Skip to main content

Privacy Policy

(Last Revision: 2026.10.13)

Clario Inc. (“Clario,” “we,” “us,” or “our”) provides a software platform that utilizes file metadata to help organizations understand, clean, and manage the files stored across their cloud and on-premises file storage systems (the “Service”). This Privacy Policy describes how we collect, use, disclose, and safeguard information in connection with both our website at ClarioClean.com (the “Site”) and the Service.

This Policy applies to:

  • Site visitors, including prospective customers, job applicants (unless a separate applicant notice applies), and anyone else who interacts with us through the Site
  • Customers, meaning the businesses that subscribe to the Service, and the individuals Customers authorize to access the Service (“Authorized Users”)
  • Customer Personnel, meaning the employees and contractors of our Customers whose information may appear within the metadata the Service processes

Where a practice applies only to the Site or only to the Service, this Policy says so.

1. Our Role

Clario's role depends on the information involved.

Site and account information. For information we collect through the Site, for account and administration information Customers and Authorized Users provide to us, and for product usage information about how Authorized Users interact with the Service, Clario determines how that information is used, as described in this Policy.

Customer metadata (service provider, not controller). When a Customer connects the Service to its data storage environments, Clario acts as a service provider / processor at the Customer's direction. The Customer determines what systems to connect and controls access to its own environment. Clario processes the resulting metadata solely to provide, maintain, and improve the Service for that Customer, in accordance with the Customer's written agreement with Clario, including any Data Processing Agreement (see Section 6).

If you are Customer Personnel or an Authorized User, your organization, as our Customer, is responsible for its own notices to you about its use of the Service. This Policy describes how Clario, as service provider, handles the resulting information.

2. Information We Collect

2.1 Information You Provide Through the Site

  • Contact and demo request forms: name, business email address, company name, job title, and any message you include
  • Newsletter or communications sign-ups: name and email address
  • Job applications, if submitted through the Site: name, contact information, and application materials

2.2 Information Collected Automatically on the Site

  • Standard technical and log data, such as IP address, browser type, device information, referring pages, and pages visited
  • Essential cookies needed for the Site to function properly
  • Analytics data: Clario utilizes Google Analytics, a third-party analytics service, to help us understand how visitors use the Site (e.g., pages viewed, session duration, referral source). Google Analytics uses cookies and similar technologies to collect this information, which may be transmitted to and processed by Google. Learn more about how Google uses this data at Google's Privacy & Terms page, and about opt-out options via the Google Analytics Opt-out Browser Add-on.

2.3 Account and Administration Information (Service)

We collect information Customers and Authorized Users provide directly to administer their account, such as:

Name and business email address of Authorized Users and administrators

  • Authentication credentials or tokens used to connect the Service to a Customer's file storage systems (Clario uses OAuth or equivalent delegated-access protocols and does not store the underlying passwords of connected accounts)
  • Support requests and related correspondence as managed through our service desk software

2.4 Metadata From Connected File Stores (Service)

A foundational design principle of the Service is that Clario collects and processes file metadata only. Clario does not access, read, index, or store the contents (body, text, or substance) of any file, document, message, or record within a connected system. We do not perform content inspection, and we do not use any customer or file content to train artificial intelligence or machine learning models.

Depending on which systems a Customer connects, cloud or on premise, the Service collects metadata fields such as, but not limited to:

  • File and folder identifiers, names, paths, and file type/extension
  • Creation date and time, and date/time of last modification
  • The name and email address of the file's creator
  • The name and email address  of the last person to edit it
  • Sharing and permission settings (e.g., internal/external sharing status, link-sharing configuration, collaborator lists) to the extent exposed by the connected system's API
  • File size, version count, and storage location/site (e.g., which Drive, Box account, SharePoint site, or Confluence space)
  • Activity and audit-log metadata made available by the connected platform's API (e.g., view, edit, share, or download events), where the Customer enables connectivity

2.5 Product Usage Information (Service)

When Authorized Users access the Service, we collect information about how they interact with it, such as:

  • Features, pages, and screens used, and actions taken within the Service (e.g., clicks, searches, report views)
  • Session information, such as login times, session duration, and frequency of use
  • Technical information, such as browser type, device and operating system information, and IP address
  • The account and user identifiers needed to associate this activity with an Authorized User and Customer account

We collect this information using cookies, software development kits, and similar technologies, and may use third-party product analytics providers to process it on our behalf. These providers are bound by confidentiality and data protection obligations and may use the information only to provide analytics services to Clario. Product usage information does not include the contents of any file in a Customer's connected systems.

