Privacy Policy

OpenClaro (“OpenClaro,” “we,” “us,” or “our”) provides an AI-powered customer-experience platform for local businesses, including modules that connect to a business's own social media accounts (such as Instagram) to monitor and respond to customer comments and messages on our customers' behalf. This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you. It applies to openclaro.com and to the OpenClaro services we operate, including any use of the Facebook and Instagram Platforms.

1. Information we collect

We collect information in the following ways:

• Information you give us directly. Name, work email, business name, and any other details you submit through our contact or consultation forms, or when you email us.
• Information from connected social accounts.When a business authorizes OpenClaro to connect to its Instagram professional account (via Instagram or Facebook Login), we access only what is needed to operate the service the business signed up for, such as: basic profile information (name, username, profile picture), and comments posted on that business's live broadcasts or posts, so our AI agent can read and respond to them in real time on the business's behalf. We request the minimum set of Meta permissions needed for that purpose.
• Usage and device information. We use privacy-focused, cookie-free web analytics (Vercel Analytics) to understand aggregate traffic to our site, such as page views and general device/browser type. We do not use this data to identify individuals.

2. How we use information

• To operate the service a business has engaged us for — for example, having our AI live-selling agent read viewer comments during a live stream and respond in real time, or surfacing catalog products on screen.
• To respond to inquiries, provide support, and follow up on consultation requests.
• To maintain, secure, and improve our platform.
• To comply with legal obligations.

We do not sell personal information, and we do not use information obtained through the Facebook or Instagram Platforms for advertising purposes.

3. How we share information

We share information only with service providers who help us run the platform, under agreements that limit their use of the data to providing services to us:

• Meta Platforms (Facebook/Instagram) — as the platform through which comment and profile data is obtained, per each business's own authorization.
• Anthropic — powers the AI conversation logic that reads comments and generates responses.
• Cartesia and our live-avatar video provider — generate the synthesized voice and video avatar used in a live stream.
• LiveKit — provides the real-time media infrastructure that composes and delivers the live stream.
• Vercel — hosts our website and provides analytics and infrastructure.

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to any personal information involved.

4. Data from the Facebook and Instagram Platforms

Where OpenClaro accesses data through Meta's Facebook or Instagram Platforms on behalf of a business we work with, we:

• Use that data only to provide and improve the specific features the business authorized (for example, reading and responding to live comments), and never for unrelated purposes.
• Do not sell, license, or use that data for advertising.
• Retain comment and profile data only as long as needed to operate the authorized service, and delete it on request or when the connected account is disconnected.
• Comply with Meta's Platform Terms and Developer Policies.

A business can revoke OpenClaro's access at any time from its Instagram or Facebook account settings (Apps and Websites). Revoking access stops any further data collection and triggers deletion of the associated access tokens and stored comment data.

5. Data retention

We keep personal information only as long as needed for the purposes described above, or as required by law. Comments and other content read from a connected Instagram account are retained only for the duration needed to operate a live session and generate a response, plus a short period for troubleshooting, after which they are deleted.

6. Your rights and data deletion

You may ask us to access, correct, or delete personal information we hold about you, or to disconnect a social account from our service, by emailing mshahriarinia [at] openclaro.com. We will act on verified requests within 30 days.

7. Security

We use reasonable technical and organizational measures to protect information against unauthorized access, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's privacy

Our services are directed at businesses and are not intended for children under 13, and we do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.

10. Contact us

Questions about this policy or how we handle your information can be sent to mshahriarinia [at] openclaro.com.