Privacy Policy
Last Updated: September 14, 2026
Clera respects your privacy and is committed to protecting your personal information. Your privacy is important to us. Please read this policy carefully to understand how we collect, use, and disclose your information, and what choices you have with respect to your information.
1. Introduction
Welcome to Clera. This Privacy Policy explains what personal information Clera Labs, Inc. (“Clera,” “we,” “our,” or “us”) collects, how we use it, and the measures we take to protect it. By using our services, you agree to the collection and processing of your data as described in this policy. If you do not agree with any part of this policy, you should discontinue your use of Clera's services.
We may provide different or additional disclosures relating to the processing of personal data about residents of certain countries, regions, or states. Please refer to the Region-Specific Disclosures section below for additional disclosures that may be applicable to you.
2. Data Collection
Clera collects personal data from you directly, automatically when you interact with our services, and from outside sources: your publicly available professional information and professional data providers. Section 3 explains how we handle data about people who have not signed up. The data we collect includes, but is not limited to:
- Basic Identifiers: Name, email address, phone number.
- Professional Information: Job title, industry, LinkedIn profile, resume, work experience, education, skills, and certifications.
- Interaction Data: Any information you share during AI-driven conversations, calls, or messages, including call recordings and transcripts.
- AI-Generated Data: Profiles, summaries, match scores, and assessments derived from your information by our AI systems.
- Device and Usage Information: IP address, browser type, device information, pages visited, and interactions with our platform, collected automatically through cookies and similar technologies.
We do not intentionally collect sensitive personal data (e.g., racial or ethnic origin, political opinions, religious beliefs). Do not include sensitive personal data that is not necessary for your hiring task. The AI assistant connector must not be used to submit payment-card data, protected health information, government identifiers, passwords, API keys or authentication codes. Free-text information may nevertheless contain personal details; if you have included such information and wish to remove it, please contact privacy@getclera.com.
3. Contacting Professionals About Roles
Clera is a recruiting service, so we sometimes contact professionals about a specific role before they have an account with us. Where we do, we work from a limited set of professional details: your name, job title, employer, and professional information you have made public, together with contact details obtained from professional data providers. We process this data under our legitimate interest in providing recruitment services.
We use this information to identify roles that may be relevant to you. Section 17 explains how our automated systems and profiling work, and how to request human review.
If you are contacted by Clera before signing up, our Terms of Service do not apply to you. This Privacy Policy still governs how we handle your personal data.
If you would rather not hear from us, reply to any message asking us to stop, or write to privacy@getclera.com. We will add you to our suppression lists so that we do not contact you again. If you would prefer that we delete what we hold rather than suppress it, tell us and we will.
4. Data Usage
Clera uses your personal data solely to enhance your job search experience and optimize our platform. Specifically, we process data for:
- Matching & Introductions: Connecting talents with relevant companies based on their qualifications and preferences, including generating AI-derived profiles and match scores.
- Service Improvement: Enhancing our AI algorithms, user experience, and platform features.
- Marketing & Communication: Sending relevant job updates, industry insights, and Clera service updates, provided you have given consent or we have a legitimate interest.
- Security & Compliance: Monitoring for fraudulent activity and ensuring compliance with applicable laws.
Clera does not sell or rent your personal data to third parties. All data processing is done in accordance with applicable privacy laws.
5. Third-Party Services
To provide our services, Clera integrates with trusted third-party providers, including but not limited to Anthropic, OpenAI, Google, Vapi, ElevenLabs, Microsoft, Supabase, Vercel, and Brevo. A current list of sub-processors is available upon request. These partners assist in processing, storing, and securing user data under strict confidentiality and security agreements. By using Clera, you acknowledge that your interactions with our platform may be processed by these providers. If you wish to learn more about our third-party partnerships or request a current sub-processor list, please contact privacy@getclera.com.
7. Data Sharing
Your personal data may be shared with select third parties under the following circumstances:
- Matching Process: Where you have a profile with us and are open to opportunities, your profile, including your AI-Generated Profile and match scores, may be shared with prospective employers. We do not include people who have only been contacted through our outbound recruiting and have not been in touch with us.
- Service Optimization: We may work with technology partners to improve our AI-driven matching process while ensuring strict confidentiality.
- Legal Compliance: If required by law, Clera may disclose personal data in response to lawful requests from regulatory authorities.
- Business Transactions: In connection with a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.
We ensure that all data-sharing activities comply with relevant privacy regulations, and users have the right to request details on any data-sharing activities.
8. Data Retention
Except for connector call logs described in Section 6, Clera retains your personal data for two years after your last recorded interaction with our platform. This ensures that we can provide an optimal experience if you return to use our services. If you would like to delete your data earlier, you may request this at any time by emailing privacy@getclera.com. In cases where legal or regulatory requirements mandate a longer retention period, Clera will comply accordingly.
If you have never been in contact with us, the data we hold is limited to the professional details described in Section 3. You can ask us to suppress or delete those details at any time, and we will act on that request whether or not the two-year period has elapsed.
