Draft, 25 October 2026: to be reviewed before Claro opens sign-up.
Privacy
Last changed 25 October 2026
Claro draws diagrams of a conversation while it happens. It is made by Den Ouden Consultancy in the Netherlands. The short version: what is said in a meeting is not stored on our server, unless you save the session to your account; the audio is never stored. To draw it, the conversation is sent to a language model and, when you use the microphone, to a speech to text service; both are listed below with how long they keep it. We keep your account and how much you used.
Who is responsible for what
- Your account, sign-in, usage and payments: Den Ouden Consultancy is the controller.
- What is said in a session (speech, typed lines, imported transcripts, and the diagrams and summaries made from them): the person who starts the session decides what Claro processes. When you use Claro for work, your employer (or your own business, if you work for yourself) is the controller of that content, and Den Ouden Consultancy processes it on its behalf: only to draw the diagrams and, if you save a session, to keep it for you. We don't use it for anything else, and we help the controller with requests from the people in it and with any breach. A data processing agreement is available on request. When you use Claro privately, for yourself, this is personal use.
What we keep
| What | Why, and on what basis | How long |
|---|---|---|
| Your account: your name, your email address, and which sign-in you used (the provider's id for you; for a Microsoft work account, your organization's tenant id) | To sign you in and to know whose plan is whose. Needed to provide the service you signed up for (contract) | Until you delete your account |
| Sign-in sessions: a random token, stored only as a hash, and when it was created and last used | To keep you signed in (contract) | 30 days after you last used it, or until you sign out |
| Usage: per call to the language model or per piece of speech to text, the number of tokens or seconds and what it cost, with the time | To count the hours on your plan (contract), and to keep our books (legal obligation) | 7 years, as Dutch tax law requires; after you delete your account it is kept under a random id without your name or email |
| Your plan and payments, once plans open: the plan, its status and Stripe's ids for it; for business purchases the company name, address and VAT number on the invoice | To bill you (contract) and keep our books (legal obligation) | 7 years, as Dutch tax law requires |
| Technical logs of our server: time, the page or address called, the result, and your IP address | To keep Claro secure and running, and to find faults (our legitimate interest in a secure, working service) | At most 30 days |
| If you ask us to tell you when your company approved Claro: your work email address and your company's domain | To send that one mail (your consent, which you can withdraw) | Until it's sent, or until you ask us to remove it. That someone from a domain asked is kept as a count, without names or addresses |
| Sessions you save to your account (Session › Save to my account): the whole session, with its transcript, diagrams, summary, the names of the people in it and the record of who agreed to be heard. Never saved by itself: only when you save it | To let you open your work again, on any device (contract). For a work meeting you, or your employer, decide what is kept, and the people in it are told before Claro listens | Until you delete it (Session › My sessions) or your account. Encrypted by our server before it is stored, with a key kept apart from the database. This is not end-to-end encryption: our server decrypts it to show it to you, and we don't open it otherwise, except at your request or where the law requires |
| Emails you send us | To answer you | As long as needed to handle your question, at most 2 years |
You don't have to give us any of this, but without an account you can't start sessions; joining one needs only a name.
What we never keep
- Audio, ever. And what is said in a meeting, typed, imported, or heard through the microphone or from a call you share from your computer, while it is being drawn: it passes through our server to the services below and is not written down or logged there.
- Your diagrams and transcripts, unless you save the session to your account (above). Otherwise they live in your browser (its local storage) until you export or delete them. Anyone who uses the same browser profile can see them, so use your own.
- Your sign-in providers' passwords or access tokens. We only learn who you are from them.
