Privacy Policy

Last updated: September 14, 2026

1. Introduction

Clara ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at claracreator.com, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Clara is operated by Madgic.ai, registered at Israel. We act as the Data Controller for the personal information of our direct users. For users invited by a company, the company acts as the Data Controller, and we act as the Data Processor.

You can reach us at privacy@claracreator.com.

3. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("personal information").

  • Account Information: Name, email address, and profile picture.
  • User Content: Documents, text samples, and files you upload for analysis or content creation, and the content Clara generates for you.
  • Usage Data: Information on how you interact with our service, including feature usage and error logs.
  • Google User Data: Data retrieved from your Google account when you choose to connect it, as described in Section 4.

4. Google User Data

Connecting a Google account is optional. Clara requests access only when you initiate a connection, and only to the following scopes:

  • Google Search Console — read-only (webmasters.readonly): We read search performance data for the properties you explicitly select — search queries, impressions, clicks, click-through rate, average position, and page-level metrics. We use this solely to identify keyword opportunities and content gaps and to display performance trends in your SEO dashboard. We never modify your Search Console settings, submit sitemaps, or change property configuration.
  • Google Drive — per-file access (drive.file): We access only the specific files and folders you select through the Google file picker, and the files Clara itself creates. We read the contents of documents you select in order to use them as reference material and writing samples for content generation, and we create new documents and spreadsheets in a folder you choose when you export finished content. Clara cannot see, list, or access any other file in your Google Drive.

How we use and share it. Google user data is used only to provide the features described above, at your direction. Document contents you select may be sent to our third-party AI model providers strictly to generate the content you requested. We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine learning models.

How we store it. Search Console metrics are cached in our database so your dashboard loads without re-querying Google. Google Drive file contents are processed transiently and are not retained after processing, except where you explicitly save the result into your Clara workspace. OAuth tokens are stored encrypted and are used only to make the API calls described above.

How to revoke access. You can disconnect your Google account at any time from Clara's settings, or revoke Clara's access directly at myaccount.google.com/permissions. On revocation we delete the stored tokens and any cached Google data within 30 days.

Limited Use. Clara's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Contractual Necessity: To provide the services you signed up for.
  • Legitimate Interests: To improve our service and ensure security.
  • Consent: Where you have given explicit permission, including for any Google account connection.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: You can request a copy of your personal data.
  • Right to Rectification: You can ask us to correct inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your data.
  • Right to Data Portability: You can request your data in a structured, machine-readable format.
  • Right to Object: You can object to the processing of your data.
  • Right to Withdraw Consent: You can withdraw consent at any time, including by disconnecting your Google account.

You can exercise these rights directly through your account settings or by contacting us at privacy@claracreator.com. You also have the right to lodge a complaint with your local data protection authority.

7. Data Retention

We retain your personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this policy. When you delete your account, we will delete or anonymize your data, including any cached Google user data and stored OAuth tokens, within 30 days.

8. Information Sharing

We share your information with third-party service providers — including cloud hosting, cloud storage, and AI model providers — only as necessary to provide our service. These providers are bound by data processing agreements and may not use your data for their own purposes. We do not sell your personal information.

9. Security

We protect your data with encryption in transit (TLS) and at rest, access controls limiting staff access to what is necessary, and encrypted storage of all third-party credentials and OAuth tokens. No system is perfectly secure, but we work to protect your data using industry-standard practices.

10. International Data Transfers

Your data may be processed outside the European Economic Area, including in the United States, by our hosting and AI model providers. Where this happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Children's Privacy

Clara is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date above. For material changes, we will notify you by email or through the service before the change takes effect.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@claracreator.com.