Effective Date: 8/27/2026
Clusterbase Inc. ("Company," "we," "us," or "our") is committed to building a private AI-powered search platform that respects user privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal data when you access or use our Services.
This Privacy Policy applies to information we collect through our website, applications, and services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
We collect personal data in the following categories:
When you sign up for an account, we collect your name, email address, and account credentials. This information is necessary to create and maintain your account.
Your device or browser automatically sends us information when you access or use our Services, including IP address, browser type, operating system, device identifiers, and connection timestamps. We use this information to provide and secure the Services.
When you interact with our Services, we collect your search queries, prompts, uploaded content, and AI-generated responses (collectively, "Inputs and Outputs"). If you include personal data in your Inputs, we will collect that information. Please note that we cannot guarantee the factual accuracy of Outputs.
We collect information about how you use the Services, including features accessed, actions taken, and session duration. This helps us improve the Services and understand user behavior.
We use the personal data we collect for the following purposes:
We use your personal data to provide, maintain, and facilitate the Services, including processing your search queries, generating AI-powered responses, and managing your account.
We may use your Inputs and Outputs to train our models and improve our Services, unless you opt out through your account settings. We also use aggregated and anonymized data to conduct research and develop new features.
We use personal data to prevent and investigate fraud, abuse, and violations of our Terms of Service and Acceptable Use Policy, including monitoring for unusual patterns that may indicate misuse.
We use your contact information to send you service-related notifications, respond to your inquiries, and provide customer support.
We may use and disclose personal data as necessary to comply with applicable laws, regulations, legal processes, or governmental requests.
We disclose personal data in the following circumstances:
We may disclose personal data to third-party service providers who perform services on our behalf, such as cloud hosting, analytics, and customer support. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
We may disclose personal data to governmental regulatory authorities as required by law, including in response to subpoenas, court orders, or other legal processes.
In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the successor entity.
We may disclose your personal data for any other purpose with your consent.
Important: We do not sell your personal data to third parties. We do not share your Inputs and Outputs with AI model providers or use them for purposes outside of providing and improving our Services (unless you have opted out of model training).
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Session Data: Session data is deleted when you close your session or after a period of inactivity.
Saved Conversations: Conversations are stored only if you choose to save them and can be deleted at any time through your account settings.
Account Data: If you delete your account, we will delete your personal data within thirty (30) days, except where we are required to retain it for legal or regulatory purposes.
Technical Logs: Anonymized technical and performance data may be retained for up to ninety (90) days for security and service improvement purposes.
Cluster offers an optional Gmail connector. It is off by default and is only enabled when you explicitly connect a Google account and grant access on Google’s consent screen. This section describes how we handle data obtained through Google APIs, and it applies in addition to the rest of this Privacy Policy.
gmail.readonly — used to search your mailbox and read message content so the assistant can answer questions about and summarize your mail. A metadata-only scope is not sufficient, because answering questions about what an email says requires the message body.
gmail.compose — used to create and update drafts in your Gmail account so that you can review and send them yourself.
gmail.send — used only when you explicitly instruct the assistant to send a message. The assistant never sends email on a schedule, in bulk, or without a direct instruction from you.
Gmail message content is processed in memory only, for the duration of the request that needed it, and is then discarded. We do not copy your mailbox, we do not build an index of your messages, and we do not retain message bodies, subjects, attachments, or recipient lists in our databases after the request completes.
We do not use Gmail data to train, retrain, or fine-tune any machine learning or AI model, and we do not sell it, rent it, or transfer it for advertising or any other unrelated purpose. Gmail content is disclosed to third parties only as strictly necessary to perform the action you requested — specifically, to the AI model provider that processes your request — and to comply with applicable law.
We operate under zero data retention terms with our AI model providers. Content sent to a provider to fulfill your request is used only to generate that response; it is not retained by the provider after the request completes, is not logged for human review, and is not used to train the provider’s models.
The one thing we do retain is the OAuth credential Google issues when you connect, which is required to make requests on your behalf. It is scoped to your account, held with restricted access, and deleted when you disconnect the connector.
You can revoke access at any time, either by disconnecting Gmail from the Connectors screen inside Cluster, or by removing Cluster App from the third-party access list in your Google Account settings. Revoking access immediately ends our ability to reach your mailbox.
Cluster App’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Depending on your location, you may enjoy certain rights regarding your personal data, as described below.
You may request access to the personal data we hold about you and receive a copy of your data in a portable format.
You may request that we correct inaccurate personal data or update incomplete information through your account settings.
You may request deletion of your personal data. Please note that we may retain certain information as required by law or for legitimate business purposes.
You may opt out of having your Inputs and Outputs used to train or improve our AI models through your account settings. This opt-out does not affect data already used for training prior to your request.
To exercise your rights, you may submit a request by emailing us at privacy@clusterbase.ai or through your account settings. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.
Please note that these rights are subject to limitations, and we may decline a request if we have a lawful reason for doing so. We will not discriminate against you for exercising your privacy rights.
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country.
When we transfer personal data internationally, we implement appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws.
Our Services are not directed to individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us at privacy@clusterbase.ai, and we will take steps to delete such information.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website with a revised "Effective Date" or by sending notice to the email address associated with your account.
Your continued use of the Services after such notice constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: privacy@clusterbase.ai
Company: Clusterbase Inc.
We will respond to your inquiry within a reasonable timeframe.