Who helps us run Claro
| Service | What it does | What it sees, and how long it keeps it | Where |
|---|---|---|---|
| Microsoft Azure | Hosts Claro's server | Everything that passes through the server; nothing of a session is stored there | EU (West Europe, the Netherlands) |
| Turso | The database for accounts, usage and the sessions you save | What we keep, above; saved sessions only encrypted | Data stored in the EU |
| Anthropic | The language model (Claude) that reads the conversation, draws and summarizes | The text of the conversation and the diagrams so far. Not used to train their models. Deleted within 30 days; kept up to 2 years only if Anthropic's safety systems flag it as breaking their usage policy | United States |
| AssemblyAI | Speech to text, when you use the microphone or share a call's sound | The audio while it's turned into text. Processed on AssemblyAI's EU servers, which aren't used to train its models | European Union |
| Deepgram | Speech to text when AssemblyAI can't be reached | The audio while it's turned into text. We opt out of Deepgram's model improvement programme, so it isn't kept or used to train their models | United States |
| Stripe | Payments and invoices, once plans open | Your billing details; Stripe is also responsible itself for what payment law asks it to keep | EU and United States |
| Resend | Sends the one mail when your company approves Claro | That email address | United States |
| Google, Microsoft, GitHub, LinkedIn | The sign-in you choose | That you signed in to Claro, under their own privacy terms | Their own |
Where a service is run outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework where that company is certified under it, and otherwise on the European Commission's standard contractual clauses in its data processing terms. Ask us for a copy. Before we add or replace one of these services, we say so on this page and tell account holders by email, at least 30 days ahead.
Sessions you share, and the people in them
When you share a session, the people who join give a name and wait until you let them in. Their name and what they say go to your browser through our server, which keeps neither once the session ends. Their speech goes to the services above in the same way as yours, and its usage counts on your plan.
Claro also hears people who are not signed in at all: others in the room, or on a call whose sound you share. If you start listening, tell the people in the conversation that Claro is drawing it with AI, and stop when someone objects. What was said before that has already been sent to the services above and is kept by them as listed there. Where the law or your employer requires their consent, ask for it first. Claro asks you to confirm this every time you start listening, and asks everyone who joins your session to agree before they can join; each confirmation is kept in your session with the name and the time: on your device, and on our server only if you save the session to your account. A confirmation records that people were told; it is not a legal basis by itself. At work, your employer decides on what basis meetings may be processed.
AI in Claro
Diagrams, summaries and the short notes on what each participant said and which opinions they gave are made by a language model from the conversation. They can be wrong: check them before you rely on them or share them as a record of what someone said. A conversation can touch on sensitive matters, such as someone's health, beliefs or political views; Claro doesn't look for these, but whatever is said is processed like the rest. The notes are there to help the people in the session; Claro makes no decisions about people and doesn't score or rate them.
Cookies and storage
Two cookies, both needed for signing in: the session cookie, and a short-lived one (10 minutes) while a sign-in is under way. Your browser's local storage keeps your diagrams, your name, your theme and which sign-in you used last. No advertising, analytics or tracking cookies, and no third-party scripts.
Security
Traffic is encrypted (HTTPS) throughout. Sign-in sessions are kept on the server and identified by a token we store only as a hash. Sessions you save are encrypted (AES-256-GCM) before they reach the database, with a key kept in a separate key vault. Access to the server and the database is limited to Den Ouden Consultancy. If a breach puts your data at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours where the law requires, and tell you when it is likely to affect you.
Your rights
You can see what we keep under Account › Your data, download all of it there, and delete your account. You can also ask us for a copy of your data (also in a machine-readable form), to correct it, to delete it, to limit what we do with it, or object to processing based on our legitimate interest; and withdraw a consent at any time. Write to us at support@denoudenconsultancy.com; we answer within a month (for complex or many requests we may take up to two months more, and then tell you why within the first month), and may ask you to confirm it's you. For content of a session used at work, your employer may be the one to ask. If you think we handle your data wrongly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority.
Claro is meant for work. You must be 16 or older to have an account.
Changes
When we change this page in a way that matters, we tell you by email or in Claro before it takes effect. The date at the top shows the last change.
Contact
Den Ouden Consultancy, Winklerlaan 363-37, 3571 KE Utrecht, the Netherlands. KvK 96007737. Email support@denoudenconsultancy.com. We have no data protection officer; this address reaches the person responsible.