Legal
Privacy Policy
Effective: June 2026
1. What we collect
When you create an account, we collect your name, email address, and the information you enter about your business (revenue, goals, industry). When your clients use the platform, we collect the same categories of business data on their behalf, under your instruction.
We collect usage data (pages visited, features used, session length) to improve the product. We do not sell this data.
2. How we use it
We use your data to operate the platform — generating health scores, briefs, content drafts, and AI-assisted analysis. We use aggregate, anonymized usage patterns to improve Cirik. We use your email to send product communications you can unsubscribe from at any time.
We do not use your clients' business data to train AI models.
3. Who sees it
Consultants see their own workspace and the clients they've added. Clients (business owners) see only their own data. We use Supabase for data storage (row-level security enforced), Anthropic for AI generation (data sent per request, not retained for training), and Stripe for billing.
4. Data retention
Your data is retained while your account is active and for 30 days after cancellation, during which you can export it. After 30 days, it is deleted. Contact us at privacy@cirik.co to request earlier deletion.
5. Your rights
You have the right to access, correct, or delete your data. You can export your data from Settings at any time. For any other request, email privacy@cirik.co.
6. Contact
Questions? Email privacy@cirik.co. We aim to respond within two business days.