Privacy Policy

When you use Clir, we may process:

• the website URL you submit;
• pages discovered or selected as part of an assessment;
• accessibility findings and evidence generated from assessed pages;
• technical information needed to operate and secure the service, including IP addresses and request information;
• when you run a scan or start a page list, how your visit began: the page you landed on, the site that referred you (if any) and any campaign identifiers in the link you followed;
• payment and transaction identifiers provided by Stripe, such as payment status, amount and transaction references;
• for a One Page or Several Pages purchase: the email address you give Stripe at checkout, which Clir uses to send your purchase email with your private report link and, where Clir holds no other address for your report, to email you when the Several Pages assessment or recheck you bought has finished and about two weeks before your report access ends. Clir reads the address from Stripe when it sends each of these emails and does not keep it in a customer account;
• while a paid assessment is running and its progress page is open, one timestamp for that report showing that the page is being viewed, so that Clir does not email you about something you watched finish. It holds no address or other personal detail and is deleted with the report;
• for referral eligibility and fraud prevention: identifiers derived from your checkout email address, Stripe customer and card fingerprint, kept so that Clir can recognise a returning customer. They are produced with a secret key and cannot be turned back into the details they come from, but they are still personal information because they single out a returning customer, so access to them is restricted;
• for the Agency Pass: the billing email address, which Clir uses for your pass emails (including notices about client project windows, expiring credits and cancellation), Stripe customer and subscription identifiers, the client or project names you choose to enter, and records of private pass links and sign-ins (the links and sign-in values are stored only as one-way hashes);
• messages sent through the contact form: your name, email address, optional company, approximate project volume and your message; and
• information you send to us when contacting support.

Clir's public assessment interface does not require an account, and the Agency Pass does not use a password.

To produce an assessment, Clir processes content available on the submitted website.

Assessment evidence can include information about affected elements, selectors and limited portions of page content or HTML needed to explain findings.

Because website content can itself contain personal or confidential information, you should only submit websites that you are authorised to assess. Do not submit private or restricted pages containing sensitive information unless you have appropriate authority to do so.

When you run a recheck, Clir stores each recheck's findings for the pages you chose (selectors, short markup excerpts, evidence and the result for each original finding) so the recheck document can be shown again. This data is kept and deleted together with the assessment it belongs to, on the retention schedule below.

If you apply to Clir Partners, join the programme or take part in referrals, we process the following information for the purposes described.

• your application: your name, email address, role, experience, how you would use Clir and, if you give one, a website. We use it to review your application, decide it and reply to you;
• email verification: a one-time link sent to the address you gave, valid for 48 hours. An application that is not confirmed is deleted after the link expires and is never shown for review;
• admin review: our team reads confirmed applications and records the decision, who made it and when, and any question we asked you;
• approval and access: if you are approved we create a workspace tied to your email address and send a one-time link; we record sign-in and session information to keep it secure;
• terms acceptance: the version of the Partners Programme Terms you accepted and the time you accepted them;
• credit history: your introductory allowance, credits used, restored and expired, and their dates, so your balance is accurate and auditable;
• referral attribution: a referral code carried in a link, the type of qualifying purchase, the reward status and the credits awarded. We do not give a referring partner access to a referred customer's identity or payment details;
• security and fraud prevention: records that let us detect self-referrals, duplicate or artificial purchases and misuse of the programme; and
• communications: service emails about your application, access, credits and referrals. We do not send marketing emails for the programme without a separate choice.

We keep decided Partner applications, terms acceptance, and credit and referral history only for as long as they are needed to run the programme, keep balances correct and auditable, answer questions and prevent repeat abuse. We then delete or anonymise them, keeping only the minimum that accounting or legal obligations require.

If a workspace is available and you use it, we process the following in addition to the information described above.

• verified email addresses: the addresses you confirm with a one-time link, used to sign you in, to match purchases to you and to send service and security messages. You can add or remove addresses, or close the workspace, at any time;
• a one-way digest of the email address used at checkout (not the address itself), so that a purchase can be found when you sign in with that address. A digest is still personal information, because the same address always produces the same digest: we use it only to find your purchases and delete it with the purchase record it belongs to;
• sign-in sessions and one-time links: a link works once and expires soon after it is sent; a session lasts 30 days. Used or expired links and ended sessions are deleted about 7 days later;
• the link between your workspace and each purchase, with the reason it was linked, so that we show you only your own purchases;
• branding you choose to add (a business name, logo, accent colour and contact line), until you remove it or close the workspace;
• if you switch monitoring on, the settings, the results of each check, and a retained copy of the findings of the pages you chose so later checks can be compared with them. That copy is deleted when you stop monitoring, when monitoring ends, when the purchase is refunded or when the workspace is closed, and otherwise when the report's own retention period ends unless you chose to keep it. Summaries of checks are deleted after 400 days;
• emails about monitoring: new confirmed issues, possible regressions, repeated failures and the end of included monitoring, and summaries if you choose them, each with a link to turn them off;
• a record that an “assessment complete”, “recheck complete” or “access ending” email was sent, so we never send it twice (it holds no address and no message content); and
• a log of sign-in and link events, used to investigate abuse and support requests.

