Privacy Notice

Effective Date: July 9, 2025
Notice Version: 3.0

Data Controller Contact Information:

Clearstory Technologies, Inc.
1211 Newell Ave., Ste 220
Walnut Creek, CA 94596
info@clearstory.build
Privacy Officer: Cameron Page

This privacy notice applies to the information that Clearstory Technologies, Inc. (“Clearstory,” “we,” “us” or “our”) collects from you when you use our websites, www.clearstory.build and app.clearstory.build (the “Sites”), our mobile application named Clearstory, and our software as a service, collectively and herein after called “Platform.”

Our privacy notice tells you what Personal Data we may collect from you and how we collect, protect and share your Personal Data, and what rights you may have with respect to your Personal Data.

Please note that this privacy notice covers Personal Data we collect and process in our capacity as a controller or “business” as those terms are defined under applicable law. It does not apply to Personal Data we process as a data processor or service provider on behalf of our customers (defined in our Terms of Service as “Customer Data”) in connection with providing our Platform or services to them. Our customers are responsible for providing any notices, obtaining any consents and acting on any data subject requests relating to Personal Data we process on their behalf. If we receive a request from a data subject relating to Personal Data that we process on behalf of a customer, we will forward that request to the customer for a response.

Definitions

The following terms have the meanings set forth below. Any other capitalized terms not defined herein will have the same meaning as where they are defined in our Terms of Service (“Terms”).

“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified directly or indirectly by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person, and includes any information that is protected as “personal data,” “personal information” or “personally identifiable information” as defined under laws applicable to us.

Personal Data We Collect and How We Collect It

We collect the following Personal Data in our capacity as a controller or business:

• Registration Information: we collect name, email address, and company name when you register to use the Platform.
• Project Information: our Platform enables users to upload information regarding Projects in which they are participating. This may include certain Personal Data that the user chooses to include in Customer Data they are uploading. Users represent and warrant they have the right to upload Personal Data to the Platform.
• Inquiries: we collect any Personal Information you may provide when contacting us through contact forms on the Site or through email, such as your name, company, and contact information.
• Chat: we offer a chatbot on our Site that enables you to communicate with our team members about our products and services. We collect any Personal Data you may choose to share during the chat session. We may record your chat sessions for customer service and other business purposes.
• Job applicants: if you apply for a job with us through our Site, we collect your name, address, email, phone number, educational, professional and employment information and other information you may provide on your CV or resume.
• Cookies: we use cookies on our Platform. When you enter and use our Platform and agree to accept cookies, some of these cookies may collect your Personal Data as described in the Cookies and Tracking Technologies section below.

Automatic Information

We automatically receive information from your web browser or mobile device. This information may include the name of the website from which you entered our Platform, if any, as well as the name of the website you’ll visit when you leave our Platform. This information may also include the IP address of your computer/the proxy server you use to access the Internet, your Internet service provider’s name, your web browser type, the type of mobile device, your computer operating system, and data about your browsing activity when using our Platform. We use all this information to analyze trends among our users to help improve our Platform.

California Notice at Collection

This notice at collection is provided to California residents under the California Consumer Privacy Act (“CCPA”). We collect and during the past twelve months have collected the following categories of personal information as that term is defined in the CCPA:

 

Identifiers: Yes, e.g., name, email address, phone number, IP address and mobile ID.

Business or Commercial Purpose: Provide the Platform and other purposes as set forth below.

Sold or shared: Yes for retargeting only.

Categories of Third Parties to Whom Disclosed: Yes, to parties with whom you are working on a Project through the Platform if listed in your public profile.

Any personal information described in subdivision (e) of Section 1798.80: See identifiers above.

 

Protected Classifications: Yes, e.g. gender if provided on job application.

Business or Commercial Purposes: Process job applications.

Sold or shared: No

Categories of Third Parties to Whom Disclosed: None.

 

Commercial Information: No. This information is collected at the business entity level.

 

Internet or other electronic network activity information: Yes, please see Automatic Information above.

Business or Commercial Purposes: Provide and improve the Platform and other purposes set forth below, including the safety and security of the Platform.

