Trust
Security and privacy at Clarnix
The page to send your IT team: what we store, what we never store, who has checked, and how to remove Clarnix again.
What we store, and what we never store
What we store
- Email metadata: sender, subject and date
- The briefings the AI writes for you
- How each email was classified, and what your rules did with it
- Your Clarnix account details: name and email address
What we never store
- Email bodies. They are processed in memory to write your briefing, then discarded.
- Calendar event details. They are read in memory for your briefing and never stored.
- Nothing from your email is used to train AI models.
What we store is kept for your plan's data retention period: 7 days on Starter, 30 days on Pro, 90 days on Team and Team Pro. Data retention in our privacy policy
Checked by Google and Microsoft
Google verified
Our security is annually assessed as part of Google's Restricted Scopes verification process.
Independently security-assessed (CASA Tier 2)
The independent security assessment Google requires before an app may access Gmail.
Microsoft verified publisher
Microsoft has verified NEXTGENWEBS, S.L., the company behind Clarnix, as the publisher of its Microsoft apps.
Where your data is processed
Our database runs in the EU, in Frankfurt, Germany.
Some of the services we use are based in the United States. Every transfer outside the EEA is covered by the EU Standard Contractual Clauses.
AI requests go to providers that keep no data and never use it to train models.
For Microsoft 365 admins
Microsoft Teams
Clarnix is listed in the Microsoft Teams Store. Like any app in the store, you can allow or block it in the Teams admin centre.
Outlook and Microsoft 365 email
Each person connects their own email account through Microsoft's sign-in and consent screen. Clarnix asks for these permissions:
Mail.ReadMail.ReadWriteUser.ReadCalendars.Readoffline_access
Clarnix does not ask for permission to send email.
Whether people can approve this themselves, or need an administrator first, is decided by your organisation's consent settings in Microsoft Entra.
Disconnecting an email account in Clarnix does not withdraw the permission at Microsoft. Remove Clarnix from the Microsoft account's app permissions as well.
Deleting your Clarnix account
You can delete your Clarnix account yourself, at any time, in Settings. You confirm with your password, or with a link we email you if you sign in with Google or Microsoft.
Your subscription is cancelled, and your profile, connected email accounts, rules and briefings are deleted. Access to Google accounts is revoked at Google.
Microsoft does not let Clarnix withdraw its own permission, so remove Clarnix from the Microsoft account's app permissions too.
Billing records are kept for six years, as Spanish tax law requires.