Privacy Policy
Effective date: October 24, 2026
The short version: the text and images you check are analyzed in memory and thrown away. We never store them, sell them, or use them to train AI. Plagiarism and fact checks send short excerpts to search engines to find sources. We keep only what we need to run your account and subscription. Payments are handled by Stripe, so we never see your card number. Advertising and analytics cookies are only used if you accept them.
1. Who is responsible for your data
Pearson Phillips, Austin, Texas, USA ("we", "us") is the controller of personal data processed through Clarity (the "Service"). Contact us about privacy at [email protected].
2. What we collect and why
| Data | Why we use it | Legal basis (EU/UK) |
|---|---|---|
| Content you check (text, documents, images) | Only to produce your result. Processed in memory and discarded when the result is returned. Never written to disk, logged, sold, or used for training. For plagiarism and fact checks, short excerpts (a sentence or phrase at a time) are sent as search queries to Wikipedia and our web search provider to find sources; they receive the query only, never your account details. | Performance of contract |
| Account data: email address, optional name, password (stored only as an Argon2id hash), sign-in provider and its user ID if you use Google, Apple, Microsoft or Facebook sign-in | To create and secure your account and let you log in | Performance of contract |
| Subscription data: Stripe customer and subscription IDs, plan status, trial and renewal dates | To provide Pro and manage billing | Performance of contract; legal obligations (tax and accounting records, kept by Stripe) |
| Session data: a random session token (we store only a hash of it), browser type, creation and expiry time | To keep you logged in and let you sign out of all devices | Performance of contract; legitimate interests (security) |
| Usage counters: a one-way hash of your IP address and a daily count of free checks, deleted after 2 days | To enforce free plan limits and prevent abuse | Legitimate interests |
| Free trial record: a salted one-way hash of your email address, kept if you used a free trial, including after account deletion. The hash can't be turned back into your email. | To make sure each person gets one free trial | Legitimate interests (preventing trial abuse) |
| Server logs: IP address, request time and path, error details (never your content) | Security, debugging and abuse prevention; kept for up to 30 days | Legitimate interests |
| Advertising and analytics data (only if you accept cookies): pages viewed, sign-ups and trial starts, device and browser information | To measure and improve our advertising and website | Consent |
| Messages you send us | To respond to you | Legitimate interests |
We do not collect your payment card details. You enter them on Stripe's secure checkout page, and Stripe processes them under its own privacy policy.
3. Cookies and similar technologies
- Essential cookies (always on): a session cookie that keeps you logged in, and a short-lived cookie used only during third-party sign-in to protect against forgery. These are required for the Service to work.
- Advertising and analytics (only with your consent): if enabled on this site, the Meta Pixel (Meta Platforms) and Google Analytics measure visits and conversions such as sign-ups and trial starts, so we can see which ads work. You can change your choice anytime with "Cookie settings" in the footer.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising unless you accept advertising cookies.
4. Who we share data with
We share personal data only with service providers that help us run the Service, under contracts that require them to protect it:
- Hosting provider, which runs our servers;
- Stripe, for payments and subscription management;
- Sign-in providers you choose to use (Google, Apple, Microsoft, Facebook), which tell us your email and an account ID;
- Email delivery provider, to send password-reset and account emails;
- Wikipedia (Wikimedia Foundation) and our web search provider (Brave Search), which receive short text excerpts as search queries when you run a plagiarism or fact check;
- Meta and Google, only if you accept advertising and analytics cookies.
We may also disclose data if required by law, to protect rights and safety, or as part of a merger or acquisition (in which case this policy will continue to apply to your data).
5. How long we keep data
Content you check: not kept at all. Account and subscription data: for as long as your account exists; when you delete your account, we delete it immediately, except records we must keep by law (such as billing records held by Stripe) and the free trial record described above. Usage counters: 2 days. Sessions: until they expire (30 days) or you log out. Server logs: up to 30 days.
6. Security
We protect your data with encryption in transit (HTTPS), Argon2id password hashing, hashed session tokens that can be revoked, protection against cross-site request forgery, rate limiting on sign-in, and access restricted to the database. Payment data never touches our servers. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
7. Your rights
Depending on where you live (including under the GDPR, UK GDPR and California and other US state privacy laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to not be discriminated against for exercising these rights.
- Delete your account instantly from the account menu ("Delete account").
- Withdraw cookie consent with "Cookie settings" in the footer.
- For any other request, email [email protected]. We will respond within 30 days and may need to verify your identity.
If you are in the EU or UK, you can also complain to your local data protection authority.
8. International transfers
Our service providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
9. Children
The Service is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
10. Automated processing
Our detection results are produced automatically, but we do not use them to make decisions about you. If you use results to make decisions about other people, you are responsible for doing so lawfully and fairly, as explained in our Terms of Service.
11. Changes to this policy
We will post any changes on this page and update the effective date. If changes are material, we will notify you by email or on the Service before they take effect.
12. Contact
Pearson Phillips, Austin, Texas, USA. Email: [email protected].