Terms
These terms describe how clarabook is offered and where your data is processed when you use it.
Our role with your data
clarabook is a data processor for the records in your Books and a data controller for your own account and billing data.
Where your data goes
Hosting in Singapore
The application runs in Singapore and the ledger database is in Singapore. Your records are held outside Malaysia.
Providers and countries
These providers process data for clarabook outside Malaysia.
- Vercel runs the application, workflows and sandboxes in Singapore.
- Neon hosts the ledger database in Singapore.
- Anthropic, through the Vercel AI Gateway, provides the models that read your documents and messages. Processing happens in the United States, the European Union or globally, and cannot be pinned to Singapore.
- Stripe takes our subscription payments and sends our invoices. It holds the Owner's email address, the Workspace's name, the subscription and the payment details the Owner enters on Stripe's own pages. Stripe processes data in several countries and has affiliates in Malaysia and Singapore. It also uses some of this data for its own purposes, such as preventing fraud and meeting legal duties, as a controller in its own right.
- Resend sends our email from its United States region (us-east-1) and stores its account data in the United States.
- Cloudflare runs our domain name service, routes the email sent to our support and privacy addresses, and stores the original documents you upload, in Cloudflare R2.
Original documents
The files you upload to a Book (invoices, receipts, statements) are stored as they came, in a private Cloudflare R2 bucket created with an Asia-Pacific location hint. Cloudflare treats that hint as best effort and does not guarantee the country, so your original documents may be held outside Malaysia and outside Asia-Pacific. They are reached only through short-lived links we create for you, and they are deleted when your Workspace is deleted.
Model provider retention
What Clara sends to the model provider is kept under that provider's retention terms, which we have accepted. The Vercel AI Gateway states that it does not retain prompts or outputs and keeps routing metadata for 30 days.
Gateway fallback
If the provider key that clarabook holds fails, the Vercel AI Gateway may silently use Vercel's own credentials instead.
Seven-day copy of Clara's runs
The platform that runs Clara's work keeps its own copy of session data for 7 days after a run completes. Clara keeps her own transcript separately.
Email data
Resend sends our transactional email (sign-in codes and notices) from its United States region, us-east-1, and stores its account data in the United States. The email address and the content of each message are therefore processed in the United States.
Workflow tokens in the United States
Workflow hook tokens are always stored in the United States, in the Vercel region iad1, even though the application runs in Singapore.