This Privacy Policy explains how Clutchly (“Clutchly,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit clutchly.app, use the Clutchly dashboard, or interact with our sales and support channels (collectively, the “Service”). By using the Service you agree to the practices described here.
Information we collect
Information you provide. When you create an account, book a demo, contact sales, or submit a support request, we collect the information you give us — typically your name, work email, dealership or company name, role, phone number (if provided), and the contents of any messages you send.
Customer data. When you use the dashboard, you upload or generate data about your inventory, listings, customers, bookings, and team members. We process that data on your behalf as described in our customer agreement.
Authentication data. Sign-in is handled by Clerk. Depending on the method you choose, Clerk processes your email address, password (hashed), session tokens, and — for social sign-in — the basic profile fields the identity provider returns.
Usage and device data. We automatically collect technical information when you use the Service, including IP address, browser type and version, operating system, device identifiers, referring and exit pages, pages and features used, and timestamps.
Cookies and similar technologies. We use cookies and similar storage to keep you signed in, remember preferences, secure the Service, and measure product usage. You can control cookies through your browser; disabling them may break parts of the Service.
How we use information
We use the information we collect to:
- provide, operate, secure, and improve the Service;
- create and manage your account and authenticate your sessions;
- communicate with you about the Service, including transactional messages, security notices, and product updates;
- respond to demo requests, sales inquiries, and support tickets;
- understand how the Service is used so we can improve features, performance, and reliability;
- detect, investigate, and prevent fraud, abuse, and security incidents;
- comply with legal obligations and enforce our terms.
We do not sell personal information, and we do not use your customer data to train third-party AI models.
Legal bases (EEA / UK users)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR/UK GDPR: performance of a contract (to deliver the Service you signed up for), legitimate interests (to secure, improve, and market the Service in a way that is proportionate to your privacy), consent (for optional analytics or marketing where required), and legal obligation.
How we share information
We share information only as described below.
Service providers (subprocessors). We share information with vendors that help us run the Service. They are bound by contract to use the data only to provide their service to us. Current key subprocessors include:
- Vercel — hosting for the marketing site and dashboard
- Railway — hosting for the API
- Neon — managed Postgres database
- Clerk — authentication and session management
- Sentry — error monitoring, performance tracing, and logs
- PostHog — product analytics
- Attio — CRM for demo and sales inquiries
We may update this list as our infrastructure evolves; the most current version is reflected here.
Legal and safety. We may disclose information if we believe in good faith that it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of Clutchly, our users, or others.
Business transfers. If Clutchly is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any such change.
With your direction. We share information with third parties when you ask us to or otherwise direct us to (for example, by enabling an integration).
International transfers
Clutchly is operated from the United States, and our subprocessors may process data in the U.S. and other countries. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and equivalent UK and Swiss mechanisms.
Data retention
We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. You can request deletion of your account at any time by emailing privacy@clutchly.app.
Cookies and tracking
We use cookies and similar storage to run product analytics (PostHog) and traffic measurement (Vercel Web Analytics and Speed Insights). You can opt out at any time using the Cookie preferences link in the site footer — your choice is saved on this device and tracking will stop on the next page load.
Your rights
Depending on where you live, you may have rights to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- export a portable copy of your information;
- object to or restrict certain processing;
- withdraw consent where we rely on it;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@clutchly.app. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
If you are a California resident, you also have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.
Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, audit logging, and vendor due diligence. No system is perfectly secure, but we work to keep yours protected. To report a security concern, email security@clutchly.app.
Children’s privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact privacy@clutchly.app and we will delete it.
Marketing communications
We may send you product news, tips, and offers about Clutchly. You can opt out at any time using the unsubscribe link in any marketing email or by emailing privacy@clutchly.app. Transactional and security messages will continue regardless.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated through the Service or by email before they take effect.
Contact us
Questions about this policy or our privacy practices? Email privacy@clutchly.app.