Back to app

Privacy Policy

Last updated: 3 March 2026

Clonx ("we", "us", "our") is committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This Privacy Policy describes how we collect, hold, use, and disclose your personal information.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

• Name and email address (when you create an account)
• Authentication credentials (password hash, OAuth tokens)
• Profile information provided through Google sign-in
• Payment information processed through Stripe (credit card details are handled by Stripe and not stored by us)

1.2 Usage Data

We automatically collect certain information when you use our Service:

• LinkedIn post content, engagement metrics (reactions, comments, shares, impressions), and publishing dates that you import via our Chrome extension
• Voice profile configurations you create
• AI-generated content produced through the Service
• Log data including IP address, browser type, and access times

1.3 Sensitive Information

We do not intentionally collect sensitive information as defined under the Privacy Act 1988. If sensitive information is inadvertently collected through content you provide, we will treat it in accordance with this policy and applicable law.

2. How We Collect Information

We collect personal information:

• Directly from you when you register, create a profile, or use the Service
• Through Google OAuth when you choose to sign in with Google
• Through our Chrome extension when you choose to import LinkedIn data
• Automatically through cookies and similar technologies
• From third-party services (such as LinkedIn) when you import data

3. Purpose of Collection

We collect and use your personal information for the following purposes (APP 6):

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To generate AI-powered content based on your voice profiles
• To analyse LinkedIn post performance and provide analytics
• To communicate with you about the Service, including updates and support
• To improve and develop the Service
• To process subscription payments
• To comply with legal obligations

4. Disclosure of Information

We may disclose your personal information to the following third parties (APP 6):

• Supabase (database and authentication provider) - stores your account data and content
• Anthropic (AI provider) - processes content for AI generation features. Content sent to Anthropic is not used to train their models.
• OpenAI (AI provider) - generates vector embeddings for content search. Content sent to OpenAI is not used to train their models.
• Stripe (payment processor) - processes subscription payments and stores payment methods securely
• Netlify (hosting provider) - hosts the application
• Google (authentication provider) - if you use Google sign-in

We do not sell your personal information to third parties.

5. Cross-Border Disclosure

In accordance with APP 8, we inform you that your personal information may be transferred to and processed in countries outside Australia, including the United States, where our third-party service providers operate. Before disclosing personal information overseas, we take reasonable steps to ensure the overseas recipient handles the information in accordance with the APPs.

For EU users: We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where applicable to ensure your data receives adequate protection when transferred outside the EEA.

6. Data Security

In accordance with APP 11, we take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Security measures include:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security policies ensuring users can only access their own data
• Secure authentication via Supabase Auth with password hashing
• Regular security reviews of our infrastructure

6A. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities within 72 hours of becoming aware of the breach, in accordance with GDPR requirements.

7. Access and Correction

In accordance with APPs 12 and 13, you have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate, out-of-date, incomplete, irrelevant, or misleading information
• Delete your account and associated data

You can access and update most of your information directly through the Service. For other requests, contact us at the details below.

7A. Additional Rights for EU Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide the Service you've signed up for
• Legitimate Interest: To improve and secure our Service
• Consent: For optional features like marketing communications (if applicable)

Your GDPR Rights

In addition to the rights described in Section 7, you have the right to:

• Data Portability: Request a copy of your data in a portable format
• Restrict Processing: Request that we limit how we use your data
• Object to Processing: Object to our use of your data for certain purposes
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

Data Protection Officer

For GDPR-related inquiries, contact us at: helloclonx@gmail.com

EU Representative

As we do not have an establishment in the EU, we are not required to appoint an EU representative at this time.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or de-identify your personal information within 30 days, unless retention is required by law.

9. Cookies

We use essential cookies and local storage to maintain your authentication session. We do not use tracking or advertising cookies.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Complaints

If you believe we have breached the APPs, you may lodge a complaint with us using the contact details below. We will investigate and respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

13. Contact Us

If you have questions about this Privacy Policy or wish to make an access, correction, or complaint request, please contact us at:

Email: helloclonx@gmail.com