6. AI Assistant Connectors (Clera MCP)
Members of a Company account can connect Clera to an AI assistant of their choice (for example Claude, ChatGPT, or Cursor) through Clera's Model Context Protocol (MCP) server at https://mcp.getclera.com. This section explains what data moves between Clera and that assistant. The assistant and its provider are chosen and contracted by the Company, not by Clera, and are not Clera sub-processors. More about the connector is on our Clera MCP page.
Authorization: A connection is created by signing in with your Clera account and approving a consent screen. The assistant receives an access token tied to your account. Every request is checked against your Company memberships and role at the time of the request, so the assistant can only see and do what you can see and do in the Clera dashboard.
What Clera sends to the assistant: The result of each tool your assistant calls. Depending on the tool, that is candidate search results and candidate profiles, the Company's open roles and job descriptions, its hiring pipeline, its team members, its company profile and contacts. For candidates not previously identified to your Company, search masks names, photos and direct LinkedIn links while retaining professional history, employers, education and location. This masking does not make profiles irreversibly anonymous. Previously named shares can continue to permit detailed profile access after the share expires or is revoked; revocation does not undo an earlier identity disclosure. Detailed profiles omit structured candidate contact fields and labeled salary and visa preference lines, but professional summaries and career descriptions may contain personal details supplied in free text.
What Clera receives from the assistant: Only the arguments of the tools your assistant calls, such as search filters, the role an intro is requested for, the reason for passing on a candidate, or a note you asked it to send. Clera never receives the rest of your conversation with the assistant.
What the assistant provider receives: Everything Clera returns to the assistant becomes part of your conversation with that assistant and is processed, stored, and retained by its provider under that provider's own privacy policy and your agreement with them. Clera has no control over that processing. Companies remain responsible for keeping candidate information confidential, including inside the assistant they choose.
Other processing and recipients: Semantic candidate search sends your search term to Microsoft Azure to compute an embedding. Feedback you ask us to send is stored by Clera and sent to the Clera team through Slack with your name, email and Company. Introduction requests can send confirmation emails, start candidate outreach and submit candidate applications to a connected applicant tracking system. Company-profile and role edits can affect public pages; Company contact records remain private. Share only the information needed for the task. Do not include passwords, API keys, authentication codes, payment-card data, protected health information or government identifiers in tool inputs or feedback.
What Clera logs: Each tool call is recorded with:
- the tool name, its inputs, and its outputs;
- the account that made the call (user identifier and email) and the Company it acted for;
- whether the call succeeded, was refused, or failed, and how long it took.
We use these logs to secure the service, prevent abuse, resolve support requests, and improve the connector. Profile tools also record candidate impressions and profile openings. The connector currently has no automatic expiry for call logs, so these logs may remain stored until removed through a privacy request. This is an exception to the two-year retention period in Section 8. Contact the privacy address below to request access, deletion or restriction of connector logs under Section 9. There is no separate in-product control to disable logging while continuing to use the connector.
If you are a candidate: A Company may review your profile through its AI assistant instead of the Clera dashboard. The historical identity visibility and masking limits described above apply. Once a Company has viewed your profile through an assistant, the Company and the assistant provider may retain that information; revoking a share does not remove copies already disclosed.
Revoking access: Remove the connector in your assistant's settings to stop that assistant using the connection. Removing it does not guarantee immediate invalidation of an already issued access token; a token may remain valid until it expires or is revoked. To request revocation on Clera's side, or to exercise your connector data rights, contact hello@getclera.com or privacy@getclera.com.
9. Data Deletion and Anonymization
You have the right to request deletion or anonymization of your personal data. Once a request is received at privacy@getclera.com, we will take the following steps:
- Verification: We will confirm your identity to ensure the request is legitimate.
- Processing: Data will be deleted from our active systems within 30 days, except where retention is legally required.
- Anonymization: If deletion is not possible due to legal or analytical purposes, your data will be anonymized so that it can no longer be linked to you.
After deletion from active systems, we may retain a limited compliance record and protected deletion archive for the applicable retention period. We do not restore those records to recruiting or outreach systems.
10. Security Measures
We implement robust security measures, using standard technologies and practices to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your personal data.
11. Data Breaches
In the event of a data breach or security incident that affects your personal data, we will respond promptly using robust procedures to mitigate any impact. Where required by applicable law (including GDPR Article 33), we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.
12. International Data Transfers
Clera operates in the United States and may transfer personal data across international borders as part of its services. We implement appropriate safeguards to ensure that your data is handled safely and in compliance with applicable privacy laws, including:
- Standard Contractual Clauses (SCCs) for transfers outside the European Economic Area (EEA).
- Data encryption and secure transfer protocols to protect information during transmission.
- Adequacy decisions where the relevant regulatory authority has deemed the destination country to adequately safeguard personal data.
By using Clera, you consent to the transfer of your data to the United States and other jurisdictions where Clera or its partners operate. If you have questions about international data transfers, please contact privacy@getclera.com.
13. Legal Basis for Processing
In accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant, Clera processes your personal data only when one or more of the following legal bases apply:
- Consent: Where you have expressly consented to the processing of your personal data (e.g., for marketing communications or the use of cookies). You have the right to withdraw your consent at any time.