Sold or shared: Yes for retargeting

Categories of Third Parties to Whom Disclosed: Data analytics providers for purposes of analyzing usage of the Platform.

 

Geolocation Data: Yes

Business or Commercial Purposes: Provide and improve the Platform and other purposes set forth below, including the safety and security of the Platform.

Sold or shared: No.

Categories of Third Parties to Whom Disclosed: None.

 

Professional or employment-related information: Yes.

Business or Commercial Purposes: Process job applications and provide the Platform and other purposes set forth below.

Sold or Shared: No.

Categories of Third Parties to Whom Disclosed: Yes, to parties with whom you are working on a Project through the Platform if listed in your public profile.

 

Education information: Yes.

Business or Commercial Purposes: Process job applications and other purposes set forth below.

Sold or Shared: No.

Categories of Third Parties to Whom Disclosed: Yes, to parties with whom you are working on a Project through the Platform if listed in your public profile.

 

The Purpose for Which We Collect Personal Data

We collect Personal Data for the following purposes:

• Provide Our Platform. We use your Personal Data to communicate with you about your use of our Platform, respond to your inquiries, and provide customer service.
• Personalize Platform. We use your Personal Data to tailor the content and information that we may send or display to you, to offer location customization, personalized help and instructions, and to otherwise personalize your experiences while using the Platform.
• Improve and Develop Our Platform. We use your Personal Data to: (a) ensure our Platform is working as intended; (b) operate our business; (c) better understand how users access and use our Platform, both on an aggregated and individualized basis; (d) develop, maintain, protect, and improve our Platform; (e) train any artificial intelligence and machine learning or large language models we may employ in connection with our Platform; and (f) perform research and analytics, including to analyze and report on usage and performance of our Platform.
• Marketing and Promotions. We use your Personal Data for marketing and promotional purposes. For example, we may use your Personal Data, such as your email address, to send you news and newsletters, special offers, and promotions, or to otherwise contact you about products or information we think may interest you or direct targeted advertising to you.
• We may use your Personal Data to: (a) detect, investigate, and prevent activities on our Platform that may violate our Terms, could be fraudulent, violate copyright or other rules, or that may be otherwise illegal; (b) comply with legal requirements; (c) defend or exercise legal claims; (d) respond to law enforcement or governmental investigations or requests; and (e) protect our rights and the rights and safety of our users and others.

How We Share Your Information

We may share your information, including Personal Data, as follows:

• Consent. Where you have provided consent, we share your information, including Personal Data, as described at the time of consent.
• Other Users. The Platform involves communications and interactions with other users. You agree that your Personal Data that your provide to the Platform may be shared with these other users.
• Affiliates. We may disclose the Personal Data we collect from you to our affiliates or subsidiaries solely for the purpose of providing the Platform to you; however, if we do so, their use and disclosure of your Personal Data will be maintained by such affiliates and subsidiaries in accordance with this Policy.
• Service Providers. We may disclose the information we collect from you to third-party vendors, service providers, contractors, or agents who perform functions on our behalf. These third-party service providers may include, but are not limited to, payment processors, web analytics companies, advertising networks, call centers, data management services, help desk providers, accountants, law firms, auditors, shopping cart and email service providers, and shipping companies. Some of the specific companies we share your information with include: Mailchimp, Hubspot, Google, Datadog, Sendgrid, and Facebook.
• Business Transfers. If we are acquired by or merged with another company or entity, if substantially all of our assets are transferred to another company or entity, or transferred as part of a bankruptcy proceeding, or are in negotiations for any of these types of transactions, we may transfer the information we have collected from you to the other company or entity.
• In Response to Legal Process. We also may disclose the information we collect from you in order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a subpoena.
• To Protect Us and Others. We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Policy, or as evidence in litigation in which we are involved.
• Aggregate and De-Identified Information. We may share aggregate or de-identified information about users and their use of the Platform with third parties and publicly for marketing, advertising, research or similar purposes.

