Privacy Policy

Clair has no separate customer accounts. RapidAPI handles marketplace identity, subscriptions, API keys, metering, and payment under its own privacy policy.

The APIs are read-only. Query strings are processed to answer requests and are deliberately excluded from Clair's application access logs, although RapidAPI and infrastructure providers necessarily receive request data to deliver and secure the service.

The website uses PostHog and Ahrefs Web Analytics. The indexed news and public job-posting corpora may also contain personal data that source publishers made public.

API inputs: query text, filters, cursors, request headers, and routing data are processed to authenticate and answer a request. Clair does not create a customer search-history profile. Its own structured access log records request ID, product, method, path without the query string, status, and duration.

Technical data: RapidAPI, hosting, network, and security providers may process IP address, user-agent, timestamps, and request metadata in their gateway or infrastructure logs to deliver traffic, meter usage, diagnose faults, and prevent abuse.

PostHog analytics: when enabled, the website sends page URL, referrer and campaign attribution, device or browser information, pageviews, page-leave events, and interaction events captured by the analytics library. PostHog uses a pseudonymous browser identifier; Clair does not call identify or attach a Clair account because no such account exists.

Ahrefs Web Analytics: the website loads Ahrefs' cookie-free analytics script. Ahrefs processes page and referrer URLs, user-agent, language, approximate location, and common interactions; it says raw IP addresses are discarded and daily visitor identifiers cannot track a person across days.

Browser storage: the theme choice is stored locally under clair-theme. PostHog may also use cookies or local storage for its pseudonymous analytics identifier, depending on browser support and the library configuration.

Communications: if you email us, we receive your email address, message, and any information you choose to include so we can respond and keep an appropriate record of the conversation.

Operating the service: answering API requests, keeping the system available, and investigating faults and abuse.

Understanding demand: website analytics show which product, guide, documentation, and outbound links are useful and how visitors move through the public site.

Communicating with you: answering support, product, legal, and privacy messages you send us.

We do not use your API inputs to train models or build advertising profiles.

We rely on legitimate interests to operate, secure, improve, and understand use of the service where that basis is available. Where applicable law requires consent for analytics storage or similar technologies, we will rely on consent rather than legitimate interests.

RapidAPI: the marketplace that fronts the API. It handles your account, authentication, quotas, and billing under its own privacy policy.

Hosting, database, network, and security providers: infrastructure that runs the website, API, and indexed corpora and keeps them available.

Email provider: infrastructure that delivers and stores messages you send to our contact address.

PostHog: pseudonymous product and website analytics. The configured endpoint currently uses PostHog's United States cloud.

Ahrefs: cookie-free, aggregate website analytics and traffic attribution.

Clair does not sell personal data and does not share it with advertisers.

Clair indexes news reporting and public job postings published by third parties. News can name public figures and private individuals; job postings can name recruiters, hiring contacts, or other people. This data came from public source material, not directly from the people concerned.

We process this material to build searchable, attributable data products over already-published information. We normalize and derive fields needed for retrieval, but do not combine the corpora with unrelated private sources to build dossiers about individuals.

If you are named in indexed material and want to exercise rights over Clair's copy or index, email us with enough detail to locate the record. The original article or posting remains controlled by its publisher or employer, so you may also need to contact that source.

Clair's application access logs omit query strings. Operational and infrastructure logs are retained according to configured rotation and provider retention periods, only as long as reasonably needed for reliability, security, abuse prevention, and legal obligations.

Analytics events are retained according to the configured PostHog and Ahrefs project settings. You can ask for the current retention settings at the contact below.

Email correspondence is retained for as long as reasonably needed to answer the request, maintain business and legal records, and resolve disputes.

News records may be retained as a historical corpus. Job source records may be retained to maintain identity, deduplication, crawl history, and freshness, even when a posting is no longer returned as active. Retention remains subject to applicable rights and legal obligations.

Data is encrypted in transit. We follow standard practices for access control, but no service can guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to receive a portable copy where applicable. You may also withdraw consent where processing relies on consent.

Because Clair holds no separate account, requests about a RapidAPI subscription, billing, credentials, or marketplace profile should go to RapidAPI. We may need information from you to locate an indexed source record or verify a rights request.

Users in the EU/EEA, UK, and Türkiye may also lodge a complaint with their data-protection supervisory authority. Other jurisdictions may provide similar rights.

Clair is a developer tool and is not directed at children.

Clair and its providers may process data in countries other than the one where you live, including the United States. Those countries may have different data-protection laws.

Where required, international transfers are handled through provider contractual safeguards or another lawful transfer mechanism. Contact us if you need more information about the providers or safeguards relevant to your data.

We may update this policy as products, providers, and legal requirements change. The current version is published here with its effective date.

Email contact@serinlabs.com for a privacy question, rights request, or information about current providers and retention settings.