Privacy Policy

Last Updated: February 14, 2026

At ClavCast ("we," "our," or "us"), we respect your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (the "Service").

1. Information We Collect

Data from Connected Social Platforms

When you log in via X (formerly Twitter), Bluesky, or Threads, we collect the profile information you authorize us to access, which typically includes:

• Your handle (username) and display name.
• Your bio/profile description.
• Your profile image URL or avatar.
• Your follower/following counts, metrics, and account creation date (where available).
• Your location (if publicly listed on platforms that support it).

Usage Data

We may automatically collect certain information when you visit, use, or navigate the Service, such as IP address, browser type, operating system, and access times.

Generated Content

We collect and store the "persona" descriptions generated by our AI system for your account.

2. How We Use Your Information

We use the information we collect to:

• Authenticate your identity via your connected social platforms.
• Generate your personalized "Clavicular" persona using LLM technology.
• Display your persona and profile information within the app.
• Maintain and improve our Service, including debugging and analytics.
• Comply with legal obligations and enforce our Terms of Service.

3. Data Sharing and Disclosure

We do not sell your personal data. We disclose your information only in the following situations:

• Service Providers: We share data with third-party vendors who perform services for us, such as:
  • LLM Providers (e.g., OpenAI): We send your bios and publicly available profile data to generate the persona.
  • Hosting & Database: To store your cached persona and session data (e.g., Vercel, Upstash/Redis).
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities.

4. Data Retention

We retain your cached persona and profile data for a limited period (typically 7 days) to improve performance and reduce API calls. Session cookies expire automatically (typically 30 days). You may clear your session at any time by logging out.

5. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access and Correction: You can view your data by logging into the Service. You can correct your profile data on your connected platforms (X, Bluesky, or Threads) directly, and then regenerate your persona on our Service.
• Deletion: You may request the deletion of your account/data from our systems by contacting us.

6. Security

We use administrative, technical, and physical security measures (including HTTPS encryption) to help protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

7. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last Updated" date and the updated version will be effective as soon as it is accessible.