Privacy
Plain-language privacy summary
What We Collect
We collect the minimum data needed to run Cliqstr and keep it safe.
- Account details (like email, display name, birthdate for age gating, role such as child/parent/adult, and account status)
- Content you choose to create (posts, comments, images, cliq memberships, invites)
- Uploaded photo safety (we remove EXIF metadata, like GPS and device details, before storing images)
- Safety and abuse-prevention signals (reports, moderation outcomes, audit trails)
- Technical data for security (basic logs such as IP address, device/browser type, and error logs)
What We Don’t Collect
- GPS or live device location
- Device contact lists (address book)
- Advertising identifiers or third-party ad profiles
- Facial recognition / biometric templates
We do not sell user data.
We do not run ads.
We do not use cross-web tracking for advertising.
We still use basic technical measures that most services need to operate safely (for example, security logs and essential cookies/sessions to keep you signed in and prevent abuse).
How We Use Data
- Create and maintain accounts and cliq participation
- Verify age and parent/guardian approval for under-18 accounts
- Provide safety features (reporting, moderation workflows, and safety notices)
- Use AI-assisted classification (Anthropic) to triage posts for safety review by our human moderation team — see AI-Assisted Moderation below
- Prevent fraud, abuse, and security issues (including logging and audits)
- Process subscriptions and account verification
How Long We Keep Data
We aim to minimize retention while still operating the service and keeping it safe.
- Most posts, comments, and images: automatically deleted after about 30 days unless you choose to keep content through available storage options (subject to account settings, legal retention obligations, and service integrity/security needs)
- Pending child accounts: deleted after about 30 days if not approved
- Account data: kept until the account is deleted (then a soft-delete period may apply before permanent deletion)
- Payments: billing records are retained by our payment processor as required for financial and legal compliance
Who We Share With
We share limited data with service providers (processors) that help us run Cliqstr. They receive data to provide their service, not for advertising.
- Stripe — payments, subscriptions, and account verification (we do not store full card numbers). Stripe privacy policy: stripe.com/privacy
- Vercel — hosting and security (may include request logs for security)
- UploadThing — file storage for uploads (we remove photo EXIF metadata before storage)
- Resend — transactional email delivery (invites and account notifications)
- Convex — backend database for account and cliq data needed to operate the service
- Anthropic — AI-assisted moderation of post content for safety review (see AI-Assisted Moderation). Anthropic privacy policy: anthropic.com/legal/privacy
AI-Assisted Moderation
We use Anthropic’s Claude API to help our human moderation team triage user-submitted content for safety concerns (for example, harassment, dangerous challenges, self-harm references, sexual content involving minors, or doxxing).
Scope of AI scanning today
- Posts in cliqs are classified for safety signals.
- Replies and profile text are not yet AI-scanned; they are handled by human moderation and user reports.
When the scan happens
- Posts become visible in the cliq when you submit them. AI scanning runs immediately afterward (within seconds), not as a pre-publish gate.
- If the AI flags a post, it is routed to our moderation queue for human review and may be held, removed, or annotated for follow-up.
- If the AI service is unavailable, the post still publishes and a manual-review item is created for our human moderation team.
What is sent to Anthropic
- Only the post text content, truncated to 10,000 characters.
- We do not send your email, display name, cliq name, member list, or other identifying information alongside the text.
Retention at Anthropic
Cliqstr does not store your post text at Anthropic. Under Anthropic’s standard API terms, Anthropic may retain API content for up to 30 days for trust-and-safety monitoring purposes and does not train its models on API content by default. See anthropic.com/legal/privacy for current details.
Separately, Cliqstr stores a moderation-related copy of the content within our own database (a “content snapshot”) as needed for moderator review, appeals, and audit logs, governed by the retention rules above.
Human override
- AI labels are advisory. Permanent or severe enforcement actions (account suspensions, bans) require human review and confirmation.
- Pip and Pippy, our onboarding guides, are not conversational AI and do not interact with user posts, replies, or messages. They answer Cliqstr setup questions drawn from our FAQs and product instructions only.
Children & Parent Controls
- Users under 18 require verified parent/guardian approval
- Unapproved child accounts may be deleted after about 30 days
- Parents/guardians can delete a child’s account through Parent HQ
- We follow COPPA principles for parental control and data minimization
Your Privacy Choices
- Delete your account: use in-app account deletion. Account deletion may include a soft-delete period before permanent deletion.
- Access/correction requests: email us if you need help accessing or correcting account details.
- Privacy questions: contact us at privacy@cliqstr.com.
We respond with a human. For security and safety, we may need to verify your identity or authority (for example, parent/guardian status) before completing certain requests.
Important Limits
We take reasonable steps to protect your information, but no system is perfect. Safety and moderation features rely in part on third-party services and technical infrastructure, and they may be unavailable, delayed, or degraded.
We do not share data for advertising. We may disclose information if legally required to do so, and we aim to limit disclosure to what the law requires.