Early-access policy v1
Privacy Policy
Effective September 14, 2026. Applies to clarabit.ai, app.clarabit.ai, and the Clarabit MCP server at mcp.clarabit.ai, operated by Limeade Labs.
Clarabit is a work tool. You connect it to AI tools such as Claude, ChatGPT, Claude Code, Codex, and Cursor, and it keeps tasks, context, pages, and agent sessions in one shared record. If anything here is unclear, email support@clarabit.ai and a person will answer.
What We Collect
Account Details
You sign in with Google. From that we receive your name, email address, profile picture, and a Google account identifier so we can recognize you next time. We do not get access to your Gmail, Drive, Calendar, or other Google account content.
Workspace Content
Everything you and your agents put into Clarabit on purpose: projects, tasks, comments, pages and their version history, context entries, labels, time entries, attachments, and session logs. This is your data. We store it so your team and your AI tools can read it back, and we do not use it to train models.
MCP Tool-Call Telemetry
When an AI tool calls Clarabit through the MCP server, we record a small event per call: the tool name, timing, whether it succeeded or errored, and the client type. We never record the arguments passed to the tool or the content it returned. We use this to catch failures and keep the server fast.
Product Analytics and Technical Logs
In the web app we use PostHog to record page views and feature usage tied to your account. Session replay is switched off, and we do not run advertising trackers. Server logs may include IP addresses, browser or client identifiers, and timestamps for security, abuse prevention, and debugging.
Where It Is Stored and Who Processes It
- DigitalOcean hosts the web app, database, and attachments.
- Cloudflare runs the MCP server at mcp.clarabit.ai and provides DNS and edge networking.
- Google provides sign-in. Google receives no workspace content from us.
- PostHog provides product analytics and sees usage events, never page bodies, comments, or tool arguments.
- Buttondown stores your email only if you subscribe to optional updates on clarabit.ai.
We do not sell your data, show you ads, or share workspace content with anyone you have not invited, except where required by law or to protect the rights and safety of Clarabit users.
Your AI Tools
Clarabit does not run its own AI. When you use Clarabit inside another host, the conversation itself stays with that host and is governed by that host's privacy policy. Clarabit only sees tool calls made on your behalf and the workspace content those calls read or write.
Retention
- Workspace content is kept until the workspace owner deletes it or asks us to delete the workspace.
- MCP telemetry and product analytics are kept for 12 months, then deleted.
- Account details are kept while your account exists and deleted when you close it, apart from legal or accounting records we must retain.
- Technical logs are rotated on a short cycle and are never kept longer than telemetry.
Your Choices and Rights
You can view, export, correct, or delete workspace content through the app and MCP tools. You can disconnect Clarabit from an AI tool in that tool's settings, revoke Google sign-in from your Google account, or ask us to close your account by emailing support@clarabit.ai. We aim to respond within 30 days.
Security, Children, and Changes
Data is encrypted in transit and at rest. Production access is limited to the people who run Clarabit. Clarabit is a tool for work and is not directed at children under 16. When we change this policy, we will update the effective date and note material changes in the changelog.
Contact
Limeade Labs operates Clarabit. For anything about this policy or your data, email support@clarabit.ai.