1. Who we are
This Privacy Notice explains how Clarice And Co ("we", "us", "our"), trading as ExecutionHubAI, collects, uses and protects personal data when you use our website and the ExecutionHubAI service (the "Service"). Clarice And Co is the data controller responsible for your personal data.
If you have any questions about this notice or your personal data, contact us at support@executionhubai.com.
2. Personal data we collect
- Account data — name, email address, password (stored hashed), and profile details you provide.
- Workspace and project content — documents you upload, problem statements, generated artefacts, RAID items, comments and any other content you input.
- Usage and telemetry — pages visited, features used, AI generations made, timestamps, error logs and approximate location derived from IP.
- Device data — IP address, browser type, operating system and device identifiers.
- Support communications — messages you send us and our replies.
- Billing data — collected and processed by our payment provider Paddle (see Section 5). We receive limited transaction metadata such as plan, status, last four digits of card and renewal dates; we do not store full card numbers.
3. Why we use your data and the legal basis
- To provide the Service (contract performance) — creating your account, hosting your workspace and generating artefacts.
- To bill you and prevent fraud (contract performance and legitimate interests) — managing subscriptions, processing payments via Paddle and detecting abuse.
- To improve the product (legitimate interests) — aggregated analytics, debugging and prioritising features.
- To communicate with you (contract performance and legitimate interests) — service notices, security alerts and support replies.
- Marketing (consent, where required) — product updates and newsletters; you can opt out at any time.
- Legal obligations — accounting records and responding to lawful requests from authorities.
4. How AI processing works
When you use the AI generation features, the text of your problem statements and the contents of documents you select are sent to our model providers solely to generate the requested artefact. We do not use your content to train any third-party model. Generated artefacts are stored in your workspace and visible only to you and the workspace members you invite.
5. Who we share data with
- Paddle.com Market Limited — our Merchant of Record. Paddle handles checkout, payments, tax compliance, invoicing, refunds and subscription management on our behalf. Paddle receives your name, email, billing address and payment details directly. See Paddle's Privacy Policy.
- Cloud hosting and database providers — to host the Service and store your data securely.
- AI model providers — to process generation requests as described in Section 4.
- Email delivery providers — to send transactional and account emails.
- Analytics and error monitoring providers — to keep the Service reliable.
- Professional advisers — lawyers, accountants and auditors, where necessary.
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
6. International transfers
Some of our providers are based outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. How long we keep your data
- Account and workspace data — for as long as your account is active and for up to 90 days after account deletion (to allow recovery), then deleted or anonymised.
- Billing records — retained for up to 7 years to meet tax and accounting obligations.
- Support communications — up to 3 years.
- Backups — up to 90 days.
8. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to processing of your personal data, withdraw consent, and receive a portable copy of your data. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email support@executionhubai.com. We will respond within one month.
9. Security
We use industry-standard technical and organisational measures including encryption in transit (TLS), encryption at rest, role-based access controls, row-level security on tenant data, audit logging and least-privilege server access. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.
10. Cookies
We use strictly necessary cookies to keep you signed in, and a small number of first-party analytics cookies to understand how the Service is used. We do not set advertising cookies. You can manage cookies through your browser settings; disabling necessary cookies will prevent the Service from working.
11. Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
12. Changes to this notice
We may update this notice from time to time. Material changes will be notified by email or via the Service. Continued use after a change constitutes acceptance.