Our Legal Basis for Collecting and Processing Personal Data

To the extent we are required to have a legal basis for collecting and processing your Personal Data, such as under the GDPR, we rely on the following legal bases:

• Necessity to performance of a contract or to enter into a contract, such as to register you for and to provide our Platform;
• Compliance with Laws: we may need to process and disclose your Personal Data to comply with laws and legal obligations; and
• Legitimate interest: we rely on our legitimate interest to process your Personal Data such as to provide and improve the Platform and to market our products and services.

DATA SUBJECT REQUESTS

You may make certain requests relating to your Personal Data, including the right to access, obtain a copy, correct, delete, or object or limit certain processing of your Personal Data and opt-out of the sale of your Personal Data or sharing of your Personal Data for cross-context behavioral advertising or targeted advertising. We will comply with these requests to the extent required by law. If you wish to make this request, please email us at: info@clearstory.build telling us that you do not want to have any of your Personal Data sold. We may request that you provide information to verify your identity before responding to your request.

If you are resident of certain jurisdictions, you may have specific rights as set forth below:

Your Rights Under the GDPR and UK GDPR

When using our Platform and submitting Personal Data to us, you may have certain rights under the GDPR if you reside or are in any of the countries of the European Union or if you reside in the United Kingdom. Depending on the legal basis for processing your Personal Data, you may have some or all of the following rights:

• The Right to Be Informed - You have the right to be informed about the Personal Data that we collect from you and how we process it.
• The Right of Access - You have the right to get confirmation that your Personal Data is being processed and you have the ability to access your Personal Data.
• The Right to Rectification - You have the right to have your Personal Data corrected if it is inaccurate or incomplete.
• The Right to Erasure (Right to Be Forgotten) - You have the right to request the removal or deletion of your Personal Data if there is no compelling reason for us to continue processing it.
• The Right to Restrict Processing - You have the right to ‘block’ or restrict the processing of your Personal Data in certain circumstances. When your Personal Data is restricted, we are permitted to store your data, but not to process it further.
• The Right to Data Portability - You have the right to request your Personal Data that you provided to us and use it for your own purposes.
• The Right to Object - You have the right to object to us processing your Personal Data for the following reasons:
• Processing was based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
• Direct marketing (including profiling);
• Processing for purposes of scientific/historical research and statistics.
• Rights in relation to automated decision-making and profiling. Automated Individual Decision-Making and Profiling - You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects regarding you or similarly significantly affects you.
• Filing a Complaint with Authorities - You have the right to file a complaint with supervisory authorities if your information has not been processed in compliance with the General Data Protection Regulation. If the supervisory authorities fail to address your complaint properly, you may have the right to a judicial remedy. If you are a resident of the United Kingdom, you may file a complaint with the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

If you wish to make a request, please email us at info@clearstory.build. We may ask you for certain additional information to verify your identity before responding to your request.

Your California Privacy Rights

California consumers may have certain rights under the California Consumer Privacy Act (CCPA). For purposes of this section, we use the defined term “personal information” under the CCPA. These rights include:

(A) The right to know what personal information the business has collected about the consumer, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer;

(B) The right to delete personal information that the business has collected from the consumer, subject to certain exceptions;

(C) The right to correct inaccurate personal information that a business maintains about a consumer;

(D) If the business sells or shares personal information, the right to opt-out of the sale or sharing of their personal information by the business.

(E) If the business uses or discloses sensitive personal information for reasons other than those set forth in section 7027, subsection (m) of the CCPA regulations, the right to limit the use or disclosure of sensitive personal information by the business. We do not offer this right as we do not use sensitive, personal information for inferring characteristics about individuals

(F) The right not to receive discriminatory treatment by the business for the exercise of privacy rights conferred by the CCPA, including an employee’s, applicant’s, or independent contractor’s right not to be retaliated against for the exercise of their CCPA rights.

If you are a resident of California, you can exercise these rights by emailing us at info@clearstory.build. We may ask you for certain additional information to verify your identity before responding to your request. As a California resident, you also have the right to designate an agent to exercise these rights on your behalf. We may require proof that you have designated the authorized agent to act on your behalf and to verify your identity directly with us.

Notice of Right to Opt-out of Sale or Sharing

You may exercise your right to opt-out of the sale or sharing of your personal information by sending an email to info@clearstory.build.

