Privacy Policy

Last updated: February 2026

The short version

OpenClay does not collect, store, or process any personal data. We have no database, no user accounts, no cookies, and no localStorage. Your API keys and spreadsheet data never leave your browser except to make direct API calls to your chosen AI provider (Anthropic or Google).

Data we collect

We collect minimal, anonymized usage data. Specifically:

  • We do not collect personal information
  • We do not use cookies or localStorage
  • We do not log API requests, API keys, or user data on our servers
  • We do not store uploaded files — they are parsed entirely in your browser
  • We use Vercel Web Analytics to collect anonymous, aggregated page view data (no cookies, no personal data)

Your API key

Your API key is stored exclusively in browser memory (React useState()). It is never written to localStorage, cookies, or any persistent storage. When you close the tab, it is gone. The key is sent directly from your browser to your chosen AI provider's API — our server acts only as a CORS proxy and does not read, log, or store the key.

Your spreadsheet data

Files are parsed entirely client-side using JavaScript libraries (PapaParse for CSV, SheetJS for Excel). Your data is never uploaded to any server. Enrichment results are generated by the AI provider you connect and returned directly to your browser.

Third-party services

When you use OpenClay, your data is sent to the AI provider you choose:

This application is hosted on Vercel. Vercel may collect standard server logs (IP address, request timestamp). See Vercel's Privacy Policy for details.

Open source

OpenClay is fully open source. You can audit the entire codebase to verify these claims. We believe transparency is the strongest privacy guarantee.

Contact

Questions about this policy? Reach out via LinkedIn.