Privacy Policy

1. Introduction

Clor ("we," "us," "our"), a California limited liability company, operates the Clor CLI and clor.com (the "Service"). This policy explains what information we collect, how we use it, and the choices you have.

2. How Clor works

Clor augments your AI agent. We shape, route, and execute the work your agent asks us to do, including optimizing tasks, reducing token usage, and producing the final result. This deep involvement is what makes Clor work as well as it does, and it means we process the inputs and outputs of that work to deliver it.

3. Information we collect

Account information. When you create an account we collect your email address and, if you sign in via OAuth, the basic profile fields the provider returns (name, profile picture).

Usage data. When your agent uses Clor, we collect and process the information needed to deliver the Service, including billing you accurately, enforcing limits, providing support, and improving the product.

Payment information. Card details are collected and stored by Stripe, our payment processor. We never see or store full card numbers. We retain the Stripe customer ID, invoice records, and the last four digits of the card for receipts and support.

Support content. If you contact support or file a ticket, we keep the messages and any attachments you send.

Device and log data. Our servers log IP addresses, user-agent strings, and timestamps for security, abuse prevention, and debugging.

4. How we use information

• Provide, maintain, and improve the Service
• Authenticate you and authorize API calls
• Meter usage and bill for credits consumed
• Send transactional email (receipts, security alerts, account notices)
• Respond to support requests
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

5. How we share information

We do not sell your personal information. We share information only as needed to operate the Service:

• Service providers. Stripe (payments), our cloud and email infrastructure providers, and the upstream AI providers your agent calls through Clor (Anthropic, OpenAI, Google, ElevenLabs) receive only what they need to perform the requested work.
• Legal requirements. When required by law, subpoena, or valid legal process.
• Protection of rights. To protect the rights, property, or safety of Clor, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, with notice to affected users.

6. Where your data is stored

Our servers and primary data store run in the United States. Some service providers may process data in other regions; in each case, the provider operates under its own privacy commitments.

7. Data security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, encrypted secret storage, hashed API key secrets, and access controls. No system is perfectly secure, and we cannot guarantee absolute security. To report a vulnerability, see our Security page.

8. Data retention

We retain account and usage data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. Invoice records are retained as long as required by tax law. Backups are rotated on a regular schedule.

9. Account deletion

You can request deletion of your account at any time by emailing support@clor.com from the address on file. We will delete your account, stored secrets, API keys, and personal profile data within 30 days. We may retain invoice records, anonymized usage aggregates, and information required by law.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal information, and to receive a copy in a portable format. To exercise these rights, email privacy@clor.com.

11. California privacy rights

California residents have additional rights under the CCPA, including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

12. Cookies

We use a small number of first-party cookies to keep you signed in and to remember your selected agent. We do not use third-party advertising or tracking cookies.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them. If we learn we have collected such information, we will delete it.

14. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date; continued use of the Service after changes take effect constitutes acceptance.

15. Contact

Privacy questions: privacy@clor.com. General support: support@clor.com.