Cookies and Tracking Technologies

Our Platform uses cookies. A cookie is a small piece of data or a text file that is downloaded to your computer or mobile device when you access certain websites. Cookies may contain text that can be read by the web server that delivered the cookie to you. The text contained in the cookie generally consists of a sequence of letters and numbers that uniquely identifies your computer or mobile device; it may contain other information as well.

By agreeing to accept our use of cookies, you are giving us and the third parties with which we partner permission to place, store, and access some or all the following types of cookies described below on your computer and to collect and use information from your use and interaction with the Platform, which may include Personal Data:

• Strictly Necessary Cookies - These cookies are necessary for proper functioning of the Platform, such as displaying content, logging in, validating your session, responding to your request for services, and other functions. Most web browsers can be set to disable the use of cookies. If you disable these cookies, you may not be able to access features on our Platform correctly or at all.
• Performance Cookies - These cookies collect information about the use of the Platform, such as pages visited, traffic sources, users’ interests, content management, and other measurements.
• Functional Cookies - These cookies enable the Platform to remember users’ choices, such as their language, usernames, and other choices while using the Platform. They can also be used to deliver services, such as letting a user create a blog post, listen to audios, or watch videos on the Platform.
• Media Cookies - These cookies can be used to improve a Platform’s performance and provide special features and content. They can be placed by us or third parties who provide services to us.
• Advertising or Targeting Cookies - These cookies are usually placed and used by advertising companies to develop a profile of your browsing interests and serve advertisements on other websites that are related to your interests. You will see less advertising if you disable these cookies.
• Session Cookies - These cookies allow a Platform to link the actions of a user during a browser session. They may be used for a variety of purposes, such as remembering what a user has put in their shopping cart as they browse a Platform. Session cookies also permit users to be recognized as they navigate a Platform so that any item or page changes they make are remembered from page to page. Session cookies expire after a browser session; they are not stored long term.
• Persistent Cookies - These cookies are stored on a user’s device between browser sessions, which allows the user’s preferences or actions across a website or across different websites to be remembered. Persistent cookies may be used for several purposes, including remembering users’ choices and preferences when using a Platform or to target advertising to them.
• We may also use cookies for:
• identifying the areas of our Platform that you have visited;
• personalizing content that you see on our Platform;
• our Platform analytics;
• remarketing our products or services to you;
• remembering your preferences, settings, and login details;
• targeted advertising and serving ads relevant to your interests;
• affiliate marketing;
• allowing you to post comments; and
• allowing you to share content with social networks.

Most web browsers can be set to disable the use of cookies. However, if you disable cookies, you may not be able to access features on our Platform correctly or at all.

Web Beacons

We may also use a technology called web beacons to collect general information about your use of our Platform and your use of special promotions or newsletters. The information we collect by web beacons allows us to statistically monitor the number of people who open our emails. Web beacons also help us to understand the behavior of our customers and users.

Google Analytics

Our Platform uses Google Analytics to collect information about the use of our Platform. Google Analytics collects information from users such as age, gender, interests, demographics, how often they visit our Platform, what pages they visit, and what other websites they have used before coming to our Platform. We use the information we get from Google Analytics to analyze traffic, improve our marketing, advertising, and Platform. Google Analytics collects only the IP address assigned to you on the date you visit our Platform, not your name or other identifying information. We do not combine the information collected using Google Analytics with Personal Data. Although Google Analytics plants a permanent cookie on your web browser to identify you as a unique user the next time you use our Platform, the cookie cannot be used by anyone but Google. Google also uses specific identifiers to help collect information about the use of our Platform.

• For more information on how Google collects and processes your data visit: https://www.google.com/policies/privacy/partners/
• You can prevent Google Analytics from using your information by opting out at this link: https://tools.google.com/dlpage/gaoptout

Hubspot Analytics

We also use Hubspot analytics to collect information about the use of our Platform similar to that of Google Analytics. We use the information we get from Hubspot analytics to improve our services.

