Privacy Policy

Last updated: October 9, 2026

Clasio ("we," "us," "our") operates the Clasio web application at clasio.ai and the Clasio mobile application for Android and iOS. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Privacy Highlights

  • Your documents never train AI models.
  • Data stored on Google Cloud in the United States, encrypted at rest and in transit. Requests to Google's Gemini API may be processed outside the United States.
  • You can delete your account and all data at any time.
  • Payments processed by Stripe. Your card details never touch our servers.
  • Push notifications are opt-in only.

1. Information We Collect

Account information:

  • Name and email address (collected via Google Sign-In or Sign in with Apple through Firebase Authentication).
  • Authentication tokens stored securely on your device (via the operating system's secure keychain on mobile, or browser storage on web).

Documents and files:

  • Files you upload directly (PDFs, images, Word documents, spreadsheets, presentations, and other supported formats).
  • Photos you take using the in-app document scanner.
  • Files imported from Google Drive, if you choose to connect it.

Payment information:

  • If you subscribe to Clasio Pro, payment is processed by Stripe.
  • Clasio does not collect or store credit card numbers, CVVs, or bank account details.
  • We store your subscription status, plan type, and billing period dates.
  • Stripe may collect your email, card details, and billing address per their privacy policy.

Push notification data:

  • If you enable push notifications, we store a device token to deliver notifications.
  • Notifications contain document names, event types, and dates (not full document content).
  • You can disable notifications at any time in the app settings.
  • Device tokens are deleted when you log out or delete your account.

Automatically collected information:

  • Crash reports and diagnostic data (via Firebase Crashlytics) including device model, operating system version, and stack traces.
  • Basic app usage patterns to improve reliability.

We do not collect location data, contacts, call logs, or any data unrelated to document management.

2. How We Use Your Information

  • To store, organize, and let you search your documents.
  • To analyze your documents with AI and extract useful information (summaries, key dates, monetary values, people, classifications).
  • To authenticate you and keep your account secure.
  • To process subscription payments and manage your plan.
  • To send push notifications about upcoming document dates and events, if you opt in.
  • To diagnose crashes and improve app stability.
  • To respond to support requests.

3. Document Processing and AI

Clasio uses Google's Gemini AI to analyze your documents. When you upload a file, Gemini extracts:

  • A 2-3 sentence summary
  • Key topics and document type
  • Names, dates, dollar amounts, and account numbers
  • A filing category for automatic organization
  • Questions the document can answer (used for search suggestions)

Your documents are not used to train AI models.

  • Google Gemini API (Paid Tier) does not use customer data for model training.
  • Google does not use your document content to improve its products. Under the Gemini API terms, Google may keep requests for a limited period solely to detect abuse and meet legal requirements.
  • Each analysis request is independent and private to your account.

4. AI Data Practices

What Gemini processes:

  • Document text content, for extraction of summaries, topics, classifications, entities, dates, and monetary values.

How Google handles data sent to Gemini:

  • Clasio uses the paid tier of the Gemini API. Google does not use prompts or responses from the paid tier to improve its products, including training models. Google may log them for a limited period solely to detect abuse and for legal requirements.

What Clasio stores from AI processing:

  • Extracted intelligence: summaries, classifications, topics, key facts, and embeddings.
  • Clasio stores your original files, the text extracted from them, and the structured results, so it can search your documents and answer questions about them. You can delete any of it at any time.

Your documents are never used to train, fine-tune, or improve any AI model. AI processing is performed per-document, per-user. There is no cross-user data mixing.

5. Document Storage and Security

  • Documents are stored in Google Cloud Storage with encryption at rest and in transit.
  • Document metadata and AI analysis results are stored in PostgreSQL on Google Cloud SQL.
  • Documents are accessed only via time-limited signed URLs (one hour to view or download, ten minutes to upload).
  • Authentication tokens on mobile are stored in the device's secure keychain (Android Keystore / iOS Keychain) via Expo SecureStore.
  • All network communication uses HTTPS/TLS encryption.

6. Third-Party Services

We do not sell, rent, or share your personal data with advertisers or data brokers. We use the following third-party services to operate Clasio:

  • Firebase Authentication: account creation and sign-in.
  • Firebase Crashlytics: crash reporting and diagnostics. Collects device model, OS version, and crash stack traces. Does not collect document content.
  • Google Gemini AI: document analysis and answers to your questions. Does not use your content to improve Google's products; may log requests for a limited period for abuse detection.
  • Google Cloud Storage: encrypted document file storage.
  • Google Cloud SQL: encrypted metadata and analysis storage.
  • Google Cloud Run: backend application hosting.
  • Stripe: subscription payment processing. Handles all card data per PCI DSS standards. Clasio never sees or stores your card details. See Stripe's privacy policy at stripe.com/privacy.

7. Data Retention and Deletion

You own your data. You can delete individual documents at any time from within the app. Deleted documents are moved to trash and permanently removed after 7 days, or immediately if you empty the trash.

Account and data deletion: You can request complete deletion of your account and all associated data (documents, metadata, analysis results, and account information) at any time by:

  • Using "Delete Account" in the app's account menu (permanently deletes your account, all documents, and all associated data)
  • Using "Delete All Documents" in the app's account menu (removes all documents while keeping your account)
  • Emailing support@clasio.ai with the subject "Delete my account"

Upon receiving a deletion request, we will permanently remove all your data from Google Cloud Storage, our database, and any backups within 30 days. If you ask us to delete your account by email, we will reply to confirm once deletion is complete.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Delete your personal data and account.
  • Export your documents (download them from the app at any time).
  • Object to processing of your personal data.

To exercise any of these rights, contact us at support@clasio.ai. We will respond within 30 days.

9. Children's Privacy

Clasio is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top and notify users via the app or email. Continued use of Clasio after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@clasio.ai.