Clive privacy policy

Last updated 4 November 2026

Clive is made by Corundum Software Pty Ltd (ABN 32 700 922 069), PO Box 620, Burleigh Heads QLD 4220, Australia ("Corundum", "we"). This policy says what Clive collects, why, where it goes, how long we keep it, and how to reach us. Questions: privacy@corundum.com.au.

What Clive is

Clive is an assistant for small-business owners. He interviews the owner about how their business runs, keeps what he learns as the owner's record, a book for each part of the business in plain files the owner can read, and answers the owner's questions from it, from the owner's own Google account when the owner connects it, and from the web when the record doesn't hold the answer.

What we collect

• Your email address, to sign you in. We send a one-time code to it; we never ask for a password.
• What you tell Clive: your interview and your daily conversations with him.
• Your record: the facts about your business you confirm, kept as a book for each part of it.
• If you connect Google, what Clive reads there to answer you (see below).
• Basic technical records: when you signed in and from what network address, to keep the service secure and limit misuse.
• On your device, a few small items in your browser's storage (not cookies, and never sent to us as such): a mark that you've used Clive, so myclive.ai takes you straight into the app; your Face ID sign-in handles, which are not secrets; the conversation you were in, with your first name, so you can pick it up; and your light or dark setting. Clearing your browser's data for myclive.ai removes them.

If you connect Google

Clive asks for each permission when you first ask for something that needs it, on a card in the conversation that says what that permission is for and what Clive never does with it; you then choose on Google's own screen, and can leave any box unticked. Settings shows what you've connected, and you can disconnect at any time there or in your Google account. What each permission is for, in plain words: Connecting Google. Clive asks for:

• your Google account's email address, and the account ID Google sends with it, to know which Google account is yours. The email must be the address your business signs in to Clive with;
• read access to your Gmail, so he can find and read the email or attachment you ask about;
• permission to send email as you, used only when you tap Send on an email Clive has put up for you;
• read access to your Google Contacts, so he can find a person you name and show their number or email address on the card he puts up for you. He never changes your contacts;
• access only to the Google Drive files you pick or Clive makes: he reads only the sheets you pick, and saves the reports you ask for in a Clive / Reports folder in your Drive;
• read access to the events in your Google Calendar, so he can tell you what's on for the days you ask about and the free time between them. He reads only your main calendar, only when you ask, and never adds, changes or deletes an event.

Clive reads your Google data only to answer what you ask or do what you tap. He never acts on instructions found inside an email or file, and never sends anything without your tap. Your Google sign-in tokens are stored encrypted, with the key kept apart. The emails, files and calendar events Clive reads are not written to disk, and an attachment is held in memory for at most 30 minutes from when it was opened. Clive's replies built from what he read, with the ids of the emails he opened and the words he searched for, are kept with your conversation, encrypted, for 30 days after its last message, and you can read them in Past conversations until then; then they are deleted. Nothing Clive reads from Google goes on record unless you confirm it. A suggestion for your record that Clive puts up after reading your Google data waits for your answer; if you haven't locked it in 30 days after he put it up, its words are deleted. A fact you lock in becomes part of your record: that is your choice.

Google's Limited Use rules

Clive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train AI or machine-learning models, do not sell it, do not use it for advertising, and do not let people read it, except: with your agreement, to fix a problem you report; where needed for security or the law; or where the information has been aggregated and made anonymous.

One person does read some Google data: Corundum's founder, who tests Clive on his own businesses' Google accounts and reads Clive's replies built from that mail, under a written agreement recorded for each of those accounts. For anyone else, no person reads Clive's replies built from their Google data unless they allow it for one conversation: if we need to look at a conversation to fix a problem, we email you a link naming that conversation and its date, and only if you tap Allow can we read it, until its 30 days end. We record your answer, never what the conversation says.

Who we share it with

Only the services that run Clive, each for that purpose alone:

• Anthropic, whose AI models write Clive's replies. Your messages, the relevant parts of your record and anything Clive reads for an answer are sent to Anthropic in the United States to produce that answer.
• Web search. When Clive searches the web, your question, worded so it does not identify you or your business, goes to Anthropic's web search and the search providers it uses. Each search also sends the country and time zone your business is in, so results fit where you are. Answers from the web are marked with a W.
• Public register lookups. When you ask Clive to look up a business on a public register, by its ABN or its name (your own business included), only that number or name is sent, with nothing added, to the Australian Business Register's ABN Lookup service. Answers from the register are marked with a W. Clive is not endorsed by or affiliated with the Australian Government.
• Render, which hosts Clive in its Oregon (United States) region.
• Postmark, which sends sign-in codes.
• GitHub, where your record is kept: plain files that are yours, in a private GitHub repository for your business, which Corundum holds for you and transfers to you on request. The line recording which Google account you connected is kept there. Anything from your mail or sheets becomes part of your record only when you lock it in.

We do not sell your information or share it for advertising.

Overseas

Your information is stored and processed in the United States.

How long we keep it

• Interview transcripts: while you are a client, deleted within 30 days of your request or of your leaving Clive. We may read interview transcripts to improve how Clive asks questions. Tell us at privacy@corundum.com.au if you'd rather we didn't, and we won't use yours.
• Daily conversations: kept while you are a client, so you can read them again in Past conversations, and deleted within 30 days of your request or of your leaving Clive. You can delete one yourself at any time, and it goes at once, apart from our host's backups (below). Clive's replies built from your Google data are deleted from them 30 days after the conversation's last message; your own messages stay.
• Your record: yours. Your record is what Clive keeps about your business, a book for each part of it (pricing, suppliers, staff, how you do the job), filled from what you tell him and kept up to date as you tell him more. Nothing goes on record until you say yes. What Clive reads from your mail, your Drive or the web is used in that conversation, and goes on record only if you lock in a fact built from it. Your record is kept in a private repository for you while you are a client, and transferred to you or deleted at your request. Deleting your information from Clive leaves your record alone; you decide separately whether we transfer it to you or delete it.
• Google data: the emails, files and calendar events themselves are not kept, as above. Clive's replies built from them, and suggestions built from them that you haven't locked in, are deleted 30 days after the conversation's last message and 30 days after Clive put the suggestion up, respectively. When you disconnect, Clive asks Google to withdraw his access, deletes his own copy of it, and takes the line naming your Google account out of your record. If Google doesn't confirm, Clive still deletes his copy, so he can't use your account again, and tells you so; you can then remove Clive yourself at myaccount.google.com/linkedapps.
• Backups: our host keeps copies of Clive's servers for up to 7 days, so anything deleted is gone from them within 7 days.

Your choices

You can ask for a copy of your information, ask us to correct it, or ask us to delete it, by writing to privacy@corundum.com.au. We delete it within 30 days of your request. You can delete a single daily conversation yourself in Past conversations. You can disconnect Google at any time. If you're unhappy with how we handled a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If this policy changes in a way that matters, we tell you in Clive before it takes effect.