Privacy Policy

Overview

deClusterize ("we", "us", "our") operates the deClusterize platform, which helps individuals organize their files, photos, email, devices, and cloud storage. This Privacy Policy describes how we handle personal information in connection with our website and services.

What We Collect

We collect information in three ways: information you give us directly, information collected automatically, and information from third-party integrations you authorize.

Information you provide:

• Account details — name, email address, and password hash
• Profile preferences — your organizing goals, focus areas (files, email, photos, etc.), and session cadence
• Communications — support messages, survey responses, and feedback you send us
• Payment information — processed by our payment provider (Stripe); we store only the last-four digits of your card and billing address

Information collected automatically:

• Usage data — pages visited, features used, session duration, task completion events
• Device data — browser type, OS, screen resolution, time zone, and language preference
• Log data — IP address, access timestamps, HTTP referrer, and error logs
• Cookies and similar tracking technologies (see the Cookies section below)

Information from integrations you authorize:

• Cloud storage metadata (file names, sizes, dates — not file contents unless you explicitly request a scan)
• Email header data (sender, subject, date — not message body) for inbox analysis features

How We Use It

We use personal information only for the following purposes:

• Service delivery — to create and maintain your account, personalize your organizing plan, and track progress
• Communications — to send transactional emails (password resets, receipts), weekly progress digests (opt-out any time), and service announcements
• Product improvement — aggregated, anonymized usage analytics to understand which features work best and fix bugs
• Security — to detect and prevent fraud, abuse, and unauthorized access
• Legal compliance — to meet our obligations under applicable law

Data Sharing

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

• Service providers — trusted vendors who process data on our behalf under strict data-processing agreements (e.g., Stripe for payments, AWS for hosting, Postmark for email delivery)
• Legal requirements — if required by law, court order, or governmental authority; we will notify you unless legally prohibited from doing so
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may transfer; we will notify you and you may delete your account before the transfer completes
• With your consent — for any purpose you explicitly authorize

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data — retained until you delete your account, then purged within 30 days
• Usage logs — retained for 12 months in aggregate, then anonymized
• Support communications — retained for 24 months to allow follow-up
• Payment records — retained for 7 years for tax and legal compliance

Security

We implement industry-standard safeguards to protect your information:

• TLS 1.3 encryption in transit on all connections
• AES-256 encryption at rest for sensitive fields
• Bcrypt password hashing with a per-user salt
• Role-based access controls and least-privilege employee access
• Regular third-party penetration testing and vulnerability scans

No method of transmission over the internet is 100% secure. If we become aware of a breach that affects your personal data, we will notify you within 72 hours as required by applicable law.

Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies — required for authentication, session management, and security (cannot be disabled)
• Preference cookies — remember your settings and UI preferences (optional)
• Analytics cookies — anonymized usage tracking via a privacy-respecting analytics tool (optional; opt-out via cookie banner)

We do not use third-party advertising cookies. You can manage your cookie preferences through the cookie banner shown on first visit, or through your browser settings.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request that we limit how we process your data
• Withdrawal of consent — withdraw consent for processing at any time

To exercise any of these rights, email us at info@declusterize.com. We will respond within 30 days. Where required, we may need to verify your identity before processing your request.

Children

deClusterize is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and by posting a prominent notice on our website at least 14 days before the change takes effect. Your continued use of deClusterize after the effective date constitutes acceptance of the updated policy.

The date at the top of this page always reflects the most recent revision.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out:

• Email: info@declusterize.com
• Mail: deClusterize, 123 Clarity Lane, Suite 400, San Francisco, CA 94105

For general support inquiries, visit our Help Center.