Legal
Privacy Notice
Last updated October 20, 2026
Hunter BI LLC is the data controller for personal data processed through Clodou (https://clodou.com). For any privacy request, contact support@clodou.com.
1. Categories of personal data we collect
- Account data — name, email address, password hash, workspace and role, sign-in method (email or Google).
- Business profile data — company name, address, tax or EIN identifiers, logo, payment link.
- Customer and supplier records you enter — names, emails, phone numbers, addresses and notes about your own clients and suppliers.
- Business content — quotes, invoices, expenses, receipts, projects, tasks, time entries and the chat messages you exchange with the AI assistant.
- Billing data — subscription plan, status, seat count and payment identifiers. We never see or store your full card details.
- Technical data — IP address, device and browser information, log and error data, and usage events.
2. Why we use it
- to provide, secure and support the service (contract);
- to process payments and prevent fraud (contract, legal obligation);
- to operate the AI assistant on the records you ask it to work with (contract);
- to improve reliability and performance (legitimate interests);
- to send service and, with consent, product emails.
3. Who we share it with
We share personal data only with processors and partners that help run Clodou:
- Stripe — our payment processor; receives the billing details and card data you enter at checkout and handles them under its own privacy policy. Clodou never stores full card numbers.
- Hosting and database infrastructure — stores and serves your workspace data.
- AI model provider — receives the message and record content needed to answer your request; it is not used to train models on your data.
- Email delivery provider — sends account and reminder emails you trigger.
- Authorities, where required by law, and advisers in connection with a business transfer.
We do not sell personal data or share it for cross-context behavioural advertising.
4. International transfers
Our providers may process data in the United States and the European Union. Where data leaves your region we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.
5. Retention
We keep workspace data for as long as your account is active. After deletion we remove or anonymise it within 90 days, except records we must keep for tax, accounting or fraud-prevention purposes (typically up to seven years for invoices and payment records).
6. Security
Data is encrypted in transit, access is restricted to your workspace by database-level access rules, files are stored privately and served through short-lived signed links, and administrative access is limited to staff who need it.
7. Your rights
Depending on where you live you may request access, correction, deletion, a copy of your data, restriction or objection to processing, and you can withdraw consent to marketing at any time. Email support@clodou.com and we will respond within one month. You may also complain to your local data protection authority.
8. Children
Clodou is for business use and is not directed at children under 16.
9. Changes
We will post updates on this page and change the date above; material changes are announced in the app or by email.
