time in your device settings.

Account information: We collect your name, surname, and email address to create and manage your user account, save your preferences, and send you relevant environmental alerts.

Legal reason: Contractual necessity. We need this information to provide the core services you requested when signing up.

Location data: we process your location in real-time to fetch environmental data and we store your location history only as long as necessary to provide saved route features, after which it is deleted.

Account information: we keep your profile data as long as you maintain an active account. If you choose to delete your account, your personal data will be permanently erased from our active systems.

Cookies: the website uses one cookie, and only if you log in to a CLARA-web account. It is called clara_session and it holds nothing but a random identifier that tells our server you are logged in. It expires 30 days after you log in, or straight away when you log out. Scripts running in the page cannot read it, and it travels only over an encrypted connection.

No tracking: we use no analytics, no advertising and no tracking cookies, on any page. If you do not log in, the website stores nothing on your device. The login cookie is strictly necessary for a service you asked for, so European ePrivacy rules do not require your consent for it, and that is why you see no cookie banner. If we ever add anything beyond that, we will ask you first and update this page.

Hosting and what the pages load: the site is hosted by Cloudflare, and the icons and the styling library come from Cloudflare's public file service. The fonts are served from our own site, so no request goes to Google. Cloudflare sees the technical data any web server sees, your IP address among it, and acts as our processor.

The contact form: the name, email address and message you type are sent to us by email through Resend, our mail provider, and stay in our mailbox so we can answer you. We store them nowhere else. The form is protected by Cloudflare Turnstile, a check that tells a person apart from a script. It receives your IP address for that check and sets no cookie.

The Ask CLARA assistant: what you type is sent to Anthropic, which provides the language model that writes the answers. We keep no record of the conversation. If the assistant cannot answer, it can pass your question, along with the email address you give it, to our team by email through Resend. The same anti-spam check applies.

Legal reason: our legitimate interest in running a website that works and stays free of spam, and in replying to the people who write to us. For the login cookie, contractual necessity: your account cannot work without it.

Listing data: the address of the property and the reference of the listing, sent by the partner page to the widget so that the scores and the report are computed for that place. This data does not identify you.

Purchase data: the email address you give at checkout, the language you chose, and the payment details that Stripe passes on to us: a transaction reference, the amount, the currency and a link to your receipt. We never receive your card number. The email address is needed to deliver the report; without it there is no purchase.

Technical data: your IP address and request details, processed by Cloudflare for the duration of the request to deliver the widget, and used by us in hashed form for one day to limit free reports and payment attempts from one connection.

From the partner website: the listing data, whether or not you buy anything.

From you: your email address, at checkout or when you request a free report.

From Stripe: the details of your payment, once it is completed.

Automatically: the technical data. The widget sets no cookies and does not track your activity. When you buy a report, it keeps a random access code in your browser's local storage so that the report stays open when you return to the listing. For a free report, a Cloudflare Turnstile check confirms that the request comes from a person; it receives your IP address and sets no cookie.

Delivering the report you bought: computing it for the property address, sending it to your email address as a PDF and keeping a web version available to you for 30 days.

Keeping the record of your purchase: for our bookkeeping.

Protecting the service against abuse: limiting free reports and payment attempts and confirming that requests come from a person.

Reporting usage figures to our partners: aggregate totals of widget views, clicks and purchases per partner website, with no information about you.

Legal reason: performance of a contract for the delivery of the report, legal obligation for the bookkeeping, and legitimate interest for the protection of the service and the usage figures. We take no automated decisions about you and build no profile: the scores describe the property, not the person.

Service providers: acting on our instructions: Stripe (payment processing, on its own pages and under its own privacy policy), Cloudflare (hosting, storage of the reports and the Turnstile check), Resend (delivery of the report emails), Mapbox (locating the property address; it receives the address only) and Hetzner (a relay server in Germany through which the requests to our own computing servers pass; it stores nothing and carries no data about you). The scores themselves are computed on our own servers in Belgium. These providers may use the data only to perform these tasks on our behalf.

Partner websites: the partner website that shows the widget receives aggregate usage figures only, never your email address or the details of your purchases.

Legal requirements: we may disclose your personal data where this is necessary to comply with a legal obligation or to protect our rights.

Transfers: Stripe, Cloudflare, Resend and Mapbox are based in the United States. We rely on Standard Contractual Clauses approved by the European Commission or on another valid transfer mechanism under the GDPR.

The report files and the link to the web version are deleted 30 days after the purchase. The record of your purchase is kept for the period required by Belgian accounting law. The hashed counters used against abuse are deleted after one day. Usage figures are kept as aggregate totals only. Your rights, described in section 7 (Your rights) below, apply to all of this data.