Facebook Remarketing

Third parties, including Facebook, may use first-party cookies, third-party cookies, web beacons, and other storage technologies to collect or receive information from our Platform and elsewhere on the Internet, and use that information to provide measurement services and target ads. With Facebook remarketing, you may see our ads on Facebook after you have used our services. For this to happen, Facebook uses unique cookies that are activated and placed in a visitor’s browser when they land on a webpage. Facebook lookalike audience targeting allows us to show ads on Facebook to people who are similar to those who have already visited or made a purchase from our services. To opt out of Facebook’s collection and use of information for ad targeting visit: https://www.facebook.com/help/568137493302217. By using our Platform, you consent to such tracking technologies and to Facebook’s collection and use of your Personal Data for the purposes described above.

Other Remarketing Platform

Our Platform uses other remarketing services. These remarketing services are provided by companies that show our ads on websites and devices across the Internet. With remarketing, you may see ads for our products you have previously looked at. For this to happen, remarketing companies will read a cookie in your browser. This can only happen if your browser is set to let it happen. You can opt out of these types of advertising cookies by visiting http://www.networkadvertising.org/choices.

What Happens If You Don’t Give Us Your Personal Data

If you do not provide us with enough Personal Data, we may not be able to provide you all our products and services. However, you can access and use some parts of our Platform without giving us your Personal Data.

Communications and Emails

When we communicate with you, we will use the email address you provided when you registered as a user or customer. You can change your contact preferences at any time through your account or by contacting us using the contact information at the top of this privacy notice.

Push Notifications

If you provide a mobile telephone number to us, you are giving your consent and authorize us or a third party to send you push notifications to your mobile phone through our mobile application. You are not required to give us your consent for these push notifications. However, withholding your consent may interfere or prevent us from providing some or all of our services to you. You can stop receiving push notifications at any time by contacting us.

Legally Required Releases of Information

We may be legally required to disclose your Personal Data if such disclosure is (a) required by subpoena, law, or other legal process; (b) necessary to assist law enforcement officials or governmental enforcement agencies; (c) necessary to investigate violations of or otherwise enforce our terms and conditions; (d) necessary to protect us from legal action or claims from third parties, including you and/or other users; or (e) necessary to protect the legal rights, personal/real property, or personal safety of our company, users, employees, and affiliates.

Disclosures to Successors

If our business is sold or merges, in whole or in part, with another business that would become responsible for providing our Platform to you, we retain the right to transfer your Personal Data to the new business. The new business would retain the right to use your Personal Data according to the terms of this privacy notice as well as to any changes to this privacy notice as instituted by the new business. We also retain the right to transfer your Personal Data if our company files for bankruptcy and some or all of our assets are sold to another individual or business.

Community Discussion Boards, Blogs, or Other Mechanisms

Our Platform may offer the ability for users to communicate through online community discussion boards, blogs, or other mechanisms. We do not always filter or monitor what is posted on such discussion mechanisms. If you choose to post on these discussion mechanisms, you should use care when exposing any Personal Data, as such information is not protected by our privacy notice nor are we liable if you disclose your Personal Data through such postings. Also, Personal Data that you post on our Platform for publication may be available worldwide by means of the Internet. We cannot prevent the use or misuse of such information by others.

Retaining and Destroying Your Personal Data

We retain information that we collect from you (including your Personal Data) only for as long as we need it for legal, business, or tax purposes. In general, we retain your Personal Data for as long as you are using the Platform; if you request deletion of your account or cease using the Platform, we will retain your Personal Data for 90 days after which we may delete it, unless we need to retain the Personal Data to comply with legal obligations. Your information may be retained in electronic, paper, or a combination of both forms. When your information is no longer needed, we will destroy, delete, or erase it.

Updating Your Personal Data

You can update your Personal Data using services found on our Platform. If no such services exist, you can contact us using the contact information found at the top of this privacy notice and we will help you. However, we may keep your Personal Data as needed to enforce our agreements and to comply with any legal obligations.

