clo
Your data, your control

Privacy Policy

How Clo collects, uses and protects your information when you use clo.run, app.clo.run and your Clo AI team, including accounts you connect such as Facebook and Instagram.

Last updated 25 October 2026

The short version

  • We only collect what we need to run your AI team and keep your account safe.
  • We never sell your data, and we don't use it for advertising.
  • Clo's AI models, voice input and spoken replies run on our own servers.
  • Your agents only act on connected accounts, like Facebook or Instagram, with your permission.
  • You can see, export or delete your data at any time.
  • Questions? Write to [email protected] and a real person will answer.

Who we are

Clo (“Clo”, “we”, “us”) provides a team of AI agents, managed by an AI office manager called Clo, that helps businesses with marketing, sales, research, design and other work. This policy covers our website at clo.run, our app at app.clo.run, and any feature of the Clo service (together, the “Service”).

For the personal information described here, Clo is the data controller. You can reach us any time at [email protected].

Information we collect

Information you give us

  • Account details: your name, email address and password. We store passwords only as a secure one-way hash, never as plain text.
  • Business details: the brand profile you set up, such as your business name, website, description, audience, tone of voice and the topics you want your team to follow.
  • Your instructions and content: messages you send to Clo, tasks, ideas and briefs, and the work your agents create for you, such as research, captions, templates, posters, carousels and reel storyboards.
  • Voice: when you use the microphone, your recording is turned into text on our servers so Clo can understand you. We keep the text of your message, not the audio recording. Clo's spoken replies are generated on our servers and are not stored.
  • Waitlist and contact: your email address and country if you join our waitlist, and anything you send us by email.

Information from accounts you connect

  • If you connect a third-party account, such as Facebook, Instagram or another platform, we receive the information that platform shares with your permission. This can include your name, profile or account ID, the Pages or business accounts you choose to connect, access tokens, and the content and performance data needed to publish posts and report on them.
  • We only request the permissions needed for the features you use, and you choose which accounts and Pages to connect.

Information collected automatically

  • Technical data: IP address, browser type and approximate country, used to deliver the Service and keep it secure.
  • Security records: sign-in attempts and active sessions, used to protect your account from misuse.
  • Preferences: settings such as light or dark mode and your office view, stored in your own browser.

How we use your information

  • To provide the Service: running your AI team, routing your requests to the right agent, creating content and showing your work in the office and Content studio.
  • To act on connected accounts only as you instruct, for example publishing a post you asked for or that you approved to go to social media.
  • To keep the Service safe and reliable, including preventing fraud, abuse and unauthorised access.
  • To communicate with you about your account, support requests and important changes to the Service.
  • To improve the Service, using information about how features are used, without selling it or using it for advertising.
  • To meet legal obligations and enforce our Terms of Service.

We rely on the following legal bases: performing our contract with you, our legitimate interests in running and securing the Service, your consent (for example when you connect a social media account, which you can withdraw at any time), and compliance with the law.

How Clo's AI works with your data

  • The AI models that power your team, including understanding your messages, writing content, speech-to-text and Clo's voice, run on servers operated by Clo. We do not send your messages, voice or business data to outside AI companies.
  • When your agents research trends, they read public sources such as Google Trends, Google News and Hacker News. These searches use your business topics, not your personal information.
  • We do not use your content to train AI models for anyone else.
  • AI can make mistakes. Please review content before you publish it. Our Terms of Service explain this in more detail.

Facebook, Instagram and other connected accounts

When you connect an account from Meta (Facebook or Instagram) or another platform:

  • We use the data you authorise only to provide the features you asked for, such as publishing and scheduling posts, managing comments and showing results.
  • Your agents only post or act on the accounts and Pages you selected, and only when you ask for it or approve it.
  • We do not sell platform data, share it with data brokers, use it for advertising or profiling, or combine it with other data to identify people.
  • Access tokens are stored securely and used only to talk to that platform on your behalf.
  • You can disconnect at any time from your Clo settings or from the platform itself. On Facebook, go to Settings & privacy, then Settings, then Apps and websites, and remove Clo. When you disconnect, we stop using that access and delete the stored tokens.
  • Our use of data from Meta follows Meta's Platform Terms and Developer Policies.

When we share information

We do not sell your personal information. We only share it in these cases:

  • Platforms you connect: to publish or manage content on the accounts you chose, as you instructed.
  • Service providers: companies that help us run the Service, such as Cloudflare, which delivers our website and app securely. They may only use the information to provide their service to us.
  • Legal reasons: when the law requires it, or to protect the rights, safety and property of our users, the public or Clo.
  • Business changes: if Clo is involved in a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different policy.

Cookies and local storage

  • We use one essential cookie, clo_session, to keep you signed in. It is secure and cannot be read by other websites or scripts.
  • Your browser's local storage keeps simple preferences, such as dark mode and the layout of your office.
  • We do not use advertising cookies or third-party tracking.

How long we keep information

  • Account and business data: for as long as your account is open. When you delete your account, we delete it within 30 days, except where the law requires us to keep it longer.
  • Connected account data and tokens: until you disconnect the account or delete your Clo account.
  • Security records: such as sign-in attempts, for up to 90 days.
  • Waitlist emails: until we invite you or you ask us to remove you.

How we protect it

  • All connections to clo.run and app.clo.run are encrypted with HTTPS.
  • Passwords are stored as strong one-way hashes, and session tokens are hashed before they are stored.
  • Our servers and databases are access-restricted, and our AI models run on infrastructure we control.
  • Repeated failed sign-in attempts are rate-limited to protect your account.

No system is perfectly secure. If we ever learn of a security incident that affects your information, we will notify you and the relevant authorities as the law requires.

Your rights and choices

Depending on where you live, including under the GDPR in Europe and the UAE Personal Data Protection Law, you can:

  • Access the personal information we hold about you, and get a copy of it.
  • Correct information that is wrong or incomplete.
  • Delete your information.
  • Export your information in a portable format.
  • Object to or restrict certain uses, and withdraw consent at any time.
  • Complain to your local data protection authority.

To use any of these rights, email [email protected] from the email address on your account. We will reply within 30 days.

Deleting your data

You can ask us to delete your Clo account and all the data connected to it, including data we received from Facebook, Instagram or any other connected platform.

  • By email: send a message to [email protected] with the subject “Delete my data” from the email address on your account. We will confirm, delete your data within 30 days and let you know when it is done.
  • From Facebook: go to Settings & privacy, then Settings, then Apps and websites, find Clo and choose Remove. This revokes our access, and we delete the data we received from Meta about you.

Deleting your account removes your agents, tasks, messages, brand profile and created content, and cannot be undone. Content already published to your social media accounts stays there unless you delete it on that platform.

Children

Clo is a business tool and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Where your information is stored

Your account data and your AI team run on servers operated by Clo. Our website and app are delivered through Cloudflare's global network, so your information may pass through other countries. Wherever it travels, we protect it as described in this policy.

Changes to this policy

We may update this policy as Clo grows. If we make important changes, we will tell you by email or in the app before they take effect. The date at the top of this page shows when it was last updated.

Contact us

Questions, requests or concerns about your privacy? We're happy to help.

[email protected]