Data Processing & Consent
Last updated: October 26, 2026
This page summarizes how ClearRise Technologies handles data when providing managed automation services, and what we ask of clients. Binding terms will be set out in each client's written agreement and, on request, a data processing addendum.
Roles
When we research prospects and prepare drafts for a client, the client decides whom to contact and why. ClearRise processes prospect information on the client's behalf and according to the client's documented instructions.
Types of data processed
- Business contact information about prospects: names, job titles, business email addresses, company names, websites, and business locations
- Draft message content and workflow status records
- Client account information needed to operate the workflow
We do not intentionally process sensitive personal information, such as health, financial account, or government ID data, in outreach workflows.
Account access and consent
- Clients grant access to their own accounts, such as Outlook and the prospect sheet, through the platforms' permission controls.
- We request only the permissions the workflow requires and do not ask clients to share passwords by email or chat.
- Clients can revoke access at any time; revoking access will stop the affected workflow.
- Workflows create unsent drafts. Sending is always a client action.
Project photos (AI Photo Manager)
The AI Photo Manager works as follows:
- Copies, not originals. We work from copies the client places in a separate, opt-in marketing folder. Original images stay with the client.
- No full-library access by default. We will not request access to a client's entire personal photo library, such as all of iCloud Photos.
- Client-approved permissions. Access is limited to the designated folder and can be revoked at any time.
- Selective indexing. Only photos in the designated folder are labeled and organized.
- Client rights. Clients are responsible for having the right to use the photos they share, including any that show people, homes, vehicles, or addresses.
- Retention and deletion. Photo copies and generated labels are deleted according to a documented process at the end of an engagement or on request. Photo copies and generated labels are deleted within 30 days after an engagement ends, or sooner on request.
- Supported platforms. Connected services and integrations are subject to confirmation. Photos are shared through a cloud folder you choose, such as Google Drive or Microsoft OneDrive; other sources are available on request.
Safeguards
- Access limited to personnel who need it to deliver the service
- Encrypted connections and reputable, access-controlled platforms
- Approval and duplicate checks before drafts are created
- Prompt notice to affected clients if we become aware of a security incident involving their data
Subprocessors
We use third-party platforms to deliver the service. A current list will be provided to clients during onboarding. Current service providers: Zapier (workflow automation), Nango (secure account connections), Microsoft (Outlook and Microsoft 365), Stripe (payments), GoDaddy (website hosting and email), and our AI model provider.
Retention and deletion
At the end of an engagement, we return or delete client workflow data on request, subject to legal retention requirements. Deletion requests are completed within 30 days.
Website form consent
When you submit our consultation form, you agree that we may use the information you provide to respond to your inquiry. This is not a marketing subscription. See the Privacy Policy.