Privacy policy

How myclever AI collects, uses, and protects your data. Your privacy rights and how to manage them.

Last updated: November 2024

1. Who We Are

myclever AI is the data controller for personal data collected through the myclever AI platform. We are registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: myclever AI. Contact: privacy@myclever.ai.

2. Data We Collect

We collect and process the following categories of personal data:

Account Information

Email address and password (encrypted)
Business name and type
Subscription and billing information

Connected Business Data

Financial data from accounting software (e.g., Xero, QuickBooks)
Sales data from e-commerce platforms (e.g., Shopify)
Customer data from CRM systems (e.g., HubSpot)
Marketing data from email platforms (e.g., Mailchimp)

Usage Data

Goals you create and track
Insights generated and actions taken
Feature usage and interaction patterns

3. How We Use Your Data

We use your data for the following purposes:

Service Delivery: To provide AI-powered insights and recommendations based on your business data
Account Management: To manage your subscription, billing, and account preferences
Communication: To send important updates about your account and the service
Improvement: To enhance our platform based on usage patterns (with consent)

4. Data Usage by Plan

Your subscription plan determines how your data may be used beyond providing the core service:

Core Plan

Your anonymised business data may be used to improve aggregate benchmarking insights for the myclever AI community.

All identifying information is removed before analysis
Data is aggregated with other businesses in your sector
Helps create industry benchmarks and insights
No individual business can be identified

Pro & Scale Plans (100% Private)

Contractual Commitment: As a Pro or Scale Plan subscriber, myclever AI contractually commits that your data is completely private and will never be used for any purpose beyond providing your personal insights. This is a binding commitment forming part of your subscription agreement.

Your data is never used to train AI models We do not use Pro or Scale plan data to train, improve, or develop any AI or machine learning models
Your data is never used for benchmarking We do not include Pro or Scale plan data in any aggregate analytics, benchmarking, or industry reports
Your data is never shared with third parties Beyond the service providers listed in Section 8 who process data solely to deliver the service to you
Enterprise-grade privacy guarantee Equivalent to ChatGPT Enterprise and similar premium AI service commitments

This commitment is enforceable under UK law and forms part of your Terms of Service.

5. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

Contract: Processing necessary to provide the myclever AI service you subscribed to
Consent: Where you have given explicit consent (e.g., marketing communications)
Legitimate Interest: For service improvements and security purposes
Legal Obligation: Where required by UK law or regulation

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@myclever.ai. We will respond within 30 days.

7. Data Security

We implement robust security measures to protect your data:

256-bit TLS encryption for data in transit
AES-256 encryption for data at rest
Regular security audits and penetration testing
Access controls and authentication requirements
Secure data centres with physical security measures
Employee training on data protection

8. Third-Party Services

We use trusted third-party services to provide the myclever AI platform:

Stripe: Payment processing (PCI DSS compliant)
OpenAI: AI analysis (with Pro plan data exclusion from training)
Neon: Database hosting with enterprise-grade security
Integration Partners: Xero, Shopify, HubSpot, etc. (subject to their privacy policies)

9. International Transfers

Some of our service providers operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) and adequacy decisions.

10. Data Retention

We retain your data for as long as necessary to provide the service:

Active Accounts: Data retained while your subscription is active
Cancelled Accounts: Data deleted within 90 days of cancellation
Deletion Requests: Data deleted within 30 days of request
Legal Requirements: Some data may be retained for legal or regulatory compliance

11. Cookies

We use essential cookies to provide the myclever AI service. These are necessary for authentication and security. We do not use advertising or tracking cookies. For more information, see our cookie notice.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.

13. Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office. Website: ico.org.uk. Phone: 0303 123 1113.

14. Contact Us

For any privacy-related questions or to exercise your rights: myclever AI, Data Protection Officer. Email: privacy@myclever.ai. United Kingdom.