Privacy Policy
Version 1 · Effective 31 October 2026
Clewo is a service that takes the essence of the links you save and keeps it together with its source. This policy explains which personal data we process while you use Clewo and why, who we share it with, and your rights. It is also our notice under Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Clewo. For any question or request about your personal data: privacy@clewo.ai
2. The data we process
- Account details: your email address, your preferred language, when your account was created and when you last signed in. If you sign in with Google or Apple, the name and email address they pass to us.
- Waitlist details: your email address, your language, the date you joined and the outcome of your request.
- What you save: the links you send, your notes, the boards you make and the cards prepared for you.
- Acceptance records: which version of this policy and of the Terms of Use you accepted, and when.
- Security and operating logs: sign-in attempts, IP address, browser details and error logs, kept for a short time to protect the service and fix problems.
- Cookies: only the essential cookies that keep you signed in. We use no advertising or tracking cookies.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Opening your account, signing you in, preparing and keeping your cards | Entering into and performing our contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Running the waitlist and sending you an acceptance or rejection email | Entering into our contract (KVKK art. 5/2-c; GDPR art. 6(1)(b)) |
| Protecting the service from abuse, bots and unauthorised access | Legitimate interest (KVKK art. 5/2-f; GDPR art. 6(1)(f)) |
| Proving which version you accepted | Establishing, exercising and defending a right (KVKK art. 5/2-e; GDPR art. 6(1)(f)) |
| Meeting our legal obligations | Required by law and legal obligation (KVKK art. 5/2-a, ç; GDPR art. 6(1)(c)) |
We do not sell your data, use it for advertising, or build an advertising profile of you.
4. What happens to a link you save
When you save a link, Clewo reads that link's public page, sends its content to an AI service to take out the essence, and prepares your card. Your card keeps the essence and a link back to the source; it does not keep a copy of the platform's content. Your notes may be sent to the AI service to steer how the card is prepared.
Under their commercial terms, the AI services we use do not train their models on the data we send them.
5. Who we share it with
We work with the service providers below to run Clewo. Each processes your data only for the service it provides to us.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | Germany (Frankfurt) |
| Vercel | Hosting the clewo.ai website | United States; server functions in Germany (Frankfurt) |
| Cloudflare | Domain, secure connection, bot protection (Turnstile) | Global network |
| Resend | Sending sign-in, welcome and waitlist emails | Ireland and United States |
| Anthropic | The AI that prepares cards from what you save | United States |
| Bright Data, Supadata | Reading the public page of a link you save; only the link reaches them, never who you are | Bright Data: Israel; Supadata: Germany, processing in the United States |
| Google, Apple | Only if you sign in with them, to confirm who you are | United States |
The server that prepares your cards is in Türkiye. Beyond these, we share your data with public authorities only when the law requires it.
6. Transfers abroad
Some of the providers above are outside Türkiye and the European Economic Area. We transfer your data abroad with the safeguards in Article 9 of the KVKK and Chapter V of the GDPR, under the standard contracts the providers offer.
7. How long we keep it
- While your account is open, we keep your account details and what you save.
- When you delete a card, it stays in "Recently Deleted" for seven days, then is deleted for good.
- When you ask to delete your account, it is locked for seven days and you can come back in that time. Then your account, cards, files and conversations are deleted for good.
- A waitlist request is kept even if it is declined, so we can write to you when there is room; you can have it deleted at any time.
- Acceptance records are kept after your account is deleted, for as long as we may need to prove them.
- Security logs are kept for at most 90 days.
8. Your rights
Under Article 11 of the KVKK and the GDPR, you can ask whether we process your data and for information about it; learn why we process it and whether it is used for that purpose; know who it is transferred to; have it corrected if it is incomplete or wrong; have it deleted or destroyed; have those steps passed on to whoever received it; object to a result against you that comes solely from automated analysis; receive your data in a portable form; and claim compensation if you suffer damage from unlawful processing.
Write to privacy@clewo.ai. We answer free of charge within 30 days at the latest. If our answer does not satisfy you, you can complain to Türkiye's Personal Data Protection Board or, in the EU, to your data protection authority.
9. Age
Clewo is not for anyone under 18. If we learn we hold data of someone under 18, we delete it.
10. Changes
When we change this policy, we update its version number and effective date. For an important change, we ask you to accept the new version the next time you sign in. Earlier versions are kept.