Privacy Notice

Scope and roles

This notice applies to Clear Treasury websites, sales interactions, and platform services. For platform Customer Data, the customer is generally the controller or business and Clear Treasury acts as its processor or service provider. For account, security, billing, and marketing administration, Clear Treasury may act as an independent controller.

Information we process

• Account details such as name, business email, organization, role, authentication records, and support correspondence.
• Customer-provided transportation, contract, trip, voucher, payment, forecast, and reconciliation data.
• Usage, device, log, security, audit, and diagnostic information.
• Commercial and billing records. Payment-card details are collected by Stripe and are not stored by Clear Treasury.
• Website inquiry details submitted for demos or working sessions.

Purposes

• Provide, secure, support, and improve the service.
• Authenticate users, enforce tenant and role boundaries, prevent abuse, and investigate incidents.
• Process subscriptions, communicate service and billing status, and maintain business records.
• Respond to inquiries and conduct business-to-business marketing where permitted.
• Comply with law and enforce agreements.

Disclosure and international processing

Information is disclosed only to authorized personnel, the customer’s authorized users, subprocessors listed on our Subprocessors page, professional advisers under confidentiality duties, and authorities or transaction counterparties when legally required. Providers may process data in the United States and other locations where they operate, subject to contractual safeguards where required.

Choices and requests

Authorized users may update account information in the service. Individuals may request access, correction, deletion, or other applicable privacy rights by contacting privacy@cleartreasury.ai. We may verify identity and coordinate platform-data requests with the relevant customer.

Security, retention, and changes

We use administrative, technical, and organizational safeguards appropriate to the service. No method is completely secure. Retention follows the published Data Retention and Deletion Schedule. Material changes will be dated and, where appropriate, communicated to affected customers.