Security and privacy
Your team's data, kept safe and kept yours
ClearAim holds your leadership team's tasks, KPIs and weekly check-ins. Here's how we protect them, how long we keep them and what our AI does and doesn't do with them.
Protection
How we protect your data
Simple, well-tested building blocks, set up carefully.
Isolated per company
Every record belongs to one company. Postgres row-level security enforces that in the database itself, so one company's data can never show up in another's.Hosted on Vercel and Neon
The site and app run on Vercel. Data lives in Neon Postgres in a US region.Encrypted in transit and at rest
Traffic uses HTTPS. Data is encrypted at rest by our hosting and database providers.Signed, expiring links
Check-in form links are signed and expire after 7 days. Confirm links expire after 72 hours.Secrets stay on the server
API keys and credentials live in server-side environment settings, never in the browser. Incoming email webhooks are signature-checked.Only the access you grant
Team members see what their role allows. A coach sees a client company only after that company turns on coach access.
Privacy
Your data, your call
The details are in our privacy policy. Here are the parts most teams ask about.
- Raw email deleted after 90 days
- We keep the full text of a check-in reply for 90 days so a reply can be re-read if needed. After that, the raw email body is deleted. The tasks and updates it produced stay.
- Data export on request
- Ask for an export of your company's data and we'll send it within 30 days.
- Full deletion on request
- Ask us to delete your company's data and we'll remove it within 30 days.
- DPA available
- Need a data processing agreement? Email hello@clearaim.io and we'll send ours.
AI
AI that works for you, not on your data
ClearAim uses AI to read check-in replies and match them to each leader's tasks, KPIs and outcomes. When it isn't sure about a match, it asks the leader to confirm with one click.
We use the Anthropic API under commercial terms. Under those terms, what we send is not used to train models. We send only what a match needs: the reply, plus the leader's own tasks, KPIs, outcomes and responsibilities.
Tracking
No time tracking or activity tracking
ClearAim doesn't include time tracking or activity tracking today. It works from what leaders choose to tell it in their check-ins.
If we ever add either one, three promises come with it:
- It will be opt-in, per company. Off unless a company turns it on.
- Everyone included gets clear notice, in the app and by email.
- Each team member sees their own data first and can correct it.
Plainly
What we don't claim
ClearAim is new, and we don't hold third-party security certifications yet. If your company needs a security questionnaire answered or has questions this page doesn't cover, we're happy to help.
Email hello@clearaim.io or visit our contact page.
Focus your leadership team, safely
Start with a free trial. Your data stays yours, and you can export or delete it on request.