Closing your workspace deletes the addresses, sessions, links, branding, monitors and their retained copies and history. It does not delete payment and purchase records, which we keep for accounting and legal reasons; it does not delete a report you have already shared with someone else; and your private report links keep working until the report's own period ends. We explain what we deleted, what we kept and why.

We use information as necessary to:

• provide scans, assessments and reports;
• discover and preserve the scope selected for an assessment;
• calculate and verify assessment pricing;
• process and reconcile purchases and refunds;
• keep private reports protected;
• prevent abuse, fraud and excessive automated use;
• diagnose technical problems and maintain service reliability;
• respond to support, privacy and security requests; and
• meet applicable legal, accounting and recordkeeping obligations.

We do not use assessment data to create advertising profiles.

Where data-protection law requires a legal basis, Clir relies on: performing its contract with you, which covers providing the assessments and features you ask for; its legitimate interests in securing the service, preventing fraud and abuse, keeping the service reliable and improving it; compliance with legal obligations such as accounting and tax; and your consent where Clir asks for it.

Payments are processed through Stripe's hosted checkout.

Clir does not receive or store your full payment-card details.

Stripe may collect information directly from you when you use its checkout service. Stripe handles that information under its own terms and privacy practices.

Clir retains transaction information necessary to recognise and reconcile purchases, payments and refunds.

Clir uses third-party service providers to help operate the service, including providers for hosting and infrastructure, data storage, and payment processing.

Payments are processed by Stripe. Other service providers may process technical or service data as necessary to provide their services to Clir.

Clir uses analytics and performance-measurement tools to understand how the website is used and how it performs.

These tools may process technical and usage information such as pages visited, referral information, browser or device information, approximate location derived from network information, and website performance measurements.

We use this information to understand traffic, identify performance problems and improve Clir. We do not use it to build advertising profiles, and Clir does not use advertising trackers.

Our analytics and hosting providers process this information on Clir's behalf as part of the services they provide to us.

We do not sell personal information to advertisers.

Some Clir emails contain specially tagged links. When a tagged Clir link is opened, Clir may record that the link was visited. Visits to ordinary, untagged pages are not recorded this way.

That visit record contains only the time of the visit, the campaign, source, medium and content identifiers from the link, the landing page path (without the rest of the address), and a random session identifier used to avoid counting the same link twice in one browser tab. It does not contain your IP address, browser details, referring site, email address or any device fingerprint, and it does not identify a person.

Clir uses a strictly functional first-party cookie when you open a private report. It keeps the report accessible in your browser without repeatedly exposing the private access credential.

This cookie is used for security and service functionality, not advertising or behavioural tracking. Its lifetime does not exceed the remaining report-access period.

When you open an Agency Pass, Clir sets a second strictly functional first-party cookie that keeps you signed in on that device for up to 30 days. It is sent only to the Agency Pass pages and is not used for advertising or tracking.

When you sign in to a workspace, Clir sets a strictly functional first-party cookie that keeps you signed in on that device for up to 30 days. It is sent only to workspace pages and is not used for advertising or tracking.

Clir does not currently use advertising or analytics cookies or IndexedDB for the application. After you open an Agency Pass, Clir keeps one non-identifying marker in your browser's local storage so the website can offer a shortcut back to your pass; it contains no email address or other personal information, and it is removed when you sign out or clear this site's data.

Clir uses your browser's session storage, which is cleared when you close the tab, for temporary purposes: to remember how your visit began (for example, a tagged link) so that a scan you run in the same tab can be connected to it, and to avoid recording the same tagged link more than once in the same tab session. It is not used for advertising or to follow you across other websites.

Third-party services you visit separately, such as Stripe's hosted checkout, may use their own technologies under their own policies.

We keep different categories of information for different periods according to why they are needed.

Our current retention schedule is:

• unconfirmed Partner applications: deleted 48 hours after the confirmation link is created if it has not been used;
• unconfirmed page-discovery information: scheduled for deletion after 24 hours;
• rate-limit and temporary abuse-prevention counters: scheduled for deletion after 48 hours;
• unpaid assessment and scan data: scheduled for deletion after 30 days;
• complete raw scanner output: scheduled for deletion after 30 days;
• paid assessment findings, evidence and selected scope information: scheduled for deletion 90 days after your payment is confirmed;
• recheck results and their evidence: scheduled for deletion together with the assessment findings they relate to (90 days after your payment is confirmed);
• operational records containing customer assessment data: scheduled for deletion after 90 days;
• tracked-link visit records: scheduled for deletion after 90 days;
• Agency Pass single-use links and sign-ins: the link in your Agency Pass email expires after 7 days, a sign-in link you request later expires after 30 minutes, and a sign-in lasts up to 30 days; expired, used or ended records are then removed (a client report you opened from a pass is available for 24 hours at a time and can be reopened);
• contact-form messages: ordinarily up to 24 months;
• private report access: 90 days; and
• support correspondence: ordinarily up to 24 months after the matter is resolved.

