Privacy Policy

This is the Privacy Policy for the mobile applications and website (cleverai.app) developed and operated by NEUROLIFY INC, a federally incorporated company in Canada (referred to as "us," "we," or "our"). This policy is subject to our Terms of Use, which can be accessed at https://cleverai.app/terms, and is incorporated into them. Throughout this Privacy Policy, we use the term "Application" or "Service" to refer to our products, applications, and website. By using the Application or Service, you indicate your agreement with this Privacy Policy. If you do not agree to the terms outlined in this Privacy Policy, please refrain from using the Application or Service.

Information collected by us

Personal Data

When you register with us and install the Application on your device, we collect personally identifiable information about you. As part of the registration process, we require you to provide your email address. In some cases, we may offer the option to hide your email address to provide additional privacy.

Log and Usage Data

We collect log data that may vary based on your interaction with us. This data could include details about your activity in the Application, including the date and time of your usage, which pages and files you viewed, and other actions you performed, such as which features you used. Additionally, we may collect device event information, such as system activity and error reports (also referred to as "crash dumps").

Agent, Bot, Assistant and Skin Creation (UGC)

When you create agents, bots, assistants or skins within our Application, we collect data related to the creation process. This includes information such as the functionalities, scripts, commands, images, and configurations you input to develop and customize your agents, bots, assistants, and skins.

Payment and Transaction Data

When you make purchases through our Service, we collect transaction-related information necessary to process your purchase and maintain records. This includes purchase history, subscription status, and transaction identifiers. For purchases made through our website (cleverai.app), Paddle.com Market Limited ("Paddle") acts as our Merchant of Record and directly collects and processes your payment information. NEUROLIFY INC does not have access to your full credit card numbers or payment details. For mobile app purchases, payment processing is handled by the respective app stores (Apple App Store, Google Play Store) or RevenueCat.

Device and Browser Information

When you access our website, we may collect information about your device and browser, including IP address, browser type and version, operating system, device identifiers, and general location data derived from your IP address. This information helps us provide a better user experience and detect fraudulent activity.

Voice Typing (Speech Recognition)

If you use voice typing in the message box, your speech is converted to text by the speech recognition service of your device or browser, not by us. On iPhone, iPad and Safari that service is provided by Apple; on Android and Chrome it is provided by Google; other browsers may use their own provider. Depending on your device and settings, your audio may be sent to that provider for processing under its own terms and privacy policy. NEUROLIFY INC does not receive, record or store this audio. We receive only the resulting text, and only when you send it as part of a message, after which it is handled like any other message content described in this policy. Voice typing needs microphone permission (and, on iOS, speech recognition permission), which you can withdraw at any time in your device or browser settings. This is separate from features in which you record audio and submit it to us, such as "Convert voice to text", where the recording is sent to us and our AI model providers to be transcribed.

Connectors and Third-Party Account Data

If you choose to enable optional Connectors that link Clever AI to third-party applications or services (for example, Google Gmail, Google Calendar, or other Google or third-party services we make available), including, when offered, connections that use the Model Context Protocol ("MCP") or similar servers, we collect and process information needed to establish and maintain that connection. This may include: (a) OAuth tokens, refresh tokens, and related authentication metadata (and, if applicable, other credentials you supply for a Connector we offer); (b) account identifiers such as email address or account ID returned by the third party; (c) the permission scopes you grant; (d) connection status, Connector identifiers, and timestamps; and (e) content and metadata retrieved from or sent to the Third-Party Service or MCP server when you use Clever AI features that call that Connector (for example, email subjects, message content, calendar events, file names, tool results, or other data within the scopes you authorized). We generally send applicable portions of conversation context and tool requests needed for the action, not your entire account history by default. Content retrieved from a Connector may become part of your Inputs to the Service and may appear in Outputs.

You control whether to connect, which Connectors to enable, and which permissions to grant. You can disconnect a Connector in the Service and/or revoke access in the third-party account settings. When you disconnect, we will delete or invalidate stored tokens for that connection, subject to short-term backup and security logs as described under Data Retention.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors are coming from. Cookies are small text files stored on your device that help us provide and improve our Service.

Types of Cookies We Use

Essential Cookies: These are necessary for the website to function properly and cannot be disabled. They enable core functionality such as security, account access, and remembering your preferences.

Analytics Cookies: These help us understand how visitors interact with our website by collecting information anonymously. This data helps us improve the website and user experience.

Functional Cookies: These enable enhanced functionality and personalization, such as remembering your language preference or region.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our website.

How we use your Information?

We use the information collected to facilitate the account creation and login process, protect our Services by utilizing your information as part of our efforts to prevent and monitor fraudulent activities, enforce our terms, conditions, and policies for business purposes, comply with legal and regulatory requirements or in connection with our contract, and respond to user inquiries and offer support to our users to address any potential issues with the use of our Application.