3. How We Use Information

Site information is used:

To respond to inquiries and demo requests

  • To communicate with prospects and leads about our products and services
  • To operate, secure, and improve the Site
  • To evaluate job applications, if applicable

Service information is used:

  • To provide, operate, maintain, and improve the Service as used by the Customer, including generating the insights, dashboards, and reports the Service is designed to deliver
  • To periodically refresh the metadata index so that insights remain accurate and current (see Section 5)
  • To understand how Authorized Users interact with the Service, measure feature adoption and performance, troubleshoot issues, and inform product development
  • To authenticate Authorized Users and maintain the security of Customer accounts
  • To provide customer support and respond to inquiries
  • To communicate with Customers about the Service, updates, and administrative matters

All information may also be used to comply with legal obligations and enforce our agreements.

We do not allow use of Customer metadata to train artificial intelligence or machine learning for subprocessors or third parties.

4. How We Disclose Information

Clario does not sell personal information, and does not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not disclose Customer metadata to third parties except as described below. We may disclose information to:

  • Service providers and sub-processors: We use a limited number of third-party vendors to operate the Site and the Service (for example, hosting, email delivery, and website and product analytics providers), bound by confidentiality and data protection obligations. Our primary Service infrastructure provider is Google Cloud Platform (U.S. regions), which hosts the metadata index and supporting infrastructure. A current list of sub-processors is maintained separately in our trust center (https://trust.clarioclean.com/subprocessors) and is updated at regular intervals to reflect any changes. Material changes to sub-processors that process Customer metadata will be communicated to Customers in accordance with their agreement with Clario.
  • Legal and safety reasons: Where required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of Clario, our Customers, or others.
  • Business transfers: If Clario is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
  • At a Customer's direction: We may disclose Service information with the Customer's consent or at its direction.

5. Data Retention

Clario applies a uniform retention period of seven (7) years to information collected in connection with the Site and the Service, consistent with our company-wide records retention policy, unless a shorter period is required by a specific Customer agreement or applicable law.

Because the Service is designed to provide ongoing, current insight into a Customer's file environment, the metadata index is refreshed at regular intervals for as long as the Customer's subscription is active, so that older metadata snapshots are continually superseded by current data rather than accumulating indefinitely. Upon termination of a Customer's agreement with Clario, metadata associated with that Customer is handled in accordance with the offboarding and deletion terms of that agreement.

6. Data Security and Data Processing Agreement

We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure, including encryption in transit and at rest, role-based access controls, and use of delegated authentication rather than storage of Customer credentials for connected systems.

As part of our Master Services Agreement (“MSA”), Clario enters into a Data Processing Agreement (“DPA”) with Customers that sets out the terms governing our processing of metadata as a service provider/processor, including confidentiality, security, sub-processing, and data subject request assistance obligations.

7. Your California Privacy Rights (CCPA/CPRA)

As a California-headquartered company, Clario complies with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). If you are a California resident, you have the right to:

  • Know what personal information we have collected about you and how it has been used and disclosed
  • Delete personal information we have collected from you, subject to certain exceptions
  • Correct inaccurate personal information
  • Opt out of the sale or sharing of personal information (Clario does not sell or share personal information, so no action is needed to opt out)
  • Limit the use of sensitive personal information (Clario does not use sensitive personal information for purposes requiring this right)
  • Not receive discriminatory treatment for exercising your privacy rights

To exercise these rights, contact us at privacy@getclario.ai. We will take reasonable steps to verify your request before responding.

If you are Customer Personnel and your information appears in metadata processed on behalf of a Clario Customer, we may direct your request to that Customer, who controls the underlying data, consistent with our role as a service provider.

8. International Data Practices

Clario's operations, infrastructure, and data storage are currently based in the United States. If you access the Site or the Service from outside the United States, your information will be processed in the United States.

We recognize that many of our Customers are large enterprises with employees, contractors, and operations outside the United States, including in the European Union and United Kingdom, whose information may appear in metadata processed through the Service.

While Clario is not currently certified against the EU General Data Protection Regulation (“GDPR”) or the UK GDPR, we aim to align our practices with core data protection principles regardless of a person's location. These include data minimization (for the Service, we collect metadata only, never file content), purpose limitation, transparency about our practices, and honoring reasonable requests to assist Customers in responding to data subject rights requests under their own GDPR obligations.

Customers subject to GDPR should look to their Data Processing Agreement with Clario, and their own compliance programs, for the specific contractual and legal commitments applicable to their use of the Service.

9. Children's Privacy

The Site and the Service are intended for business use by adults and are not directed to children under 18. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Site, the Service, or applicable law. We will post the updated Policy on the Site with a revised “Last Revision” date, and, where changes are material, we will provide additional notice to Customers as required by their agreement with us.

11. Contact Us

Email: privacy@getclario.ai

Mail: Clario Inc. 1150 Chestnut St, Menlo Park, CA, 94025