Privacy Policy

Effective date: December 2, 2025

Your privacy is important to us. It is our policy to respect your privacy regarding any information we may collect from you across our website, https://clearbear.app, and any other sites or apps we own and operate.

Information We Collect

Information You Provide

• Account Information: Email address, name, and password when you create an account
• Email Data: Access to your email account to help you manage and unsubscribe from unwanted emails
• Payment Information: Billing details processed securely through our payment providers (we do not store credit card information)

Automatically Collected Information

• Usage Data: How you interact with our service, including features used and actions taken
• Device Information: Browser type, IP address, operating system, and device identifiers
• Cookies: We use cookies to maintain your session and improve your experience

How We Use Your Information

We use your email address to communicate with you and to authenticate with 3rd party products integrated with our system (e.g. Gmail, Yahoo, Outlook). We will never sell or rent your email address or ANY personally identifiable or even aggregated information to another company.

The content, and metadata of email messages is used only to allow users to process (delete/move/archive/unsubscribe from) emails using our service. We may use non-identifying and aggregate information to better design our website and app.

All personally identifiable information gathered can be disclosed to judicial or other government agencies subject to warrants, subpoenas or other governmental orders. But absent a legal compulsion, we will not divulge your information.

Finally, we do not use or share the personally identifiable information provided to us in ways unrelated to the ones described above.

Additional Limits on Use of Your Google User Data

Notwithstanding anything else in this Privacy Policy, if you provide ClearBear access to your Google data, ClearBear use of that data will be subject to these additional restrictions:

• ClearBear will only use access to read or control Gmail message metadata (including information about attachments), headers to provide a web service that allows users to process (delete/move/archive) emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.
• ClearBear will not use this Gmail data for serving advertisements.
• ClearBear will not allow humans to read this data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for Clean Email’s internal operations and even then only when the data have been aggregated and anonymized.
• Clean Email use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Email Access and Processing

What We Access

When you connect your email account, we access:

• Email headers (sender, subject, date)
• Email content necessary to identify subscription emails
• Sender information to help you manage your subscriptions

What We Don’t Do

• We do not read your personal emails beyond what’s necessary to provide our service
• We do not sell your email data to third parties
• We do not use your emails for advertising purposes
• We do not share your email content with anyone except as required by law

Data Storage and Security

We implement industry-standard security measures to protect your data:

• Encryption in transit using TLS/SSL
• Encryption at rest for stored data
• Regular security audits and updates
• Limited employee access to user data
• Secure authentication mechanisms

Your email credentials are encrypted and stored securely. We use OAuth 2.0 authentication when available to avoid storing passwords.

Third-Party Services

We work with trusted third-party service providers and have ensured that the respective privacy policies of these companies align with our own values.

Payment processing

We use third-party services to process payments and manage subscriptions. These services may collect and process personal data as described below.

We use RevenueCat to manage in-app and web subscriptions and entitlements. When you purchase a subscription, RevenueCat processes transaction data, including purchase history, to grant access to pro features.

To provide secure payments, we use Stripe in our check-out on our website, and App Store and Google Play Store (depending on your mobile device) for payments in our app.

Hosting

We use Cloudflare to host:

• our Marketing site
• web application at https://app.clearbear.app
• our API

Cloudflare offers a globally distributed content delivery network with DNS. The information transfer between your browser and our website is technically routed via the Cloudflare network. This enables Cloudflare to analyse the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious data traffic from the Internet. Cloudflare may also use cookies or other technologies to recognise Internet users, but these are used solely for the purpose described here. The use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f GDPR).

Legal Basis for Processing Personal Data under the General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

We may process your Personal Data because:

• We need to perform a contract with you
• You have given us permission to do so
• The processing is in our legitimate interests and it is not overridden by your rights
• To comply with the law

Your Data Protection Rights under the General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.

In certain circumstances, you have the following data protection rights:

• The right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us at [email protected] to assist you.
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information. Please note that we may ask you to verify your identity before responding to such requests.

Retention of Data

We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements. In certain circumstances, we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

Even if you delete your account, keep in mind that deletion by our third-party providers may not be immediate, and the deleted information may persist in backup copies for a reasonable period of time.

If you wish for your personal data to be completely removed from our Service, please send us an explicit request via email. Include your user details and a brief description of your request to facilitate the prompt processing of your data deletion.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

ClearBear does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Contact Us

If you have questions or concerns about this privacy policy, please contact us at [email protected].