Payment Processing

We use transaction data to process your purchases, manage your subscriptions, provide customer support related to billing inquiries, and comply with financial regulations and tax requirements.

Providing Connectors

When you enable Connectors, we use related authentication and usage data to (a) authenticate you with the Third-Party Service; (b) retrieve or send applicable portions of data needed to fulfill your requests; (c) allow AI features and agents to use Connectors within the scopes you granted (today primarily to retrieve data; write or other actions only where a Connector supports them and you direct them); (d) maintain, secure, and troubleshoot the Connector feature; and (e) enforce our Terms of Use and prevent abuse. We process Connector data to provide the feature you requested. We do not sell your Connector content, and we do not use content retrieved from Connectors to train AI models. Where we use third-party AI model providers to generate responses that include Connector-derived content, that content may be processed by those providers solely as part of providing your requested response under this Privacy Policy and our Terms of Use, and subject to those providers' terms.

Further information about the processing of personal data

Push notifications

This Application may send push notifications to the User to achieve the purposes outlined in this privacy policy. Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then change those settings for this Application, some or all of the apps on the particular device. Users must be aware that disabling push notifications may negatively affect the utility of this Application.

Facilitating Agent, Bot and Assistant Creation

We use the data collected during the agent, bot, skin, and assistant creation process to facilitate the development and customization of agents, bots, skins, and assistants (UGC) within our Application.

Improving User Experience

The information gathered helps us improve user experience by understanding user preferences and usage patterns related to agents, bots, skins, assistants (UGC) creation.

Service Enhancement

Data related to agents, bots, skins, and assistants (UGC) creation may be utilized to enhance the functionality, features, and performance of our Application.

Analytics and Research

We may analyze aggregated data related to agents, bots, skins, and assistants (UGC) creation for research and analytical purposes to improve our services and offerings.

Sharing of your information

We may share anonymous or aggregate information with third parties, including advertisers and investors. For instance, we may provide advertisers with the number of app users. This information does not contain any personal or identifiable details, and is utilized solely for the development of content and services that we hope will be of interest to you.

We may share your information, along with information from tools like log files, device identifiers, and location data, with third-party organizations that assist us in providing the Application to you ("Service Providers"). Our Service Providers will have access to your information only as reasonably required to provide the Application, under reasonable confidentiality terms.

We may be required by law to disclose your information in response to a judicial proceeding, court order, or legal process, such as in response to a subpoena or government request. This may include disclosing your information to public authorities to meet national security or law enforcement requirements.

Accessing and deleting your data

You have the ability to control what information you share with us on the Application. If you wish, you can also delete the Application from your mobile device at any time. You may request that we delete your account and associated data within the mobile application from the settings page. For more information, please refer to our support page guide. We will also make commercially reasonable efforts to remove your data from our servers. It is important to note that any personally identifiable information that you share with other users through the Application, including through text messages, photos, videos, or other means, as well as any information that you submit on a blog, bulletin board, or chat room, may be viewed and used by others, potentially resulting in unsolicited messages or identity theft. We are not responsible for any misuse of your information resulting from your disclosure of such information.

Data Deletion and Export Options

You can at any time fully delete your data from our servers by using various delete options provided in the platform. When you delete your account, all data associated with it, including profiles, images, agents, bots, assistants, and skins, will be removed within 30 days. Additionally, you can request to export your current data related to agents, bots, skins, and assistants you created by emailing us at neurolify@neurolify.com. You also have an export option in your account, which will export high-level data of the user. For full user-generated content exports, please email us and we will respond within 14 business days.

Service Providers

There may be occasions where we have agreements with third-party companies to offer products or services through our Application. In these instances, we may share your personal information with our third-party service providers, but only to the extent necessary to provide the services to you.

Payment Processors

For web purchases, we use Paddle.com Market Limited ("Paddle") as our Merchant of Record. When you make a purchase through our website, Paddle collects and processes your payment information directly. Paddle may collect your name, email address, billing address, payment card information, and other data necessary to process your transaction. Paddle's use of your personal data is governed by their Privacy Policy. For mobile app purchases, payment processing is handled by the respective app stores (Apple, Google) or RevenueCat, each with their own privacy policies.

Analytics and Infrastructure Providers

We work with third-party analytics providers to understand how users interact with our Service. These providers may collect information such as pages visited, features used, and general usage patterns. We also use cloud infrastructure providers to host and deliver our Service securely.

Email Delivery Providers

We use Amazon Web Services, Inc. (Amazon Simple Email Service) to deliver the emails we send you, such as sign-in codes, account and subscription notices, and, if you opted in, product updates and offers. Amazon processes your email address, the message content, and delivery information (for example, whether a message was delivered, bounced or reported as spam) on our behalf, on servers in the United States. We use this delivery information to stop sending to addresses that can't receive mail and to honour unsubscribe requests and spam reports.

