Privacy Policy
Last updated: May 2026
The short version
OpenClay does not collect, store, or process any personal data on our servers. We have no database, no user accounts, and no cookies. Your API keys and spreadsheet data never leave your browser except to make direct API calls to your chosen AI provider (OpenAI, Anthropic, Google, or xAI).
Data we collect
We collect minimal, anonymized usage data. Specifically:
- We do not collect personal information
- We do not use cookies
- We do not log API requests, API keys, or user data on our servers
- We do not store uploaded files on any server — they are parsed entirely in your browser
- We use Vercel Web Analytics to collect anonymous, aggregated page view data (no cookies, no personal data)
Session recovery (local only)
So you don't lose hours of work if you accidentally reload or close the tab, OpenClay saves your in-progress session — your uploaded data, settings, and enrichment results — to your browser'slocalStorage. This data stays entirely on your own device, is never sent to us or anyone else, and you can clear it any time with the “Start fresh” button. Your API key is the one thing that is never saved — you re-enter it each session.
Your API key
Your API key is stored exclusively in browser memory (React useState()). It is never written to localStorage, cookies, or any persistent storage. When you close the tab, it is gone. The key is sent directly from your browser to your chosen AI provider's API — our server acts only as a CORS proxy and does not read, log, or store the key.
Your spreadsheet data
Files are parsed entirely client-side using JavaScript libraries (PapaParse for CSV, SheetJS for Excel). Your data is never uploaded to any server. Enrichment results are generated by the AI provider you connect and returned directly to your browser.
Third-party services
When you use OpenClay, your data is sent to the AI provider you choose:
- OpenAI (GPT) — subject to OpenAI's Privacy Policy
- Anthropic (Claude) — subject to Anthropic's Privacy Policy
- Google (Gemini / Vertex AI) — subject to Google's Privacy Policy
- xAI (Grok) — subject to xAI's Privacy Policy
- Vercel Web Analytics — collects anonymous page view data without cookies. See Vercel Analytics Privacy
This application is hosted on Vercel. Vercel may collect standard server logs (IP address, request timestamp). See Vercel's Privacy Policy for details.
Open source
OpenClay is fully open source. You can audit the entire codebase to verify these claims. We believe transparency is the strongest privacy guarantee.
Contact
Questions about this policy? Reach out via LinkedIn.