Claque Privacy Policy

This Privacy Policy explains how CEGSJ LLC handles personal data when providing Claque. It is a notice about data practices. Acknowledging this notice is not blanket consent to every form of processing, and Claque will request any purpose-specific permission or consent required by law.

Data we collect

We collect data you provide, data created through your use of Claque, and limited technical data needed to operate and secure the service. The categories below describe this data in more detail.

Account and identity data

Account data may include an internal user identifier, display name, email address, password hash for email accounts, and identifiers or verified account information returned by a supported sign-in provider. Claque stores session, refresh-token, identity-link, and personal-access-token records needed to authenticate and revoke access. Secret tokens and passwords are protected using one-way hashing where documented; a newly created personal access token is shown in full only once.

Messages and board data

We process messages, message authorship links, current board content, bounded message history, delivery and display receipts, board names and dimensions, face-set configuration, privacy settings, placement and optional location labels, ownership and sender grants, invitations, blocks, rate limits, and Gallery work or hanging settings. Authorized senders have write-only access to private board content; owners control board access as described in the Claque Terms.

Devices and push notifications

Device data may include an internal device identifier, platform, device label, push token, board placement, home-device selection, and recent poll-driven connection state. We use this data to deliver and suppress push notifications, synchronize owned boards, and support physical displays. Push alerts identify the sender but do not include message text.

Purchases and subscriptions

For Claque Plus, we process subscription status, product identifier, transaction identifiers, original transaction identifier, expiration, purchase environment, primary-board selection, and signed StoreKit transaction data submitted for verification. Apple handles payment details and App Store billing; Claque does not receive your full payment-card number from Apple.

App permissions

Claque requests device permissions only when a feature needs them, such as permission to send notifications. Your device settings control these permissions. We process a permission's status and data made available through it only to provide the related feature. Denying or withdrawing a permission may limit that feature but does not by itself delete your Claque account.

Essential web storage

Claque's web experience may use essential browser storage, including a secure, HTTP-only refresh cookie, to keep you signed in, protect sessions, and complete requested actions. This storage is used for service operation and security rather than to claim blanket consent.

How we use data

We process data to:

• create and secure accounts, authenticate users, and manage sessions and devices;
• deliver messages, boards, sharing, receipts, notifications, subscriptions, and Gallery features;
• enforce board privacy, access limits, subscription limits, and acceptable-use rules;
• provide support, investigate reports, prevent abuse, and maintain service security;
• diagnose faults and improve reliability and accessibility;
• comply with legal obligations and protect users, CEGSJ LLC, and others; and
• communicate material service, Terms, Privacy, security, or account information.

The applicable legal basis depends on your location and the purpose, and may include performing a contract, complying with law, protecting legitimate interests, protecting vital interests, or consent where consent is legally required.

Public boards

Owned boards are private by default. For a private board, only the owner may read current content and history; authorized senders cannot read them.

When an owner makes a board public, anyone who can address its board identifier may read its current content without an account. Public board content should be treated as publicly visible, and you should not post confidential, sensitive, or personal data there. Changing a board back to private restricts later access but cannot retrieve copies someone already observed or saved.

Moderation reports

If you submit or are named in a moderation report, we may process the reported content, account and board identifiers, reporter explanation, timestamps, and review or resolution records. We use report data to investigate suspected abuse, enforce rules, protect users, preserve evidence, and comply with law. Access is limited to those who need it for these purposes.

Service providers and disclosures

We disclose data as needed to service providers that support hosting and storage, authentication, email, push notifications, app distribution, subscription verification, security, and support. We may also disclose data when required by law; to protect rights, safety, users, or the service; in connection with a corporate transaction subject to appropriate safeguards; or at your direction.

Third-party identity, device, and app-store services process data under their own privacy notices. Apple processes app distribution, StoreKit subscriptions, and Apple-platform push delivery. We do not identify a provider as handling data unless it is used for the relevant Claque function.

International transfers

CEGSJ LLC and its service providers may process data in countries other than the one where you live. Where applicable law requires it, international transfers use applicable safeguards, such as an adequacy decision, approved contractual protections, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

Retention

We keep personal data only as long as needed for the purposes described above, including service operation, security, dispute resolution, and legal compliance. The following periods are specific commitments:

Product data does not have a misleading universal expiry. Current messages and bounded board history remain until the applicable board or account deletion and anonymization rules act on them. Some records may be retained longer where law requires it, or for the limited time necessary to complete deletion, resolve a dispute, enforce an agreement, or preserve evidence.

Deletion and anonymization

Deleting an owned board deletes the board, its message history and receipts, and related ownership, sharing, placement, invitation, send-accounting, and notification-preference records.

Deleting your account hard-deletes the account, linked identities, sessions, devices, owned boards, grants, and subscription-entitlement state. On boards owned by someone else, message content you authored may remain for that owner, but Claque clears the author identifier so the remaining message is no longer linked to your account. Signing out revokes only the current session and is not deletion. Backup snapshots expire on the retention schedule above.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent where processing relies on consent; and to complain to a data-protection authority. These rights may have legal limits and verification requirements. Withdrawing consent does not affect processing already lawfully completed and does not replace account deletion.

To exercise a privacy right, contact privacy@claque.me. We may need information sufficient to verify your identity and request.

Children

Claque is not intended for children under 13, and users must attest that they are at least 13. If you believe a child under 13 has provided personal data, contact us so we can investigate and take appropriate action.

Changes to this notice

We may update this Privacy Policy and will identify the displayed revision. When the notice revision changes, Claque may require acknowledgement of the current notice. That acknowledgement confirms that the notice was presented; it is not blanket consent. We will provide any additional notice or choice required by law for a material change.

Contact

For privacy questions or requests, contact CEGSJ LLC at privacy@claque.me. For general support, contact support@claque.me.