Data Policy

1. Overview

This Data Policy describes how ClearClient LLC stores, processes, and protects the data you and your clients entrust to us. It supplements our Privacy Policy and is binding on all users of the Service.

2. Data Ownership

Your Data: All client data you enter into ClearClient belongs to you. ClearClient LLC acts solely as a data processor on your behalf. You retain full ownership and control of your client data at all times.

Platform Data: Aggregate, anonymized usage statistics and platform telemetry are owned by ClearClient LLC and may be used to improve the Service.

3. Storage and Infrastructure

All data is stored on servers located in the United States. We use cloud infrastructure providers with SOC 2 Type II certification. Data is encrypted at rest (AES-256) and in transit (TLS 1.2 or higher).

4. Data Processing

We process your data solely to:

• Provide and improve the Service
• Ensure platform security and integrity
• Generate anonymized analytics
• Comply with legal obligations

We do not process your client data for advertising purposes or sell it to any third party.

5. Access Controls

Access to your workspace and data is restricted to:

• You and team members you explicitly authorize within your account
• ClearClient personnel (engineers or support staff) only when necessary for legitimate business purposes, such as providing customer support, investigating technical issues, preventing fraud or abuse, or complying with legal obligations — all such access is logged with details of who accessed what and why, and is subject to strict internal policies and least-privilege principles
• Automated systems for backups, security monitoring, and service operations

6. Backups and Recovery

Data is backed up daily with a minimum 30-day retention for backup copies. In the event of data loss, we will restore the most recent available backup. ClearClient LLC is not liable for data loss beyond our reasonable control.

7. Portability and Export

You may export your client data at any time in standard formats (PDF, CSV). Upon account termination, you have 30 days to export before data is permanently deleted.

8. Sub-processors

We use the following categories of sub-processors:

• Cloud hosting and infrastructure providers
• Authentication services
• Payment processors (billing data only)
• Email delivery services

All sub-processors are contractually bound to data security standards equivalent to or greater than ours.

9. Incident Response

In the event of a security incident, we will:

• Notify you within 72 hours of discovery
• Provide a detailed incident report within 30 days
• Take immediate remediation steps
• Comply with Florida FIPA notification requirements (Fla. Stat. § 501.171)

10. Compliance

ClearClient LLC's data practices are designed to comply with applicable U.S. federal law, Florida state law (including FIPA), and relevant international standards. We conduct periodic security audits and vulnerability assessments.

ClearClient LLC · Florida, United States · Questions? support@clearclient.io