Privacy Policy

1. Who We Are

ClearAudit (“we”, “our”, “us”) is an AI-powered website audit service operated by Tanuj Rajput. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at clearaudit.space.

2. Information We Collect

Account information: When you register, we collect your email address via Supabase Auth (email OTP). We do not collect passwords.

Audit inputs and results: URLs you submit for auditing, the audit type, overall score, and the full audit report (findings, issues, recommendations) are stored server-side in your account so you can access your history and track improvements over time.

Payment information: If you subscribe to a paid plan, payment is processed by Razorpay. We do not store your card details — Razorpay handles all payment data under their PCI-DSS compliance.

3. How We Use Your Information

• To authenticate you and manage your account
• To generate AI audit reports for submitted URLs
• To store and display your audit history and track score improvements over time
• To process subscription and top-up payments via Razorpay
• To send transactional emails (OTP codes, audit results, billing notifications) via Resend
• To improve the Service based on aggregate usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising.

4. AI Processing (Anthropic Claude)

Audit reports are generated using Anthropic’s Claude API. When you submit a URL, the fetched page content is sent to Anthropic’s API for analysis. This data is processed under Anthropic’s Privacy Policy.

The raw fetched page content is not retained by us beyond the API call. However, the structured audit output (scores, findings, recommendations) is saved to your account for dashboard access. Anthropic does not train on API data per their usage policies.

5. Data Storage and Security

Your email address, authentication data, and audit history are stored securely by Supabase, hosted on AWS infrastructure. Supabase is SOC 2 Type II compliant.

We use industry-standard practices including HTTPS encryption in transit and row-level security policies in our database.

6. Cookies

We use only essential cookies required for authentication (Supabase session cookies). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

7. Data Retention

We retain your email address and audit history for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us.

Payment records are retained as required by applicable financial regulations.

8. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for data processing

To exercise these rights, contact us at tanujrajput30@gmail.com. We will respond within 30 days.

9. Third-Party Services

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active subscribers by email of material changes. Continued use of the Service after updates constitutes acceptance of the revised policy.

11. Contact

For privacy-related queries, contact us at tanujrajput30@gmail.com. We aim to respond within 5 business days.