Privacy policy
Version of 10 November 2026, revision 2 · Version française
This English version is provided for convenience. In case of discrepancy, the French version prevails.
Clariqo turns the emails in your inboxes into actions to follow up. This page explains what data we read, what we do with it, how long we keep it and how to exercise your rights.
1. Data controller
Samuel Benzakour, sole trader, 237 route de Vienne, 69200 Vénissieux, France. Contact for any question about your data: [email protected] or the contact form (subject “Other”).
2. Data processed
| Data | Why | Kept |
|---|---|---|
| Account: display name, sign-in email address, password (stored encrypted, never readable), or Google or Microsoft identifier if you sign in with them | Create and secure your account | Yes, as long as the account exists |
| Access to your inboxes: address of each connected inbox and encrypted read-only access token | Read your messages for synchronisation | Until you remove the inbox or delete the account |
| Content of your emails: subject, sender, recipients, date, short excerpt, and for threads deemed relevant the message text | Identify actions and keep them up to date | The full text is not stored: it is re-read from your inbox whenever needed. We keep the subject, correspondents' names, dates, short excerpts (a few lines) and the technical references of the messages. |
| What you create: topics, actions, deadlines, categories, filters, change history, decisions on suggestions | Provide the service | Yes, as long as the account exists |
| Google Calendar (if you turn it on): events in your primary calendar and, in shared calendars, those you organise or are invited to (title, times, location, video call link, participants, description); events created by Clariqo in your calendar | Show your calendar in Clariqo's calendar without duplicates; add your deadlines to it | Events read are displayed without being stored by Clariqo; those Clariqo creates remain in your Google Calendar, according to your settings |
| Invitations received by email (Outlook in particular): title, times, location and organiser of an invitation, read from the message | Show these appointments in Clariqo's calendar | As long as the account exists; removed if the invitation is cancelled |
| Technical data: number and cost of AI analyses, references of messages already analysed, synchronisation log | Security, abuse prevention, cost control | 12 months |
| Waitlist (if you sign up without an account): email address, profile and problem mentioned (optional), date and version of your consent, address confirmation, language | Notify you when Clariqo opens and send you an invitation; measure interest in the service | Until your invitation or unsubscription, and at most 24 months; an unconfirmed sign-up is deleted after 30 days |
| Contact form: name (optional), email address, subject and text of the message, page it was sent from, Clariqo account if you are signed in | Reply to your message | The message is not stored in Clariqo: it is forwarded by email (via Resend, then Cloudflare's email routing) to the publisher's mailbox, hosted by Google, who keeps it while handling your request, and at most 3 years |
| Your consent to the terms of use: date and version | Proof of acceptance | Lifetime of the account, then 5 years |
Required data. Your email address and a password (or sign-in with Google) are required to create an account, and access to at least one inbox is required for Clariqo to identify your actions: without them, the service cannot work. Your display name, calendar, and the profile and problem given when joining the waitlist are optional.
Clariqo only accesses your inboxes in read-only mode: it cannot send, delete or modify your emails.
3. Analysis by artificial intelligence
To identify actions, the text of the relevant messages (without quotations of previous messages) is sent to an artificial intelligence service: Anthropic, PBC (United States), acting as a processor. It returns a structured suggestion (tasks, deadlines, category) that Clariqo stores. Anthropic does not use this data to train its models and deletes it automatically within 30 days. The only exceptions in its terms: content flagged by its safety systems as violating its usage policy may be kept for up to 2 years, and longer retention may be required by law.
The AI's suggestions may be inaccurate: uncertain changes are presented to you in “To confirm” before being applied.
No automated decisions about you. The AI only sorts and suggests actions in your own space. No decision producing legal effects concerning you or similarly significantly affecting you is based solely on this automated processing (Article 22 GDPR): you stay in control of every action.
4. Data from Google and Microsoft
Data obtained through Google interfaces (Gmail, Google Calendar, sign-in with Google) and Microsoft interfaces (Outlook) is used only to provide the Clariqo features you use. It is never sold, used for advertising or used to train general-purpose artificial intelligence models. Nobody reads your emails, except with your explicit consent (for example to solve a problem you report), for security reasons or where required by law.