Revoking Your Consent For Using Your Personal Data

You have the right to revoke your consent for us to use your Personal Data at any time. Such opt-out will not affect disclosures otherwise permitted by law, including but not limited to: (i) disclosures to affiliates and business partners; (ii) disclosures to third-party service providers that provide certain services for our business, such as payment processors, web analytics companies, advertising networks, call centers, data management services, help desk providers, accountants, law firms, auditors, shopping cart and email service providers, and shipping companies; (iii) disclosures to third parties as necessary to fulfill your requests; (iv) disclosures to governmental agencies or law enforcement departments, or as otherwise required to be made under applicable law; (v) previously completed disclosures to third parties; or (vi) disclosures to third parties in connection with subsequent contests or promotions you may choose to enter, or third-party offers you may choose to accept. If you want to revoke your consent for us to use your Personal Data, please contact us at info@clearstory.build.

Protecting The Privacy Rights Of Third Parties

If any postings you make on our Platform contain information about third parties, you agree to make sure that you have permission to include that information. While we are not legally liable for the actions of our users, we will remove any postings about which we are notified, if such postings violate the privacy rights of others.

Do Not Track Settings

Some web browsers have settings that enable you to request that we do not track your movement within our Platform. Our Platform does not obey such settings when transmitted to and detected by our Platform. You can turn off tracking features and other security settings in your browser by referring to your browser’s user manual.

Links to Other Websites

Our Platform may contain links to other websites. These websites are not under our control and are not subject to our privacy notice. These websites will likely have their own privacy notices. We have no responsibility for these websites and we provide links to these websites solely for your convenience. You acknowledge that your use of and access to these websites are solely at your risk. It is your responsibility to check the privacy notices of these websites to see how they treat your Personal Data.

Protecting Children’s Privacy

Even though our Platform is not designed for use by anyone under the age of 18, we realize that a child under the age of 18 may attempt to access our Platform. We do not knowingly collect Personal Data from children under the age of 18. If you are a parent or guardian and believe that your child is using our Platform, please contact us. Before we remove any information, we may ask for proof of identification to prevent malicious removal of account information. If we discover that a child is accessing our Platform, we will delete his/her information within a reasonable period of time. You acknowledge that we do not verify the age of our users nor have any liability to do so.

Our Email Policy

You can always opt out of receiving email correspondence from us or our affiliates. We will not sell, rent, or trade your email address to any unaffiliated third party without your permission except in the sale or transfer of our business or assets, a corporate reorganization, or if our company files for bankruptcy.

Our Security Policy

We have built our Platform using security measures and authentication tools designed to protect the security of your Personal Data. We and the third parties who provide services to us also maintain technical and physical safeguards designed to protect your Personal Data. Unfortunately, we cannot guarantee prevention of loss or misuse of your Personal Data or secure data transmission over the Internet because of its nature. We strongly urge you to protect any password you may have for our Platform and not share it with anyone.

Use Of Your Credit Card

You may have to provide a credit card to buy products and services from our Platform. We use third-party billing services and have no control over them. We use commercially reasonable efforts to ensure that your credit card number is kept strictly confidential by using only third-party billing services that use industry-standard encryption technology to protect your credit card number from unauthorized use. However, you understand and agree that we are in no way responsible for any misuse of your credit card number.

Transferring Personal Data From The European Union And United Kingdom

Personal Data that we collect from you may be stored, processed, and transferred among any countries in which we operate. If you are located in the European Union or the United Kingdom, we rely on derogations for specific situations as defined in Article 49 of the GDPR to transfer your Personal Data to other jurisdictions. You further consent to the transfer of your Personal Data to the United States and other jurisdictions, which may have less protections than your jurisdiction of residence.

Changes to Our Privacy Notice

We reserve the right to change this privacy notice at any time. If our company decides to change this privacy notice, we will post those changes on our Platform so that our users and customers are always aware of what information we collect, use, and disclose. If at any time we decide to disclose or use your Personal Data in a method different from that specified at the time it was collected, we will provide advance notice by email sent to the email address on file in your account. Otherwise, we will use and disclose our users’ and customers’ Personal Data in agreement with the privacy notice in effect when the information was collected. In all cases, your continued use of our Platform, services, and products after any change to this privacy notice will constitute your acceptance of such change. If you have questions about our privacy notice, please contact us through the information at the top of this privacy notice.

Copyright © This Privacy Notice is protected under United States and foreign copyrights. The copying, redistribution, use or publication by you, is strictly prohibited.