- Performance of a Service: We process personal data that is necessary to provide you with our recruitment and job-matching services.
- Legitimate Interests: In instances where processing is necessary for our legitimate business interests - such as improving our platform, conducting analytics, outbound prospecting, preventing fraud, or ensuring network security - we process your data after carefully balancing our interests against your privacy rights.
- Compliance with Legal Obligations: Clera may process your data when necessary to comply with legal or regulatory requirements, such as responding to lawful requests from public authorities.
If you have any questions about the legal bases under which we process your data, please contact us at privacy@getclera.com.
15. Tracking Technologies
Google Analytics: We use Google Analytics to collect and analyze data regarding your interactions with our website. For more details, please review Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Browser Add-On.
PostHog: We use PostHog for product analytics, including session replay, which may record your mouse movements, scrolling, clicks, and page interactions. We implement data masking to minimize the capture of sensitive personal information through session replays.
LinkedIn Insight Tag: Helps measure the effectiveness of our LinkedIn advertising campaigns. Data is anonymized.
17. Automated Decision-Making and Profiling
Clera leverages AI-driven technology and automated decision-making systems to enhance your job-search experience. This includes using profiling techniques to analyze your data and recommend opportunities that align with your profile.
How It Works: Our system processes your professional qualifications, experience, and preferences to automatically identify suitable job opportunities and generate your AI-Generated Profile.
Transparency: We are committed to transparency about our automated processes. If you have questions about the logic, data sources, or factors used by our algorithms, please contact us at privacy@getclera.com.
Right to Human Intervention: You may request a human review if you believe an automated decision has adversely impacted your opportunities.
Continuous Improvement: Our systems are regularly monitored and updated to ensure fairness, accuracy, and compliance with applicable laws.
18. Children's Personal Data
Our services are not directed to children under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 18, we will promptly delete that data. If you are a parent or guardian and believe your child has provided personal information to Clera, please contact us at privacy@getclera.com.
19. Your Data Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any of these rights, please contact privacy@getclera.com.
- Right of Access: The right to obtain confirmation of whether we are processing your personal data and to receive a copy of it.
- Right to Rectification: The right to correct inaccurate or incomplete personal data.
- Right to Erasure: The right to request deletion of your personal data, subject to certain exceptions required by law.
- Right to Restriction of Processing: The right to require us to limit how we process your personal data in certain circumstances.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: The right to object to processing based on our legitimate interests. You can object to marketing activities for any reason.
- Right Not to Be Subject to Automated Decision-Making: The right to request human intervention in automated decisions that significantly affect you.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
We will respond to verified requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.
20. Region-Specific Disclosures
European Economic Area, United Kingdom, and Switzerland
If you are located in the EEA, UK, or Switzerland, the following additional disclosures apply to you:
Controller: Clera Labs, Inc., 1111B S Governors Ave STE 40598, Dover, DE 19904, is the controller responsible for the processing of your personal data. You may contact us at privacy@getclera.com.
Data Protection Contact: For questions about our data protection practices, contact privacy@getclera.com.
Legal Bases: We process your personal data based on the legal bases described in Section 13 above (consent, contract performance, legitimate interests, and legal obligations).
Your Rights: In addition to the rights described in Section 19, you have the right to lodge a complaint with a supervisory authority in the EEA member state, UK, or Switzerland where you reside or where you believe an infringement has occurred. Contact details for EEA Data Protection Authorities can be found at edpb.europa.eu. The UK Information Commissioner's Office can be reached at ico.org.uk. The Swiss Federal Data Protection and Information Commissioner can be reached at edoeb.admin.ch.
International Transfers: When we transfer personal data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards including Standard Contractual Clauses and adequacy decisions. You may request a copy of these safeguards by contacting privacy@getclera.com.
We would appreciate the chance to handle your concerns directly before you file a complaint with a supervisory authority. Please contact us first at privacy@getclera.com.
California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”), provides you with additional rights regarding your personal information.
Categories of Personal Information Collected: In the preceding twelve months, we have collected the following categories of personal information: identifiers (name, email, phone number, IP address); professional or employment-related information (job title, employer, work experience); internet or electronic network activity (browsing history, interactions with our platform); inferences drawn from the foregoing (match scores, AI-generated profiles); and audio data (call recordings).
Sale and Sharing: Clera does not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioral advertising purposes.
Your California Privacy Rights:
- Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we have shared it.
- Right to Delete: You have the right to request deletion of the personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your California privacy rights, please contact us at privacy@getclera.com. We will verify your identity before processing your request, which may require you to provide certain information so we can match it against our records.
21. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to your registered email address or by prominent posting on our platform. All changes are effective from the date of publication unless otherwise provided. Your continued use of our services after changes have been posted constitutes acceptance of the revised policy.
22. Contact Information
If you have any questions or concerns about this Privacy Policy, please contact us at privacy@getclera.com.
You can also reach us by mail at:
Clera Labs, Inc.
1111B S Governors Ave STE 40598
Dover, DE 19904