Privacy

Who is responsible

For the data of visitors to this site, of the people who create and manage a channel, and for billing data, the company that owns Claria (named in the Terms & Conditions) is the data controller: it decides why and how that data is used.

For the content of reports and the data of the people involved in them, the organization that runs the portal is the controller, and Claria processes that data on its behalf under the Data Processing Agreement. Each organization should publish its own privacy notice in its portal.

Data we handle

• Account: name, email address, role, language and sign-in events (date and time, without device data).
• Organization: name, portal address, country, settings, jurisdiction profile and the policies you define.
• Billing (Pro): billing country, contact and, when an invoice is requested, the identification and address needed to issue it. Card details stay with the payment provider.
• Messages we send: the delivery status of sign-in links, invitations and notices. We do not track whether an email was opened or clicked.
• Technical records: errors are recorded with codes and opaque identifiers only. Our application does not keep device identifiers or connection data.
• Reports: the content of a report, the messages exchanged, attachments where enabled and, if the reporter chooses to identify, their details. We process these only for the organization that received the report.

Why we use it

• To provide the service you asked for: creating your channel, signing people in, receiving and managing reports.
• To charge, document and account for payments, and to meet tax and accounting obligations.
• To keep the service secure and prevent abuse, which is our legitimate interest.
• To send you messages about your account, security and material changes. We do not send marketing without your consent, and we do not sell personal data.

If you send a report

What happens with your report depends on the organization that runs the portal: it decides whether a report can be anonymous for each type of situation, who in its team can read it and for how long it is kept. Read its privacy notice before you send.

Your tracking code is shown once and only a keyed hash of it is stored, so the code itself cannot be read back from the database. Keep it safe: anyone who has it can follow up on the report.

Our application does not keep device identifiers or connection data of reporters, and the portal has no analytics or advertising tools. The infrastructure providers that deliver the service process connection data for a short time to run their networks and keep short-lived platform logs, which we do not control. No system is risk-free, and Claria does not promise absolute anonymity. If you prefer to stay unnamed, avoid details in your account that could identify you.

To exercise your rights over a report, contact the organization that received it. If you prefer not to identify yourself, you can write through the messages on your tracking page. We help the organization answer.

Who we share data with

We use providers to run the service: application hosting and execution, database, domain and bot protection, file storage for attachments where enabled, transactional email, payments and, if your organization enables them, sign-in providers. They process data only for us and under contracts. The current list, with what each one does and where it runs, is in the Data Processing Agreement.

We share data with authorities only when the law requires it, and we inform the affected organization when we are allowed to. We do not sell personal data.

Where data is stored

The application and the database run in a region in São Paulo, Brazil. Attachments, where enabled, are stored outside South America. Email, payment and sign-in providers process data in other countries. Where data leaves your country, we rely on the providers' data processing terms and on the safeguards the applicable law requires.

How long we keep it

• Account and organization data: while your channel exists and up to 12 months after it closes, for security and to handle disputes.
• Billing records: as long as tax and accounting law requires.
• Reports and case data: for as long as your organization configures. When a channel closes, the data is exported and deleted as the Data Processing Agreement describes.
• Emails and technical records: for the short periods needed to deliver messages and diagnose problems.

Security

Each organization has its own separate space. Access to cases is limited by role, and each organization controls whether a second sign-in step is required. Protection of stored content, including separate keys for each organization, and an audit trail of actions are design objectives that are being integrated into the product. Our operators do not access report content as part of the normal service, and we are building the controls to restrict and log any exceptional access.

No system is risk-free. If a security incident affects your data, we inform the affected organization as the Data Processing Agreement describes, and you directly where the law requires.

Your rights

Depending on the law that applies to you, you can ask to access, correct, delete or block your data, to object to a use, and to receive a copy in a portable format. Write to us through the contact channel published on this site; we answer within the period the applicable law sets and, where none applies, within 30 days. You can also complain to the data protection authority of your country.

For data in a report, the organization that received it is the one that answers; we help it do so.

Cookies

This site uses only functional cookies: your language, your theme, the country used to show prices, the progress of your sign-up and, in the panel, your session. They are not used for analytics or advertising, and we do not use third-party tracking tools.

Changes and contact

We may update this policy. Material changes are announced on this site and, for account holders, by email or in the panel before they apply. For privacy questions, write to soporte@claria.lat.