Privacy Policy

Who we are

ClarityForge is operated by Colm Center for Collaborative Innovation ("we," "us," or "our"). We are the data controller for the personal data collected through this service.

What personal data we collect

• Account data: name, email address, and authentication credentials when you create an account.
• Usage data: track selections, session responses, journal entries, and feature interactions.
• Device/technical data: IP address, browser type, device identifiers, and cookies for security and analytics.
• Support data: messages you send through support channels.

Why we collect it

• Contract performance: to create and manage your account, deliver the coaching service, and save your work.
• Legitimate interests: to improve the service, detect fraud, and keep the platform secure.
• Consent: for optional marketing communications (you can withdraw this anytime).
• Legal obligation: to comply with applicable tax, accounting, and regulatory requirements.

Who we share data with

We share personal data only when necessary and with appropriate safeguards:

• Stripe — our payment processor. Stripe processes payments, manages subscriptions, calculates and collects applicable taxes, and provides invoicing on our behalf. Stripe receives billing-related data necessary to fulfill these functions. See Stripe's privacy policy at stripe.com/privacy.
• Service providers: hosting infrastructure, analytics, error monitoring, and email delivery — under strict data-processing agreements.
• Professional advisers: legal and accounting professionals, when required.
• Authorities: where required by law or to protect our legal rights.

Cookies

We use essential cookies to maintain your session and security. We also use analytics cookies to understand how the service is used. You can manage cookie preferences through your browser settings.

Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. After account closure, we delete or anonymize your data within 90 days, except where we are legally required to retain it (e.g., tax records). Journal content belongs to you — you can export and delete it at any time.

Your rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Restrict or object to certain processing
• Request a portable copy of your data
• Withdraw consent where processing is based on consent
• Complain to a data protection supervisory authority

To exercise any of these rights, contact us at the email below. We respond within one month.

Security

We use encryption (TLS in transit, encryption at rest), access controls, and regular security reviews to protect your data. No system is completely secure, and we encourage you to use a strong, unique password.

International transfers

Your data may be processed in countries outside your own. Where this involves the UK or EEA, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place.

Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@colmcenter.org.