Privacy Policy

Effective: October 9, 2026 · Last updated: October 9, 2026

Clavendar is a creator workspace for capturing content ideas and managing schedules. This policy describes the personal information handled in the current beta, why it is used, and how you can contact the operator.

1. Information we handle

• Account and identity: email address, Supabase authentication user ID, login/session information, and optional first name, last name, creator/channel name and profile photo.
• Workspace content: ideas, content titles, categories, statuses, priorities, selected publishing platforms, notes, scheduled dates and platform-specific posting times.
• Communications: feedback submissions, bug reports and account deletion requests, including timestamps and their associated account IDs.
• Technical data: hosting and authentication providers may process IP addresses, browser/device details, request metadata and security logs when you access the service.

Do not place passwords, payment information, health details or other sensitive personal information in content ideas, notes, or feedback. The app is not designed for storing such information.

2. Why we process information

• Register and authenticate accounts, maintain sessions and help recover access.
• Save, display, edit and synchronize your private content-planning workspace across sessions.
• Enable optional profile customization and show your creator name in the interface.
• Respond to support inquiries and feedback, evaluate bugs and improve app reliability.
• Review deletion requests, prevent abuse, and maintain security and service integrity.
• Comply with valid legal obligations when required.

Clavendar does not currently connect to your social-media accounts or publish posts automatically. Clavee AI and future integrations are roadmap concepts, not current processing activities. We do not currently claim to use creator content to train an AI model. Any future integrations or new data uses will require updated notices and, where appropriate, consent.

3. Services and transfers

Clavendar uses Supabase for sign-in, account-related information, content storage and avatar storage. Cloudflare delivers the web application and may process connection/security data. Clavendar uses Resend for delivery of account verification, password-reset and other authentication emails initiated through Supabase. Email content and delivery metadata may be processed by Resend and its infrastructure.

These providers may store or process some data outside Québec or Canada according to their applicable service configuration. The location of processing and storage can vary by provider and configuration. For questions about cross-border processing, contact us using the details below. We do not sell creator content or account information to advertisers.

4. Security and browser storage

Supabase Authentication manages user sessions. Database row-level security is configured to separate users’ calendar and idea records. The app uses an authenticated session and browser-side storage where needed for session persistence and user interface settings. Supabase storage access policies are intended to restrict private profile photos. No system is perfectly secure; users should protect their credentials and log out on shared devices.

The current site does not intentionally include an advertising tracker or behavioural advertising system. Cloudflare and Supabase may use technically necessary cookies or comparable mechanisms. Reassess this statement before adding analytics, embeds or marketing tools.

5. Keeping and deleting information

Workspace and account information is generally retained while your account remains active, unless earlier deletion is requested or a lawful reason requires retention. You can edit and remove individual content items in the application and export a backup from Account settings.

The Account deletion option submits a request for manual review; it does not immediately delete the authentication account. The operator must verify the request, remove associated account content and profile information, and confirm completion. Copies in provider backups or security logs may persist temporarily under applicable provider practices. We review and process verified deletion requests manually. Some backup copies and logs may remain for a limited period subject to provider retention settings, security needs or legal obligations.

6. Your options and rights

Subject to applicable law, you may request access to or correction of personal information, ask about how it is used or disclosed, withdraw consent where relevant, or request deletion. You may also raise a privacy concern. We may need to verify account ownership before responding. You may be able to export the workspace through the Account page; this is not a guarantee of every legally applicable data portability format.

If there is a significant change in how your information is used, we will update this notice and provide additional notice or obtain consent where required.

7. Who is responsible

For questions about retention periods, transfers, access or deletion, contact the operator at the address above.