Connector Providers (Third-Party Services You Connect)

When you connect a Third-Party Service, you instruct us to exchange data with that provider so the Connector can work. Depending on your instructions and the scopes you grant, Clever AI may send applicable portions of Inputs, Outputs, prompts, tool requests, and related context needed to fulfill the requested action to the Third-Party Service, and may retrieve content from it. The Third-Party Service receives and processes that data under its own privacy policy and terms—not under ours. Once data has been provided to a Third-Party Service, NEUROLIFY INC does not control how that provider uses, stores, or further shares it, and is not responsible for that provider's privacy or security practices. Before enabling a Connector, review the provider's privacy policy and the permissions shown on the consent screen. Examples of providers may include Google (for Gmail, Calendar, and related Google account APIs we make available); the set of available providers may change over time.

Some Connectors may use third-party or custom servers that implement the Model Context Protocol (MCP) or similar protocols, including catalog Connectors that run over MCP and, when we offer them, custom or remote MCP servers you can connect. When you use those Connectors, Clever AI may send applicable portions of tool requests, Inputs, Outputs, and related context needed to fulfill the action to that server and receive results from it. Data sent to an MCP or similar server is subject to that server's own privacy practices, security, and retention policies—not ours—and NEUROLIFY INC is not responsible for that data after it has been provided to the server. Custom or remote MCP servers may not be verified by NEUROLIFY INC. Do not connect to a server unless you know and trust it.

OAuth access tokens and other Connector credentials we store are encrypted at rest in our systems and are used only to provide the Connector feature. Credentials are scoped to your user account and are not shared with other Clever AI users. Disconnecting a Connector or revoking access at the Third-Party Service stops future access using those credentials, subject to propagation delays on the third-party side.

International Data Transfers

NEUROLIFY INC is based in Vancouver, British Columbia, Canada, and our Service is provided globally. Your personal data may be transferred to, stored, and processed in countries other than your country of residence, including Canada, the United States, and the United Kingdom (where Paddle is based). These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your personal data to these countries. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

Data Retention

We retain your personal data for as long as necessary to provide our services to you and fulfill the purposes described in this Privacy Policy. Transaction and billing data may be retained for longer periods as required by applicable tax and financial regulations (typically up to 7 years). Connector tokens and connection metadata are retained while the Connector remains connected and for a limited period afterward as needed for security, abuse prevention, and reliable deletion. Content retrieved from a Connector for a chat or task may be retained as part of your conversation history under the same rules as other Inputs and Outputs until you delete that content or your account. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain certain information.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using SSL/TLS, secure data storage with access controls (including encryption of Connector tokens at rest), regular security assessments, and employee training on data protection practices. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for safeguarding your Clever AI account and for reviewing and revoking Third-Party Service permissions you no longer need.

Do we update this notice?

Yes, we will update this notice as necessary to comply with applicable laws. We may make updates to this privacy notice periodically and the revised date will be displayed on the notice. The updated version will be effective as soon as it is made accessible. If there are any significant changes to this privacy notice, we may notify you by prominently posting a notice of the changes or directly sending you a notification. We recommend that you review this privacy notice regularly to stay informed about how we protect your information.

What are your privacy rights?

Withdraw their consent at any time. In essence, users have the right to revoke their consent if they had previously given it for the processing of their Personal Data.

Object to processing of their Data. In brief, users have the right to object to the processing of their data if it is carried out on a legal basis other than consent.

Access their Data. As a user, you have the right to know whether your personal data is being processed by the data controller. You also have the right to access certain details about the processing of your data and obtain a copy of the data that is being processed.

Verify and seek rectification. Users have the right to ensure the accuracy of their personal information and request updates or corrections as necessary.

Restrict the processing of their Data. Under certain circumstances, users have the right to request that the processing of their Data be restricted. In such cases, the Owner will only store the data and will not process it for any other purpose.

Have their Personal Data deleted or otherwise removed. In certain situations, users have the right to request the deletion or erasure of their data from the Owner's records.

Receive their Data and have it transferred to another controller. Under certain circumstances, users have the right to obtain their personal data in a structured, commonly used, and machine-readable format, and, if technically feasible, to have it transmitted to another controller without hindrance. This right applies when the data is processed by automated means and is based on the user's consent, a contract they are part of, or pre-contractual obligations.

Lodge a complaint. Users are entitled to file a complaint with their appropriate data protection authority.

Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your privacy rights, please contact us at:

For payment-related inquiries regarding web purchases processed by Paddle, you may also contact Paddle directly through their customer support channels.