Privacy Policy

Clerion was designed so that there is very little to write on this page. We are an analytics product that does not want your visitors' personal data: no cookies, no fingerprinting, no cross-site profiles, no advertising identifiers. We measure what happens on your pages, not who your visitors are.

What we collect from your visitors

When the Clerion script runs on your site, it records aggregate, event-level facts: the page that was viewed, the referrer, the browser and device class, the approximate location derived from the IP address (country, region, and city, plus city-precision coordinates and the network operator's name, never GPS or device location), and performance and error signals. The IP address itself is used transiently to derive that coarse location and detect bots, then discarded. It is never stored in plain text.

By default, no identifier persists between visits. A visitor who returns tomorrow is a new visitor. If you, the site owner, enable the optional consent mode, returning visitors can be recognised, but only after they explicitly accept the consent banner, and the identifier stays scoped to your site alone.

What we collect from you, the customer

To run your account we store what you give us at sign-up: your name, email address, and password (hashed), plus your sites, settings, and billing status. We use this to operate the product, send you your briefings, and nothing else. We do not sell or rent customer data.

Cookies

The analytics script we put on your site sets no cookies. The only cookies Clerion uses are the strictly necessary ones in your own logged-in account, for example to keep you signed in. There are no advertising or tracking cookies anywhere in the product.

Who else touches your data

We do not sell or trade your data. We do use a small number of trusted service providers to run the product, and they may process data only on our instructions and under contract: cloud hosting, our payment processor for billing, an email provider to send your briefings and account messages, and the AI model providers that generate your insights. The AI providers receive aggregated metrics and page paths only, never your visitors' personal data, because we do not have it to begin with. We do not allow any of them to use your data for their own purposes.

Where your data lives and how long we keep it

Analytics data is stored on EU infrastructure, encrypted at rest and in transit. We keep it for the retention window of your plan, after which it is removed. Account information is kept for as long as your account is open. Your data belongs to you: you can export it from your account at any time, and deleting a site or your account permanently removes the underlying data, except for the minimum we are legally required to retain, such as billing records.

Security

We protect your data with encryption, access controls, and the practices described on our security page. No system is perfect, and if a breach ever affected your data, we would notify affected customers and the relevant authorities as required by law and without unnecessary delay.

AI processing

Clerion's AI features read your aggregated analytics to produce briefings and answers. They see metrics and page paths, never your visitors' personal data, because we do not have it to begin with. Geography in AI requests is limited to country level: city, coordinates, and network-operator data stay in our EU database and are never sent to the AI model providers.

When you connect Clerion to an AI assistant of your choice through our MCP server, the reports you ask for are sent to that assistant's provider at your request, under your agreement with them. The connection reads the same aggregated reports you see in the app (the one thing it can add is a website to your account, when you ask), such as counts by page, source, country or city, never rows about individual visitors or their personal data.

Children

Clerion is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16, and the product is not designed to identify the individuals who visit your site.

Your rights

Whether GDPR, CCPA, or common sense applies to you, the rights are the same in practice: ask us what we hold, ask for a copy, ask us to correct or delete it, or object to a use, and we will. You will never be charged or treated differently for exercising a right. Email hello@getclerion.com and a human will handle it.

Changes

If this policy changes in any meaningful way, we will note it in the changelog and email registered customers before it takes effect.

Last updated: October 2026