The one-way purchase identifiers described in section 1 are kept for as long as referral eligibility and fraud prevention require, and are then deleted.

Some records are kept for as long as their purpose lasts rather than for a fixed number of days: sign-in and security logs, and the log that stops a reminder or completion email being sent twice. We delete or anonymise them once the purpose has ended, keeping only what accounting or legal obligations require.

Automated deletion runs periodically, so stored data may remain for a short period after the applicable retention period has passed.

Purchase, payment, refund and other records that must be retained for accounting, fraud prevention, dispute handling or legal obligations may be retained for longer where necessary or required.

Infrastructure providers may retain their own logs, backups or transaction records according to their applicable retention practices.

Where Clir generates downloadable PDF or CSV files, they are generated when requested and sent to your browser. Clir does not separately retain those generated files as stored customer documents.

The underlying assessment information remains subject to the retention periods above.

We use technical and organisational measures intended to protect Clir and private assessment information against unauthorised access, disclosure or misuse.

No internet service can guarantee absolute security.

You should treat a private Clir report link as confidential and share it only with people who should have access to the assessment.

Depending on the law that applies to you, you may have the right to ask for access to your personal information, to have it corrected or deleted, to restrict or object to some processing, to receive it in a portable form, and to complain to your local data-protection authority.

To make a privacy request, contact support@clir.site. We may ask for information reasonably necessary to verify that you are authorised to make a request concerning the relevant information or assessment.

Some information may need to be retained despite a deletion request where required for legal, accounting, security, fraud-prevention or dispute purposes. Deleting an assessment does not delete a copy that you have already shared, or information held by a payment provider under its own obligations. When we answer a request, we explain what we deleted, what we kept and why.

Clir uses service providers for hosting, website analytics and performance measurement, its database, and sending service emails, and Stripe for payments.

These providers may process information in countries other than the country from which you use Clir. Where applicable law requires safeguards for international transfers, those transfers are handled subject to the relevant provider arrangements and legal requirements.

Clir is a business and professional website-assessment service and is not directed to children.

We may update this Privacy Policy when Clir's practices or legal obligations change.

The effective date at the top identifies the current version.

Simply visiting Clir is different from submitting a website for assessment. Ordinary browsing can generate the technical and performance information described in this Policy. When you submit a URL or begin a page-discovery flow, Clir additionally processes the submitted address, the pages involved in the selected scope, assessment evidence and the operational information needed to create and protect the resulting scan or report.

Where a visit begins through a specially tagged Clir link, limited campaign information can be associated with a scan started in the same browser tab. This helps Clir understand whether a particular outreach link led to use of the service. It is not used to follow a visitor across other websites or to create an advertising profile.

Assessment evidence is generated from the website submitted to Clir. Depending on the issue detected, that evidence can include selectors, element information and limited page or HTML content needed to identify and explain a finding. Clir does not ask customers to upload a separate copy of the website in order to perform a public assessment.

Public websites can themselves contain names, contact details or other information relating to people. Because evidence may reflect content present on an assessed page, customers should submit only websites they are authorised to assess and should not use the public assessment flow as a way to process private, restricted or confidential pages without appropriate authority.

Paid reports are made available through private report access rather than a public listing. Anyone who is given a valid private report link may be able to view the associated report, so the link should be shared only with people who are intended to have access. Clir may use functional browser storage or cookies to keep authorised report access working without repeatedly exposing the underlying access credential.

If access must be restored during the report-access period, Clir may ask for information reasonably necessary to connect the request to the relevant purchase. This verification is intended to avoid disclosing a private report to somebody who cannot reasonably be connected with it.

The retention periods in this Policy describe Clir's operational deletion schedule. Deletion jobs run periodically, so a record can remain for a short period after its stated period has elapsed. Deleting assessment data also does not necessarily require deletion of every transaction, security, fraud-prevention, support or accounting record connected with the same activity where that record has a separate legitimate retention purpose.

A privacy request can be sent to support@clir.site. To locate the relevant information and avoid acting on an unauthorised request, Clir may ask for information reasonably necessary to identify the scan, purchase, report or correspondence concerned. Where applicable law gives additional rights, requests are handled subject to those rights and any lawful exceptions.

For privacy questions or requests:

support@clir.site