ClearMakes Agents

Privacy Policy

Last updated 18 October 2026

This explains what ClearMakes Agents, run by ClearMakes, collects and why. We collect only what we need to run the service, and we do not sell personal data.

Two kinds of people

Our customers sign in and build agents. For their accounts, we decide what is collected and why. Visitors talk to an agent a customer has put on their own website. For those conversations, the customer decides what is collected; we process it for them, under our Data Processing Addendum. If you are a visitor, the website’s own privacy notice applies too, and the website owner is the one to ask about your data (we will pass your request on if you write to us).

What we collect from customers

  • Your ClearMakes account, which you use to sign in to every ClearMakes product: name and email address. If you made a password here, we keep only a scrambled (hashed) copy.
  • Your workspace: its name, members, agents and settings.
  • Content you add: documents, website pages, and connected apps or Google Drive folders you give your agents.
  • Billing records. Card details go to Paddle, our payment provider; the full card number never reaches us.
  • Invites: if your workspace was made through a friend’s invite link, which link it was and when, and whether you paid for a plan. Your friend sees only how many people joined, never who. To check that nobody invites themselves, we compare the paying account, its email and its card (Paddle shows us only the card’s last 4 digits, expiry and name, and we delete these once the check is done). An invite’s record is deleted 2 years after it is settled.

What the chat widget collects from visitors

  • The messages they send and the answers they get.
  • The address and title of the page they are chatting from.
  • Files they upload, if the agent allows files.
  • Their IP address and approximate city, if the customer leaves location switched on for that agent. This helps the customer see where questions come from and spot abuse. It can be turned off per agent.

Like every website, our web server also records IP addresses in its logs for a short time, to keep the service working and secure.

How we use it, and why we are allowed to

  • To run the service you signed up for, answer your visitors and bill you: this is needed for our contract with you.
  • To keep the service secure and working, and to prevent abuse: our legitimate interest in a safe service.
  • To count visits to our public pages with Google Analytics: only with your consent (the cookie banner).
  • To keep invoices and tax records: the law requires it.
  • To email you about your account and the service: needed for our contract with you.
  • To send you product news, only if you said yes (your consent): new features and launches, at most twice a month. Every email has an unsubscribe link, and you can turn product news off in your account settings at any time. We count how many people open and click, but not who.

Who processes it for us

  • Google, through the Gemini API, to write answers and make documents searchable. Your content and your visitors’ messages are sent to Google for this. Google processes this content under the Gemini API terms for our account.
  • Contabo, where ClearMakes Agents is hosted, in the European Union (Germany).
  • MongoDB Atlas, where ClearMakes sign-in accounts are stored, in the United States.
  • Paddle, for checkout, payments, tax and invoices.
  • Brevo sends account emails, such as invitations and account notices, and product news if you asked for it. Our news emails are sent from our own server in Germany, through Brevo.
  • Composio, only when you connect apps to an agent.
  • Google Drive, only when you connect a Drive folder.
  • Google Analytics, to count visits to our public pages; it sets cookies only if you accept them.
  • ipwho.is and freeipapi.com, to turn a visitor’s IP address into an approximate city, only when location is on.

The full list, with what each one does and where, is on the sub-processors page.

Data sent to other countries

We store your workspace’s data in the European Union (Germany) and ClearMakes sign-in accounts in the United States, and some of the companies above work in other countries. When personal data from the UK, the EU or Switzerland goes abroad, we rely on the protections the law allows for this, such as the standard contractual clauses.

How long we keep it

For as long as your workspace exists. Customers can delete conversations, documents and agents at any time. When you ask us to delete your workspace we delete its content, except records we must keep by law, such as invoices. Copies in our backups are removed as the backups roll over, within 30 days.

Cookies and browser storage

  • On our public pages (not in the app), Google Analytics counts visits so we can see which pages help people. It sets its cookies (_ga, _ga_…) only if you choose Accept on the cookie banner; until then it runs without cookies. Your choice is kept for 12 months in a cm_consent cookie shared with clearmakes.com, and you can change it with “Cookie settings” at the bottom of every public page. Reject deletes the analytics cookies.
  • If you accept, a cm_src cookie keeps the first link that brought you to a ClearMakes site (for example LinkedIn) for 90 days. Then, when you create an account or buy a plan, our server reads these cookies and tells Google Analytics that it happened: the product, the plan, the price and that first link, tied to Google Analytics’ random number for your browser. Never your name or email. If you didn’t accept, nothing is sent.
  • The chat widget keeps a visitor’s recent conversation ids in their browser (named chatly_convs_… and chatly_last_…), so a conversation can continue. If the browser blocks that storage, it uses a cookie of the same name instead. The messages themselves stay on our server.
  • The dashboard keeps your sign-in and preferences (such as the theme) in your browser’s local storage.
  • If you open a friend’s invite link, the sign-up page keeps its code in this browser tab (cm_invite_ref, session storage) until your workspace is made, then removes it.
  • Signing in with your ClearMakes account uses the cm_session cookie on clearmakes.com and its sub-domains.
  • At checkout, Paddle’s payment window (Paddle.js) sets its own cookies to take the payment safely.

We do not use advertising cookies, and nothing that tracks you runs inside the app or on the sign-in pages.

Children

ClearMakes Agents is not for children under 16, and we do not knowingly collect their data.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, ask us to limit how we use it, or object to how we use it. You can also complain to your local data protection authority. Email .

Security

How we protect data is on our Security page. Found a security problem? Tell us at and we will look into it straight away.