Clariqo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Have you written to a Clariqo user?
If you exchange emails with someone who uses Clariqo, the messages in that exchange may be read by Clariqo in their inbox and analysed to help them keep track of their own actions. We cannot notify you individually: we do not know you, and writing to you would mean using your data further. This section therefore informs you publicly (Article 14(5)(b) GDPR).
- Data concerned: your name and email address as they appear in the message, the date, the subject and the text of the message, without quotes of earlier messages. If you wrote sensitive information in it (health, for example), it may be read, but it is not searched for or extracted.
- What is done with it: identifying the user's tasks, deadlines and appointments. Nothing is sent on your behalf, no profile of you is built and no decision about you is made.
- What is kept: your name, the subject, the date and short excerpts, attached to the user's topics, for as long as their account exists. The full text is not kept.
- Recipients: the user and our processors (section 7), including the AI service, which deletes messages within 30 days and does not use them to train its models.
- Legal basis: the user's legitimate interest in organising their own correspondence, and ours in providing them with this service.
- Your rights: access, erasure, objection and the other rights in section 9, by writing to [email protected] from the address concerned. You can also ask your correspondent to stop having your messages analysed: Clariqo lets them exclude a sender.
6. Legal bases
- Performance of the contract (the terms of use you accept): account, synchronisation, analysis, calendar.
- Consent: waitlist (box ticked at sign-up, confirmed by email; can be withdrawn at any time with the unsubscribe link in every email).
- Legitimate interest: replying to your messages sent through the contact form; security, prevention of abuse and analysis loops, cost tracking, protection against automated sign-ups (non-reversible fingerprint of the IP address, kept for 24 hours).
- Legitimate interest of the user and of Clariqo: analysing messages from their correspondents (section 5).
- Legal obligation: keeping proof of your consent, responding to authorities.
7. Processors
| Provider | Role | Location |
|---|---|---|
| Supabase Pte. Ltd. | Database, accounts, server | Data in the European Union (Frankfurt); company in Singapore |
| Cloudflare | Hosting of the website pages, access protection, receipt of emails sent to [email protected] (not stored) | Global network, US company |
| Anthropic | AI analysis of messages | United States |
| Resend | Sending the service's emails (waitlist confirmation, invitations, contact form messages, warning before an inactive account is deleted, technical alerts) | United States |
| The publisher's mailbox, which receives contact form messages and emails sent to [email protected] | United States |
For providers located outside the European Union, transfers are governed as follows: Cloudflare, Resend and Google are certified under the EU–US Data Privacy Framework and also apply the European Commission's standard contractual clauses; Anthropic and Supabase (a Singapore-based company, data hosted in Frankfurt) apply the European Commission's standard contractual clauses (Decision 2021/914). These safeguards are set out in each provider's data processing agreement (DPA), which is part of its terms of service. Google and Microsoft remain the providers of your inboxes: their processing is governed by their own policies.
8. Retention periods
- Account and data you create: as long as the account exists; deleted within 30 days after it is deleted.
- Inactive account: deleted after 24 months without sign-in, after a warning email sent 30 days before.
- Access to an inbox: deleted as soon as you remove the inbox.
- Technical data: 12 months.
- Waitlist: until your invitation or unsubscription (immediate deletion), at most 24 months; unconfirmed sign-up deleted after 30 days.
- Proof of your consent: lifetime of the account, then 5 years.
9. Your rights
You can at any time request access to your data, its rectification or erasure, restriction of processing, object to it or receive it in a reusable format (portability), by writing to [email protected] or the contact form. We reply within one month. You can also remove Clariqo's access to an inbox from the “Accounts” page, or from the security settings of your Google or Microsoft account.
You can also set instructions regarding what happens to your data after your death (retention, erasure, disclosure) by writing to us at the same address (Article 85 of the French Data Protection Act).
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the supervisory authority of your country.
10. Storage in your browser
Clariqo only stores in your browser what it needs to work: your sign-in session and a few display preferences. No advertising or audience-measurement cookies are used.
11. Changes
If this policy changes significantly, we will let you know in Clariqo the next time you sign in.