Privacy Policy

Introduction

ClaroLoop, Inc. (“ClaroLoop”, “we”, “us”, or “our”) operates the claroloop.com website and the ClaroLoop platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

We collect information you provide directly to us when you create an account, connect your accounting software, or contact us for support. This includes:

• Account information: your name, email address, company name, and password (stored as a bcrypt hash, never in plain text)
• Financial data: invoices, bills, payments, customer records, and vendor records synced from your QuickBooks or Xero account through authorized OAuth connections
• Field service data: job records, technician assignments, and service history imported from your FSM software through scheduled data imports
• Usage data: how you interact with ClaroLoop, which features you use, and when you log in
• Device data: your browser type, IP address, and device information collected automatically

How We Use Your Information

• Provide, maintain, and improve the ClaroLoop platform
• Sync and normalize your financial and field service data
• Generate job profitability reports, revenue leak alerts, collection notices, and price tracking
• Send you morning briefings and other notifications you have opted into
• Respond to your support requests
• Detect and prevent fraud and abuse
• Comply with legal obligations

How We Protect Your Information

We take the security of your data seriously. All sensitive financial data is encrypted at rest using AES 256 GCM encryption. All data in transit is protected by TLS 1.2+ encryption. Your data is isolated at the organization level, meaning no other customer can access your information. We use session based authentication with JWT tokens, rate limiting, and audit logging on all data access. For more details, visit our Security page at claroloop.com/security.

Data Sharing and Disclosure

We do not sell your data. We do not share your data with advertisers. We do not share your data with third parties for their own marketing purposes. Period.

We may share your information only in the following limited circumstances:

• With service providers who assist us in operating the platform (such as cloud hosting and email delivery), subject to strict confidentiality agreements
• If required by law, subpoena, or other legal process
• To protect the rights, property, or safety of ClaroLoop, our users, or the public
• In connection with a merger, acquisition, or sale of assets, with notice to you

Third Party Services

ClaroLoop integrates with third party services such as QuickBooks, Xero, and various field service management platforms. When you connect these services, we access your data through their authorized APIs using OAuth tokens. We only request the permissions necessary to provide our services. We do not store your login credentials for any third party service. Each third party service has its own privacy policy and we encourage you to review them.

Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. If you cancel your account, we will retain your data for 90 days after cancellation to allow you to reactivate or export your information. After the 90 day retention period, your data will be permanently deleted from our systems. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.

Cookies

ClaroLoop uses essential cookies only. These cookies are necessary for the platform to function and cannot be switched off. They include session cookies for authentication and security cookies to prevent cross site request forgery. We do not use advertising cookies, analytics cookies, or any third party tracking cookies. We do not track you across other websites.

Your Rights

You have the following rights regarding your personal information:

• Access: you can request a copy of the personal information we hold about you
• Correction: you can request that we correct any inaccurate or incomplete information
• Deletion: you can request that we delete your personal information, subject to legal obligations
• Export: you can request a machine readable export of your data at any time from your account settings
• Disconnect: you can revoke ClaroLoop’s access to any connected third party service at any time through your account settings or through the third party service directly

To exercise any of these rights, please contact us at privacy@claroloop.com.

Children’s Privacy

ClaroLoop is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 18, please contact us at privacy@claroloop.com.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the ClaroLoop platform prior to the change becoming effective. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@claroloop.com.