Privacy Policy
This Privacy Policy explains what information Clerune collects, how it is used, and who it is shared with, when you use the Clerune application (the "Service").
Information we collect
We collect the following categories of information as part of operating Clerune:
- Account and profile data — your name, email address, and password (stored as a salted hash, never in plain text), plus optional two-factor authentication settings and account-recovery details.
- Organization/workspace data — the organizations you create or belong to, your role within them (owner, admin, or member), and other members' basic account information as needed to display your workspace.
- Meeting transcripts — transcript text you paste or upload, plain-text/markdown files you upload, or a transcript generated from an audio recording you upload for automatic transcription, associated with a meeting in your organization.
- Uploaded audio — if you upload an audio recording for automatic transcription, the audio file itself is processed in order to generate that transcript. Clerune processes uploaded audio in memory during transcription and does not intentionally retain a copy of the raw audio file in Clerune's own storage afterward — only the resulting transcript text (described above) is saved as part of your meeting data.
- AI-generated meeting content — summaries, key points, decisions, and action items generated from your transcripts, plus the meeting minutes composed from that analysis.
- Tasks and documents — tasks you create (with status, priority, and optional meeting links), and administrative documents/templates you create, import, or generate through the Service.
- AI requests and generated outputs — the content of requests sent to our AI provider (for meeting analysis, AI document drafting, and "Ask Clerune" questions) and the responses returned, in order to display and store the results in your workspace.
- Authentication and security data — session identifiers stored in an httpOnly cookie, sign-in timestamps, and technical data needed to detect abuse (such as rate-limiting counters).
- Billing and subscription data — your organization's plan (Free or Pro), subscription status, and identifiers assigned by our payment provider, Paddle (such as a Paddle customer/subscription ID). Clerune does not receive or store your full payment card number; Paddle handles payment collection directly.
- Cookies and session data — a session cookie that keeps you signed in, and short-lived cookies used during sign-in flows (such as two-factor verification or Google sign-in). We do not use third-party advertising or tracking cookies.
How we use this information
We use the information above to:
- Provide the core Service — creating and displaying meetings, minutes, tasks, and documents.
- Generate AI-assisted content you request (analysis, drafting, and Ask Clerune answers).
- Authenticate you, keep your session secure, and enforce organization-level access control.
- Administer subscriptions, usage limits, and billing through Paddle.
- Detect, prevent, and respond to abuse, fraud, or security issues.
- Communicate with you about your account, such as email verification or account-recovery messages.
We do not sell your personal information.
Service providers and subprocessors
Clerune relies on the following third-party service providers, each of which processes a limited slice of the data described above in order to help us run the Service:
- Anthropic — processes transcript content, AI requests, and generated outputs to power meeting analysis, AI document drafting, and Ask Clerune. This applies to every transcript regardless of source, including one generated from an uploaded audio recording — if you run meeting analysis or another AI feature on it, its text is sent to Anthropic in the same way as a pasted or uploaded-file transcript.
- Deepgram — if you upload an audio recording for transcription, Deepgram processes that audio to generate the transcript text, including speaker separation (diarization) where applicable. Uploaded audio is therefore processed by Deepgram's own infrastructure as part of providing this feature.
- Paddle — our payment provider and merchant of record; processes billing/subscription data and payment details directly (Clerune never sees your full card number).
- Railway — hosts our backend application and database.
- Vercel — hosts our frontend web application.
- Resend — sends transactional email, such as email-verification and account-recovery messages.
- Google — if you choose to sign in with Google, Google authenticates your identity and shares basic profile information (such as your name and email) with Clerune.
Some of these providers may process data on servers located outside your own country, including in the United States. By using Clerune, you understand that your information may be transferred to and processed in such locations.
Data retention
We retain your account, workspace, and content data for as long as your account or organization remains active, so that the Service continues to work as expected. We do not currently offer automated self-service account or organization deletion; if you would like your data removed, contact us using the details below and we will address the request manually.
This does not apply to raw uploaded audio files, which are not retained by Clerune at all — see "Uploaded audio" above.
Security
We take reasonable measures to protect your information, including hashing passwords, using httpOnly session cookies, supporting optional two-factor authentication, and enforcing organization-level access control on every workspace resource. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights and choices
Depending on where you live, you may have rights to access, correct, or request deletion of your personal information, or to object to certain processing. You can update your profile information from within the application, and you can contact us to request access to or deletion of your data. We will respond to legitimate requests in a reasonable timeframe.
Changes to this policy
We may update this Privacy Policy from time to time, for example as the Service evolves. We will update the "Last updated" date above when we do.
Contact
Questions about this Privacy Policy can be sent through our Contact page or directly to clerune@jassiansystems.com.