01Roles
Your organisation is the controller of the personal data it brings to Claros. Timur Monasypov, operating as Claros (Massachusetts, USA) is the processor. This addendum is part of the Terms.
02What is processed
- People: members of your workspace (admins, editors, members) and the owners of your rules, the people your agents act for, the authors of items in the tools you connect, anyone whose details appear in an action sent to be checked, and editors who record rules by voice.
- Rules: each rule's text, owner, sources, versions, and the answers that became its precedents.
- Connector data: messages, review comments, pull requests, documents and issues from the tools you connect (Slack, GitHub, Google Drive, Notion, Linear), with their authors and who can see them, kept as decision items and drafted into proposed rules.
- Claros for Mac: at a commit moment only, the app, window title, page address, the text being sent and the button's name, redacted on the Mac before it is sent. Nothing is recorded.
- Agent checks: the actions your agents and people send to be checked (the app, tool and the record's fields, PII-redacted in the log unless your workspace keeps them as sent), the verdict, and the questions and approvals that follow.
- Evidence log: the hash-chained, signed record of checks, approvals, overrides and rule versions. Kept until a workspace owner sets a retention period, which can't be shorter than 183 days.
- Voice recordings: only when an editor records rules by voice: voice audio (live, via ElevenLabs), transcripts, blurred screen keyframes, text read from the screen, optional voice clips with the editor's consent.
- Purpose: drafting and keeping rules, checking actions, asking a rule's owner when a check can't tell, and keeping the evidence of those checks. Nothing else.
03Our commitments
- Process data only on your instructions: using Claros is the instruction.
- Keep access to the one operator of the service.
- Redact personal data from checked actions before model calls (on the Mac, before it leaves the device) and blur it on screen in voice recordings (see Privacy for the limits). Connector text is sent to the model as written, to draft rules.
- Tell you without undue delay if we learn of a breach affecting your data.
- Help you answer access and deletion requests, and delete your data when you ask or when the preview ends.
04Security
Encrypted connections (HTTPS / WSS) between browser, Mac, server and providers; connector tokens encrypted at rest; raw frames held in memory only; provider keys kept server-side; a hash-chained, signed evidence log; preview behind a password. This is a pre-release preview: there is no third-party audit or certification yet.
05Subprocessors
Taken from the code. Optional providers are used only when configured. We'll update this list before adding a new one.
| Provider | Purpose | Data |
|---|---|---|
| WorkOS (AuthKit) | Web sign-in: email codes, Google and Microsoft sign-in, invitation emails | Your email address and name, sign-in events with IP address and browser |
| Isoquant (GLM-5.3-Flash) | Main model: drafting rules from connected tools and policies, judging and routing checks, reading the screen when an editor records rules by voice | Connector items with their authors (not PII-redacted), policy text, PII-redacted check records and past decisions, redacted screen frames and transcripts of voice recordings |
| OpenRouter, Google Gemini (if configured) | Fallback models, only when the main model fails | Same as the main model |
| ElevenLabs | Live voice, only while an editor records rules by voice | Their microphone audio, the transcript, Claros's spoken replies |
| Jina AI, Exa, Bright Data (if configured) | Search over rule sets, ranking, looking up public app docs | Rule text, search queries, public URLs |
| Fastino, Cloudflare Workers AI (if configured) | Small, fast decisions during live voice sessions | Short text snippets |
| Resend, or your own SMTP server (if configured) | Email to a person who is asked to decide | Their email address, a one-line summary of the action, a signed link to decide |
| Tailscale (Funnel) | Relays the public connection to the self-hosted Claros server | Encrypted traffic only: TLS ends on the Claros server, so it sees addresses, not content |
| Vercel | Hosts the web app and counts page views (Web Analytics, no cookies); passes sign-in, account and /mcp requests on to the Claros server | Web traffic, including the requests it passes on |
06Transfers
Data is processed in the United States and wherever the providers above run their services.
07Contact
For a signed copy or questions: the contact on the home page.