What Clearspace keeps, and what it does with it

Clearspace is run by Social Spark Marketing LTD, a company registered in England and Wales (company number 16667527), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We are the controller of the personal data described here.

Questions, requests or complaints: info@thesocialspark.co.uk (put “Privacy” in the subject). We are registered with the Information Commissioner's Office under ZC176168.

• Your account. Your email address. Your password is handled by Google's Firebase Authentication; we never see it. If you sign in with Google, we also get the name and profile picture on your Google account.
• What you put in. Thoughts, notes, ideas, tasks, pages, mood boards, images and files you add, your conversations in Clearspace, and voice notes, which are turned into text.
• What Clearspace works out from it. Your picture of the business (each fact with where it came from), the links between your ideas, and your plans.
• Your answers when you start. Which areas you chose, what you mostly want to do, your reminder preferences and your website address.
• Your website, if you give it. We read its public pages and keep what you confirm.
• Calendars you connect. From Google: when you are busy, and the titles of your events if you allow it. From any other calendar (iCloud, Outlook and so on): the calendar's address, because that is how we read it. Events are read when you look at your calendar or talk to Clearspace, and not stored. We never read descriptions, locations or who else is invited.
• Reminders you set. What you asked to be reminded about, when, and the email address the reminder goes to (the one you sign in with).
• Thumbs up or down on a reply. Which way you rated it, which expert answered and when. Not the words of the reply or of what you said: we count ratings to see which answers help.
• Chat histories you import from ChatGPT, Claude or Gemini. The file is read on your device and we keep only what you typed, never the assistant's replies.
• Payments. If you buy, Stripe takes the payment. We only learn whether you've paid. We never see your card.
• Feedback you send us, and ratings you give.
• Technical. Your IP address is used briefly by our hosting provider to limit how often requests can be made; we don't keep it. When something breaks, we record what broke and on which page. With your consent, analytics (section 10).

The law asks us to say which lawful basis each use rests on, so each one says.

• Running Clearspace for you: keeping your work, organising it, answering you, planning with you, showing your calendar. Basis: our contract with you.
• Keeping it safe and affordable: limits on how often requests can be made and on AI spending per account, and a record of what each AI request cost (which feature, which model, how much; never what you wrote). Basis: legitimate interests, keeping the service secure and available.
• Checking the answers are good. People at Social Spark can review the challenges Clearspace raises, what each one was based on and how you rated it, and read feedback you send. Basis: legitimate interests, making sure the product does what it says.
• Asking a person. Now and then a general question that the AI can't answer confidently, never one about you, is shown to a person at Social Spark. If their answer changes what you were told, Clearspace tells you a person was involved. Basis: legitimate interests, giving you a better answer.
• Analytics and session recordings, to see where Clearspace is confusing. Basis: your consent, which you can withdraw at any time.
• Emails from us, only if you ticked the box when you signed up: guidance and Social Spark updates. Basis: your consent. Email info@thesocialspark.co.uk to stop at any time.
• Payments and the records the law requires. Basis: our contract with you, and legal obligation.

We don't use your data for advertising, we don't sell it, and no decision with legal or similarly significant effects on you is made by automated means.

• Who. Anthropic (Claude), Google (Gemini) and OpenAI (GPT). Each feature is given one of them; if it is unavailable, another may answer that request.
• What they receive. Only what that request needs: what you just said, the parts of your record that bear on it, the recent conversation, your calendar for the days in question, the text of a page you asked it to read, an image you asked it to look at, or a voice note to turn into text.
• On what terms. They process it for us under their business terms, which do not let them train their models on it. They may keep it for a limited time to detect abuse.
• Web searches. On a question that depends on something that changes, the AI may search the web through Anthropic. The search words, which can include words from your message, go to a search provider. The sources are shown with the answer.
• Finding what applies. To find the knowledge that bears on what you said, your message and some of your facts are turned into numbers (“embeddings”) by Google or OpenAI.
• No training. We don't train any AI model on your data.

AI can be wrong. Whenever Clearspace says something about your business, it shows what it rests on, so you can check.

Clearspace's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect Google Calendar, Clearspace asks for your free and busy times and, if you allow it, your events (their titles and times). It uses them to show your calendar, to plan your week around what is already in it, and so that the conversation can take your schedule into account. Events are read when needed and not stored; a reply in your conversation that mentions one is kept with the conversation. Google data is not used for advertising, not sold, not used to train AI models, and not read by people except with your permission, for security, or where the law requires.

Disconnect in Settings, Connections. To remove Clearspace's access at Google as well, use your Google account's third-party connections.

Only these, each processing it for us under contract:

• Google Cloud (Firebase): sign-in and the database that holds your work.
• Cloudflare: hosting, and storage for larger files such as images and boards.
• Anthropic, Google and OpenAI: the AI (section 4).
• Google Calendar, only if you connect it.
• Resend: sends reminder emails, only for reminders you set.
• Stripe, only if you buy.
• Only with your consent: Google Analytics, PostHog (on its EU servers), and Social Spark's own analytics service.

We would also disclose data where the law requires it.

Some of these providers process data outside the UK, including in the United States. We only use providers that protect those transfers in a way UK law allows, such as the UK–US data bridge or the UK's International Data Transfer Agreement.

• Your work: until you delete it. Your sign-in: until you ask us to close it.
• Calendar events: not stored. The connection is kept until you disconnect it.
• Your website: the quick look when you give it (“Is this you?”) is not stored. The full read becomes facts you can check, kept with the rest of your work.
• Voice notes: the recording stays on your device for up to 24 hours, so it isn't lost if the connection drops. We send it to be turned into text and don't keep it.
• Share links: until you turn them off or they expire.
• Reminders: until 90 days after they go out or you cancel them.
• Ratings on replies: until you change them or delete everything.
• Records of AI cost: until you delete everything.
• Payment records: as long as the law requires, usually six years.

You can ask to see your data, correct it, delete it, take a copy, restrict or object to how we use it, and withdraw consent at any time. Two of these need no request at all:

• Download everything (Settings) gives you all of it as one file.
• Delete everything (Settings) deletes your work, your connections and everything else Clearspace keeps about you, and we keep no copy. Your sign-in (email and name) is shared with Social Spark's other apps, so it stays; email us and we will close it too.

For anything else, email info@thesocialspark.co.uk. We reply within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. We would like the chance to put it right first.

Needed for Clearspace to work, so no consent is asked: keeping you signed in, your settings and progress (for example, which cards you have dismissed), and voice notes waiting to be sent.

Only if you say yes:

• Google Analytics: which pages are visited (cookies named _ga).
• PostHog: how people use the app, including recordings of sessions with every piece of text and everything you type hidden.
• Social Spark's visitor identifier (a cookie named ss_visitor_token, kept for a year and shared across thesocialspark.co.uk sites), so we can see how people move between them.

You can change your answer at any time in Settings.

Clearspace is for people aged 18 and over. If we learn that someone younger has an account, we will delete it.

If this changes, the date at the top changes. If it changes what we do with data you have already given us, we will tell you in the app before it applies.