Privacy Policy

Last updated: September 9, 2026

1. Introduction

Clarvix Digital ("we", "our", or "us") operates the website clarvix.net and associated services including WhatsApp-based AI assistants. This Privacy Policy explains how we collect, use, and protect your personal information.

2. Information we collect

We may collect the following types of information:

• Contact information: Name, email address, phone number, and WhatsApp number when you contact us or use our services.
• Business information: Company name, website, and business details provided during digital audits or service consultations.
• Communication data: Messages sent through WhatsApp or other channels when interacting with our AI assistants.
• Usage data: Information about how you interact with our website, including pages visited and time spent.

3. How we use your information

We use collected information to:

• Service provision: Provide and improve our digital audit, AI employee, and advertising services.
• Response: Respond to inquiries and communicate with you via WhatsApp and email.
• Scheduling: Process appointments and scheduling requests.
• AI quality: Improve our AI assistants and service quality.
• Compliance: Comply with legal obligations.

4. Data storage and security

Your data is stored securely using industry-standard encryption. Conversation data processed by our AI assistants is stored in encrypted databases. We retain communication data for the duration of our business relationship and delete it upon request.

5. Third-party services

We use the following third-party services to operate:

• Meta (WhatsApp Business API): For WhatsApp messaging services.
• Google Workspace: For calendar scheduling and email communications.
• AI language models: For processing and generating responses in our AI assistants.

Each third-party service has its own privacy policy governing data handling.

6. Google user data and the Clarvix Connect service

Clarvix Connect (connect.clarvix.net) is our optional, read-only integration service. If you are a business client and explicitly choose to connect your Google account, this section explains exactly how we handle that data, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access: only the read-only scopes required for the specific integrations you approve — Google Analytics (analytics.readonly), Search Console (webmasters.readonly), Google Tag Manager (tagmanager.readonly), Google Ads (adwords, enforced read-only in our code — we never modify campaigns), Google Business Profile (business.manage, enforced read-only — we never post or edit listings), Google Calendar (calendar.readonly), and, only if you explicitly bind a specific sheet, Google Sheets/Drive file metadata (spreadsheets.readonly, drive.metadata.readonly — we never list or read other files in your Drive).

How we use it: solely to run the automated revenue-leak audit and monitoring you requested — reading performance, tracking, and configuration data to detect tracking gaps, wasted ad spend, and attribution issues, and to generate your reports and alerts. We never use Google user data for advertising, and we never build user profiles for any purpose unrelated to the service you signed up for.

Who we share it with: we do not sell or share your Google user data with third parties for their own purposes. Derived, non-raw findings (e.g. "conversion tracking misconfigured on page X") may be processed by the AI language models we use to draft your report narrative; raw Google API responses and OAuth tokens are never sent to those providers. Data may be processed by our infrastructure subprocessors (hosting) strictly to operate the service, under confidentiality obligations.

How we protect it: OAuth tokens are stored encrypted at rest and are never displayed in plain text; access is scoped in code to read-only operations even where Google does not offer a read-only scope variant; you can revoke access at any time from Clarvix Connect or directly from your Google Account permissions page.

Retention and deletion: we retain your Google OAuth tokens and derived data only while your integration remains connected and active. If you disconnect a connector in Clarvix Connect, or close your account, we delete the associated tokens immediately and delete cached Google-derived data within 30 days.

7. Your rights

You have the right to:

• Access: See the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data.
• Opt-out: Stop receiving communications at any time.
• Withdraw consent: Withdraw consent for data processing.

8. WhatsApp communications

When you message our WhatsApp business number, Meta processes the message delivery. Our AI assistant processes message content to provide automated responses. You can stop receiving messages by sending "STOP" at any time.

9. Cookies and analytics

Our website may use essential cookies for basic functionality and analytics technologies to understand aggregate site usage. Users in regions that require consent may be shown a consent choice before non-essential cookies are used.

You can control cookies through your browser settings and, where available, through the consent choices shown on the site.

10. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: