Your Clearahead model holds some of the most important thinking in your business: what you're aiming for, what's in the way, and what you're doing about it. Here's how we keep it safe.
Your data stays yours. Each organisation's data is kept separate. Every request is checked against who you are and the role you have, both in the app and at the database itself. Nobody outside your organisation can see your model.
Encrypted, in transit and at rest. Everything between your browser and Clearahead travels over HTTPS. Your data is stored encrypted, in data centres in the EU.
No passwords to steal. You sign in with Google or a one-time email link that expires after an hour. There's no Clearahead password to reuse, guess or leak. Deleting your organisation and other sensitive actions ask you to sign in again first.
The right access for each person. Architects shape the model and manage the team. Contributors update the constraints and moves they work on. Viewers can read and ask questions. Every change is recorded with who made it and when, and AJ's changes are labelled as AJ's.
AI that works for you, not on you. AJ uses OpenAI's API to read your model and suggest changes. Your data isn't used to train OpenAI's models, and we ask OpenAI not to store conversations. AJ never changes anything without your say-so: you review and save every update.
Payments handled by Stripe. Card details go straight to Stripe. We never see or store your card number.
Take it with you, any time. Architects can download everything in the organisation as a JSON file from Settings, whenever they like.
Leave cleanly. When you delete your organisation, access ends straight away and billing stops. You have 30 days to change your mind. After that, everything is permanently deleted, and copies in our backups are removed within a further 30 days. Invoices are kept by Stripe, as the law requires.
Careful with what we collect. We use error reporting and product analytics to keep Clearahead working well. Neither includes the content of your model, your conversations with AJ, or your name and email.
Who we work with. We use a small number of trusted providers to run Clearahead: Cloudflare (hosting), Supabase (database and sign-in), OpenAI (AI), Stripe (payments), Resend (email), Sentry (error reporting) and PostHog (analytics). See our Privacy Policy for details.
