Privacy Policy

1. Who We Are

Clarix ("Clarix", "we", "us", or "our") operates the website clarix.digital — India's First AI Prompt Engine. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

For privacy-related queries, contact us at: privacy@clarix.digital

2. Data We Collect and Why

We collect the following personal data when you use Clarix:

A. Account & Identity Data (via Google Sign-In)

• Your name and email address (provided by Google OAuth)
• Your Google profile photo
• A unique user ID (Firebase UID)

Why: To create and manage your Clarix account and personalise your experience.

Processed by: Google Firebase Authentication. By signing in with Google, you also agree to Google's Privacy Policy.

B. Usage & Profile Data (stored in our database)

• Your preferred display name / creator alias
• Your chosen language and AI platform preferences
• Your country and country code (auto-detected)
• Number of AI prompts used (trial usage counter)
• Daily usage count
• Pro/Free plan status
• Account creation date

Why: To enforce usage limits, personalise content by country and language, and track subscription status.

Stored in: Google Firestore (cloud database). Data is stored on Google Cloud servers, which may be located outside India. Google complies with applicable data protection standards.

C. Location Data (IP-based)

• Your approximate country and country code (detected from your IP address at sign-in)

Why: To show you country-specific language options, festivals, and content.

Detected by: ipapi.co (a third-party IP geolocation service). Your full IP address is not stored by Clarix. Only the resulting country name and code is saved to your profile.

D. Prompt & Content Data

• The text you enter into the Write / Inspire tools is sent to our secure server for AI processing
• Your prompt text is processed to generate an enhanced output
• We do not store your prompt text on our servers — it is processed in real-time and the result returned to you
• Your prompt history is saved in your browser's localStorage only (locally on your device)

Third-party AI processing: Your prompt text is sent to one of the following AI services for processing: Google Gemini, Groq (Meta LLaMA), or Anthropic Claude. These services process your prompt under their own privacy policies. We send only the prompt text — no personally identifiable information is sent to AI providers.

E. Analytics Data

• Page views, session duration, and navigation patterns
• Device type, browser, and approximate location (country level)

Collected by: Google Analytics 4 (GA4). This helps us understand how users use Clarix so we can improve it. GA4 uses cookies and may track your device across sessions. You can opt out via Google Analytics Opt-out.

F. Browser Local Storage

• Onboarding completion status
• Language and platform preferences (backup copy)
• Your prompt history (stored locally on your device only)
• Pro/Free status (sync with server)

Note: localStorage data stays on your device and is never transmitted to Clarix servers unless it is also synced to Firestore (as listed in Section 2B above).

3. What We Do NOT Collect

• We do not collect your phone number (unless you provide it in support emails)
• We do not store your full payment card details (payment is handled by Razorpay)
• We do not collect biometric data
• We do not collect sensitive personal data as defined under the IT Act 2000
• We do not run advertising networks or sell data to advertisers
• We do not knowingly collect data from children under 13 years of age

4. Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, we process your personal data based on:

• Consent: You consent by signing in with Google and agreeing to our Terms & Privacy Policy
• Legitimate interest: Analytics, abuse prevention, rate limiting, and service improvement
• Contractual necessity: Usage tracking is required to enforce free trial limits and Pro plan access

5. Third-Party Services We Use

Service	Purpose	Data Shared	Privacy Policy
Google Firebase Auth	User sign-in	Name, email, photo	Google
Google Firestore	User profile & usage storage	Profile + usage data	Google
Google Analytics 4	Usage analytics	Anonymous behavioural data	Google
ipapi.co	Country detection	IP address (not stored)	ipapi.co
Google Gemini	AI prompt processing	Prompt text only	Google
Groq (LLaMA)	AI prompt processing	Prompt text only	Groq
Anthropic Claude	AI prompt processing	Prompt text only	Anthropic
Razorpay	Payment processing (when applicable)	Payment details	Razorpay
Vercel	Web hosting & serverless functions	Request metadata	Vercel

6. Data Storage & International Transfers

Your data is stored on Google Cloud infrastructure (Firebase / Firestore). Google Cloud servers are located globally and may be outside India. Google complies with international data protection standards including ISO 27001 and SOC 2.

As a data fiduciary under the DPDP Act 2023, Clarix takes reasonable steps to ensure that any cross-border transfer of your data is subject to appropriate safeguards.

7. Data Retention

We retain your data for as long as your account is active. If you request deletion of your account:

• Your Firestore profile document will be deleted within 30 days
• Your Firebase Auth account will be removed
• Analytics data (GA4) may persist in anonymised/aggregated form
• Browser localStorage data — clear manually (see Section 9)

8. Your Rights (DPDP Act 2023 & IT Act 2000)

As a data principal under Indian law, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate data (update via Profile page)
• Erasure: Request deletion of your account and all associated data
• Withdraw consent: Stop using Clarix and request account deletion at any time
• Grievance: File a complaint with our Grievance Officer (see Section 11)

To exercise any of these rights, email: privacy@clarix.digital

We will respond within 30 days of receiving your request.

9. How to Delete Your Data

Server-side data (Firestore): Email us at privacy@clarix.digital with subject "Account Deletion Request". We will permanently delete your Firestore profile within 30 days.

Browser data (localStorage): Open your browser → Settings → Privacy → Clear site data for clarix.digital. Alternatively: Developer Tools → Application → Local Storage → delete all entries starting with "clarix_".

Google Auth: You can revoke Clarix's access to your Google account at myaccount.google.com/permissions.

10. Security

We implement the following security measures:

• All data is transmitted over HTTPS (TLS encryption)
• Firebase Authentication tokens are validated server-side on every API request
• API keys (Gemini, Groq, Claude) are stored only in secure server environment variables — never exposed to the browser
• Rate limiting (10 requests per minute per user) to prevent abuse
• Input sanitization to prevent injection attacks
• CORS restricted to clarix.digital domain only

Despite our best efforts, no system is 100% secure. In the event of a data breach affecting your personal data, we will notify you within 72 hours as required by applicable law.

11. Grievance Officer

As required under the Consumer Protection Act 2019 and IT Act 2000, we have designated a Grievance Officer to address your privacy and data-related complaints:

12. Children's Privacy

Clarix is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal information to Clarix, please contact us at privacy@clarix.digital and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of Clarix after changes constitutes acceptance of the updated policy. We recommend reviewing this page periodically.

14. Governing Law

This Privacy Policy is governed by the laws of India, including the Information Technology Act 2000, the Digital Personal Data Protection Act 2023, and the Consumer Protection Act 2019. Any disputes shall be subject to the jurisdiction of courts in India.

15. Contact Us

For any privacy-related queries or requests:

• Email: privacy@clarix.digital
• Grievance: grievance@clarix.digital
• Website: clarix.digital