Privacy Policy

1. Who is responsible

Cleia is operated by Obscura. Obscura is the controller responsible for deciding why and how personal information is used for Cleia.

Privacy questions and requests can be sent to prince@obscuraai.xyz.

2. Information we handle

Depending on how you use Cleia, this may include:

• account and contact details, sign-in records and communication preferences;
• waitlist referral codes, who joined through a shared link, and any resulting review priority status;
• messages, prompts, replies, attachments, voice messages and transcripts you choose to provide;
• calendar, email and selected document content from accounts you connect, limited to the access you enable;
• preferences, corrections, reminders, tasks, approvals, action history and memory or work state derived while assisting you;
• information about family members, colleagues and other people that appears in content you provide or connect;
• reservation, subscription and billing records. Payment providers process card details; Cleia does not need to store full card numbers;
• website, device, service, security and diagnostic records needed to operate, protect and improve Cleia; and
• support correspondence and records we must keep for legal, accounting or dispute purposes.

3. Where it comes from

We receive information directly from you, from the accounts and messaging channels you choose to connect, from the people who communicate with you through those services, from a waitlist link another person shares with you, from payment and authentication services, and from technical operation of Cleia. Cleia does not ask a connected service for access until you start that connection.

4. Why we use it and our legal bases

Personal and family administration can reveal health, belief or other sensitive information. We only intend to process it when it is needed for the task you requested and a lawful condition applies. Where the law requires explicit consent, we will ask separately rather than treating acceptance of this notice as consent.

5. AI processing and human control

Cleia uses AI systems to understand requests, transcribe voice, organise information, produce responses, derive useful memory and prepare proposed work. AI can be wrong or incomplete. Review consequential information before relying on it.

During the private beta, a proposal that would send a message or change an external service stops for approval of that action. Cleia is not intended to make solely automated decisions that produce legal or similarly significant effects about you. Acceptance of this notice does not give Cleia general authority to enter contracts or transactions for you.

AI and infrastructure providers process only the content needed to perform a task for us. We do not use private account content to train general-purpose AI models, and we require AI providers not to use that content to train their models.

6. Connected services and other people's information

A connection is optional. You choose which account and capabilities to enable, and you can revoke access through Cleia or the connected service. Disconnecting stops new access, but it does not by itself delete information already saved in Cleia. Deletion is a separate control. It also cannot remove an email already sent or an event already written to your own calendar.

Because Cleia helps with real life, information you provide may relate to children or other third parties. Only provide information you are reasonably entitled to use for the task, avoid unnecessary sensitive detail, and respect other people's rights. We use incidental third-party information only to provide and protect the service or meet legal duties.

7. Who receives information

We disclose only what is reasonably needed to providers that support hosting and storage, AI inference and transcription, messaging and connected-account access, identity and authentication, payment processing, analytics and service monitoring, and customer support. We may also disclose information to professional advisers, regulators or authorities where required, or as part of a genuine business reorganisation subject to appropriate protections.

We do not sell personal information or disclose it to advertisers for their own advertising. A current subprocessor list and more detail about a provider's role can be requested at prince@obscuraai.xyz, where disclosure is legally and commercially appropriate.

8. Retention and deletion

We keep information only for as long as needed for the purpose collected. The period depends on whether your account is active, whether you keep a memory or connection, the time needed to provide and secure the service, legal and accounting duties, dispute limitation periods, and technically necessary backup cycles. We aim to delete or de-identify information when it is no longer needed.

You can ask Cleia to correct or forget particular memory, disconnect an account, export available account data, pause new work, or request deletion. Deleting Cleia-held data does not reverse actions already completed in another service. Limited records may remain where required for fraud prevention, security, legal compliance, accounting or proof that a deletion request was completed.

9. Security

We use organisational and technical measures intended to protect information in proportion to its sensitivity, including encryption in transit and at rest, access controls, separation between users, logging, data minimisation and limits on what systems may do. No online service is completely secure. Please contact us promptly if you believe your account or information has been compromised.

10. International transfers

Some service providers may process information outside the United Kingdom. Where this is a restricted transfer, we use an applicable adequacy regulation, approved contractual safeguards with the required risk assessment and supplementary measures, or another lawful transfer mechanism. You may request more information about the safeguard relevant to your data.

11. Your rights

Depending on the law that applies, you may have rights to be informed; access a copy; correct inaccurate information; erase information; restrict processing; receive portable data; object to processing based on legitimate interests or direct marketing; withdraw consent; and ask for human review of a qualifying automated decision. These rights can have lawful limits.

To exercise a right, email prince@obscuraai.xyz. We may verify your identity before acting. You may also complain to the UK Information Commissioner's Office or the regulator where you live.

12. Children

Cleia is for adults aged 18 and over. We do not knowingly allow children to create Cleia accounts. An adult user may provide limited information about a child as part of family administration; that does not make the child a user. Contact us if you believe a child has created an account or information has been provided improperly.

14. Changes and contact

We may update this notice as Cleia changes. We will publish the revised date and give appropriate notice before a material change takes effect. If a new use requires consent, we will ask rather than relying only on an updated notice.

Contact: prince@obscuraai.xyz.