Privacy Policy

Overview

Clarifi is operated by Surface Owl Inc., a California corporation. This policy describes how we collect, use, share, and protect information when you use the Clarifi application. By using Clarifi, you agree to the practices described in this policy.

Categories of Information We Collect

• Account information: Name and email address provided during sign-in via Google OAuth.
• Usage data: Queries submitted through the chat interface, pages visited, and features used.
• Technical data: Browser type, device type, IP address, referring URL, and access timestamps.
• Cookies and session data: Authentication tokens and session identifiers necessary to maintain your logged-in state.

We do not collect financial information, government identifiers, or sensitive personal information from users.

Public Data Sources

Clarifi aggregates publicly available IRS Form 990 data from sources including ProPublica Nonprofit Explorer, the IRS, and the National Center for Charitable Statistics. All source data is public record. Clarifi does not collect or store private taxpayer information.

How We Use Your Information

• To provide, maintain, and improve the service.
• To respond to your queries with accurate, cited answers.
• To improve data extraction accuracy and answer quality.
• To communicate service updates or respond to support requests.
• To detect and prevent misuse, fraud, or security incidents.

We do not sell your personal information. We do not use your personal information for targeted advertising.

Third-Party Services

We share information with the following categories of third parties, solely to operate the service:

• Authentication provider: Google OAuth processes your sign-in. See Google's Privacy Policy.
• AI model providers: When AI-powered answers are enabled, your query text (not your name, email, or account information) may be sent to Anthropic for processing. See Anthropic's Privacy Policy.
• Hosting provider: The application is hosted on Fly.io infrastructure.

We do not share personal information with third parties for their own marketing purposes.

Data Retention

Account and usage data is retained for the duration of your account. Query logs are retained for up to 12 months to improve answer quality, then automatically deleted. You may request deletion of all your data at any time by contacting us (see below).

Security

We use industry-standard measures to protect your data, including encrypted connections (TLS/HTTPS), access controls, and secure credential storage. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights (California Residents)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to:

• Know what personal information we collect, use, and share.
• Delete personal information we hold about you.
• Opt out of the sale or sharing of personal information (we do not sell or share your data).
• Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us using the information below. We will respond within 45 days.

Do Not Track

Clarifi does not track users across third-party websites. We do not respond to Do Not Track (DNT) browser signals because we do not engage in cross-site tracking.

Children's Privacy

Clarifi is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by posting the revised policy with a new effective date. Your continued use of Clarifi after changes are posted constitutes acceptance of the updated policy.

Contact

For questions about this privacy policy or to exercise your privacy rights, contact us at .