Privacy Policy

Account data. When your organization's administrator creates a user account for you, we store your name, email address, role, and sign-in records so the service can authenticate you and your organization can manage access.

Customer business data. The records your team enters into Clariva — customers, contacts, quotes, orders, invoices, payments, inventory, and related files — belong to your organization. We store and process them solely on your organization's behalf to provide the service. We do not use this data for advertising, and we do not use it to train AI models.

We use the data above to operate the service: signing you in, storing and displaying your organization's records, sending emails your organization triggers (such as quotes, invoices, and statements), providing support, billing, and keeping the platform secure. That's it.

We do not sell personal data, and we do not share it with third parties for their own marketing. Under the California Consumer Privacy Act as amended (CCPA/CPRA), we do not “sell” or “share” personal information as those terms are defined there, and we do not process it for cross-context behavioral advertising.

For the business records your organization enters into Clariva — its customers,contacts, orders and invoices — we act as a processor (a “service provider” under California law), handling that data on your organization's instructions and only to provide the service. Your organization decides what to collect and how long to keep it.

For our own records — the account we hold for your organization, our billing history and our support correspondence — we act as a controller.

Our obligations as a processor — security measures, sub-processor notice, breach notification and deletion — are set out in our Data Processing Addendum, which applies automatically to every customer without needing to be signed.

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, obtain a portable copy, or object to or restrict certain processing. You also have the right not to be discriminated against for exercising these rights. To exercise them, email support@caringconsulting.co or write to the postal address below. We will acknowledge within 10 business days and respond within 45 days, extending once where the law allows and telling you if we do. We may need to verify your identity before acting, and we will not charge you for a reasonable request.

If your data reached us because you deal with one of our customers rather than with us directly, we will route your request to that organization, since it is their data and they decide the outcome. An authorized agent may make a request on your behalf with proof of authority.

Clariva runs on Google Cloud and Firebase in the United States. We use a small set of service providers to deliver specific features, and each receives only what its function requires:

• Google Cloud / Firebase — application hosting, database, and file storage
• Algolia — search indexing so in-app search is fast
• Resend — delivery of transactional email
• Stripe — payment processing (card details go to Stripe, not to us)
• Intuit (QuickBooks Online) — accounting sync, only when your organization connects its QuickBooks company
• Sentry — error reporting so we can find and fix bugs

We use a session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Data is encrypted in transit and at rest. Access inside your organization is controlled by the roles and permissions your administrators configure, and our own operational access is limited to what running and supporting the service requires.

We keep data for as long as your organization's account is active. On request — or when a subscription ends — we will export and then delete your organization's data, except where we're required to retain specific records (for example, billing records) by law. Individual users should contact their organization's administrator first, since the organization controls its own records; you can also reach us directly using the contact below.

Clariva is a business tool. It is not directed to children, and we do not knowingly collect data from them.

If we change this policy, we'll update this page and the date at the top. Material changes will also be communicated to your organization's administrators.

Questions or requests: support@caringconsulting.co.