ClayPrivacy policy
Last updated: 6 October 2026
1. Data controller
The controller of your personal data is:
Tenue Services SRL
We have not appointed a data protection officer (DPO) as we are not legally required to. For any request write to the e-mail address above.
2. What data we process
| Category | Data | Purpose and legal basis |
|---|---|---|
| Tenue ID account | account identifier (sub), e-mail, name, roles, last sign-in time | authentication and account management; performance of the contract (Art. 6(1)(b) GDPR) |
| Devices | name, model, system and app version, type (Mac/phone), creation and last-activity time, hash of the device key, hash of the fingerprint-confirmation secret (never the fingerprint itself) | connecting your phone to your Mac, security, one phone per account; contract and legitimate interest (Art. 6(1)(b) and (f)) |
| Status telemetry | app and system version, model, uptime, CPU and memory use, battery and charging, network type, Claude state (ok/missing/signed out/limit/error), counts of tasks per state, error count, enabled settings (on-PC mode, keep awake, app lock, languages). No messages, no prompts, no file names, no content. | service status and troubleshooting; legitimate interest (Art. 6(1)(f)). It can be switched off in the app (opt-out): we then keep only the app version, the system and the last connection. |
| Technical logs | IP address, date and time, request type, response code; per-IP rate limiting in memory | security and abuse prevention; legitimate interest (Art. 6(1)(f)). Kept for at most 90 days. |
| Web session | strictly necessary cookies: the account session and, during the beta, the downloads unlock (see the Cookie policy) | account page; Art. 6(1)(b) |
| Admin audit log | administrators' actions (who, what, when, IP address) | security and accountability; legitimate interest (Art. 6(1)(f)) |
3. What we do NOT store
Messages, call audio, files, prompts and your agents' data stay on your Mac. They pass through the relay only in transit, encrypted (TLS), to get from your phone to your Mac, and are not stored or logged by us. The same applies to webhook requests: if you create a public webhook link for an automation, the relay forwards the incoming request to your Mac and returns a short answer; it keeps no request or response bodies and no webhook secrets, only counters (how many requests arrived for each Mac). We do not use your data for marketing, send newsletters or make automated decisions with legal effects on you.
4. Retention
- Account and devices: while you have the account; on deletion the data is removed.
- Telemetry: the latest state while the device is signed in and an hourly history of at most 7 days.
- Aggregated statistics (numbers without personal identification): up to 90 days.
- Technical logs: at most 90 days unless needed to investigate an incident.
- Admin audit log: the last 5,000 entries.
5. Recipients
Data is not sold. Sign-in uses Tenue ID (also operated by Tenue Services). The hosting infrastructure is run by us on servers rented from a hosting provider acting as processor; we use no other subprocessors for Service data. We may disclose data to authorities only where the law requires.
6. Transfers outside the EU
We do not transfer Service data outside the European Economic Area. Your requests to AI models are sent by your computer directly to the model provider under your own agreement and do not pass through us.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent (where applicable). You can remove devices from the account page or the apps; for full account deletion write to the contact address. You may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).
8. Security
We use TLS, random 256-bit tokens (only their hash is stored), rate limiting, fingerprint confirmation for sensitive actions and role-protected administration. Details on the Security page.
9. Changes
We may update this policy; the last-updated date is shown above.