Privacy policy

What Clove keeps

Your account: email, name, and a password hash (or your Google account, if you use Continue with Google). A profile photo, if you add one; it can be loaded by anyone who has its link.

Your plan and billing status. Card details stay with Stripe; Clove never sees them.

What you set up in Clove: settings, watched markets, things you asked Clove to remember, trades you told Clove about or that it read from a linked exchange, and the alerts it sent you.

Exchange keys, if you link an exchange: read-only, encrypted on our server, never in the app.

Each view Clove gives on a market with a live price (market, time, lean, levels), so it can be scored. Only totals per market are public, never who asked.

Usage per answer (which model, how many tokens, the cost), to apply plan limits. When you delete your account this is kept without your name or email.

Teams: the team, its seats, house rules and members. What the admin sees is listed in the Terms under Business plans.

Problem reports, if you send one from Help: what you wrote, Clove’s recent log lines if you leave them on, a picture only if you attach one, the app version and Windows version, and your account if you’re logged in. Used only to fix the problem.

Why (legal basis)

To run the service you signed up for (your account, answers, plan, payments, team): the contract with you.

Usage counts with PostHog: only with your consent, which you can withdraw any time.

Invoices and tax records: the law, which requires us to keep them for 8 years.

Crash reports and keeping the service safe (rate limits, abuse): our legitimate interest in a working, secure service.

Your screen

Clove looks at your screen only when you ask it to. The picture is sent to our AI provider to answer you and is never stored by Clove.

Who else processes it

Supabase: accounts and database, in the EU (Frankfurt).

Vercel: the website and Clove’s servers, which run in Frankfurt.

Anthropic: writes the answers. It receives your question, the market data Clove gathered and, when you asked about your screen, the picture. Under its commercial terms it does not train on this data.

Stripe: payments, invoices and VAT. Google: only if you choose Continue with Google.

Resend: sends Clove’s emails (confirming your email, password reset, team invites, Firm reports). It receives your email address and the email’s text.

Sentry: crash reports, when they are switched on. It receives the error and where in the code it happened, never your questions, screen or keys.

YouTube (Google): the News Live tab plays official channels’ streams in YouTube’s privacy-enhanced player (youtube-nocookie.com), only when you open it. YouTube receives your IP address and what you watch there.

PostHog (EU, Frankfurt): usage counts, only if you accept on the website or turn on Help improve Clove in the app. It receives event names (for example “question asked”, “plan chosen”) and your account id, never your email, questions, screen, keys or amounts.

Some of these companies are based in the US. Where data leaves the EU, it is covered by the EU–US Data Privacy Framework or the EU’s standard contractual clauses.

How long

Your account data until you delete your account. Invoices for 8 years, as the law requires. Problem reports and crash reports only as long as it takes to fix the problem; ask us and we delete them.

Your rights

You can see and change your data in the app, and delete your account and everything linked to it from Account. You can also ask us for a copy, a correction, deletion, or to stop a use, and complain to your data protection authority (in Hungary: NAIH, naih.hu).