Privacy Policy

Involve Media Inc. ("we", "us", "our") operates Claros.One (the "Service"), a SaaS platform that helps small and medium-sized businesses audit and manage their technology stacks. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We are a Canadian company and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to protecting your privacy and handling your data responsibly.

1. Information We Collect

1.1 Account Information

When you register for the Service, we collect:

• Your name and email address
• Your business name and business type
• A password (stored in hashed form — we never store plain-text passwords)

1.2 Tech Stack Data

As you use the Service, you provide information about your business's software tools:

• Tool names, categories, and descriptions
• Costs, billing frequency, and contract details (renewal dates, contract types)
• Team member assignments (names and email addresses of people who use each tool)
• Usage notes and satisfaction ratings

1.3 Email Receipts

If you choose to use our email receipt parsing feature, you may forward SaaS invoices and receipts to your unique Claros.One ingest email address. We extract tool names, costs, currencies, and billing dates from these emails. We do not read or store email content unrelated to SaaS billing. Forwarded emails are processed and discarded — only the extracted billing data is retained.

1.4 Payment Information

Payment processing is handled entirely by Stripe. We do not collect, store, or have access to your credit card numbers, bank account details, or other payment credentials. Stripe may collect billing address information (including province) for tax calculation purposes. For more information, see Stripe's Privacy Policy.

1.5 Automatically Collected Information

When you use the Service, we automatically collect:

• Login timestamps and session data
• Browser locale (used to detect your preferred currency)
• Standard web server logs (IP address, browser type, pages visited)

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including dashboards, reports, and alerts
• Match your tools against our library of 260+ software products to enrich your stack data
• Send transactional emails (welcome messages, renewal alerts, receipt confirmations, password resets)
• Process subscription payments and manage billing
• Improve the Service and develop new features
• Respond to support requests and communicate with you about your account

3. AI Processing

We use artificial intelligence (OpenAI) to enrich tool data in our shared library — for example, to fill in missing descriptions, pricing information, or capability tags for software products. This AI processing uses only publicly available information about software tools (names, websites, publicly listed features and pricing). We do not send your personal information, your business's financial data, or your team members' details to AI services.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing. Handles all credit card and billing data. Privacy Policy
• Postmark — Transactional email delivery (welcome emails, alerts, confirmations). Privacy Policy
• OpenAI — AI-powered tool data enrichment. No personal data is transmitted. Privacy Policy

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

5. Data Storage and Security

Your data is stored on servers located in Canada where possible. We use industry-standard security measures to protect your information, including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Hashed passwords (never stored in plain text)
• Role-based access controls within the platform
• Regular database backups

While we take reasonable steps to protect your data, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, your data remains accessible for 90 days in case you wish to reactivate. After that period, we may delete your data. You can request immediate deletion at any time (see Section 8).

Transactional email logs and server access logs are retained for up to 12 months for operational and troubleshooting purposes.

7. Cookies and Tracking

We use essential cookies required for the Service to function (session management, authentication, CSRF protection). We do not use third-party advertising cookies or cross-site tracking. We do not sell data to advertisers.

8. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request that we correct inaccurate or incomplete information
• Deletion — Request that we delete your personal information and close your account
• Data portability — Request an export of your data in a machine-readable format
• Withdraw consent — Withdraw your consent to data processing at any time (this may require closing your account)

To exercise any of these rights, contact us at info@claros.one. We will respond within 30 days.

9. Team Members and Business Data

If you add team members to your Claros.One account (by name and email), those individuals may receive verification emails with signed links to confirm which tools they use. Team members are not required to create a Claros.One account. We store their name and email address as part of your business's records. If a team member wishes to have their information removed, they should contact their business administrator or reach out to us directly.

10. Children's Privacy

The Service is designed for business use and is not directed at individuals under the age of 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by placing a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: