Legal

Privacy

A factual statement of what CLAIR collects and who collects it, not a boilerplate policy.

Alpha draft, not yet reviewed by counsel

This page describes CLAIR's alpha build as it actually behaves, written from the project's own engineering and compliance documentation. It has not yet been reviewed by a lawyer, and it will be revisited before any release beyond the invited alpha cohort.

What never leaves your machine

By construction, not merely by policy, the following never travel off the device CLAIR is installed on:

  • The contents of any spreadsheet or dataset you import, including every cell value.
  • Column names, dataset names, file names, and file paths.
  • Everything you type into Chat, and the AI model's responses to it.
  • SQL queries CLAIR generates to answer your questions.
  • Vector embeddings computed from your rows.
  • Error details and stack traces.

All analysis, from a quick chart to a multi-hour Deep Analysis run, happens on your machine, through a local AI model reached over your machine's own loopback network address. There is no CLAIR cloud account and no cloud inference. See the Network Contract for exactly what does cross the network, and why.

Product telemetry, during the alpha

Separately from your data, CLAIR collects basic, anonymous product telemetry during the alpha: which features get used, how long actions take, and rough hardware information, so the team can find bugs and improve performance across the invited cohort. This is:

  • On by default during the alpha, disclosed at first run.
  • Content-free by construction. Every event passes through a single allowlist-validated function; a field outside a closed, predefined schema is dropped before it can ever be sent. Cell values, names, query text, and error messages have no field to travel in.
  • Anonymous. Events are tied to a random identifier generated on your own device at first launch, not to your name, email, or institution.
  • Fully visible to you. Open Settings → Privacy at any time to see the exact events collected, in plain view, and export the full log yourself.
  • Under your control. Turn the toggle off in Settings → Privacy and collection stops immediately; the local queue is emptied and nothing further is gathered or sent.

Telemetry becomes opt-in, rather than on by default, once CLAIR moves past the invited alpha.

Account and license data

Signing in and keeping your license active sends your account email, a salted hash of a device identifier, and a signed access token to CLAIR's own licensing service. This channel has no field that can carry dataset content, file names, or anything you've typed.

Who has access

CLAIR is operated by its developer during the alpha; there is no third-party data processor in the loop for anything described above. If that changes before general availability, this page will be updated.

Your controls

  • Settings → Privacy: view the live telemetry log, export it, and turn collection off.
  • Settings → About: generate a local-processing record listing every destination CLAIR's code is registered to reach.