Privacy Policy

Effective September 18, 2026

Clair is a service of Onepath AI Technologies, Inc. ("Onepath", "we"). Clair is an AI analyst for home-services contractors: she reads the business systems a company connects and answers that company's questions, mostly in Slack. This policy explains what we collect, why, and what we do with it. Questions: [email protected].

Who this covers

• Customers: companies that use Clair, and the people at those companies who sign in or talk to Clair.
• Visitors to clair.works.

Our customers' own customers (for example a homeowner named on an invoice) appear only inside the business data a customer connects. For that data, the customer is the controller and we process it on the customer's instructions.

What we collect

Account information. Your work email address, your name if you or Google provide it, your role in your company's account, and when you last signed in. If you use "Continue with Google" we receive your email address, name and whether Google has verified the email. We request nothing else from Google and we never see your Google password.

Business data from connected systems. When an account owner or admin connects a system, Clair reads data from it to answer that company's questions. Depending on what is connected, this includes jobs, invoices, payments, calls, estimates and technician schedules from ServiceTitan; bank balances, open invoices, open bills and profit and loss reports from QuickBooks Online; and leads, calls and follow-ups from Onepath. Clair's access to QuickBooks Online is read-only: she never creates, changes or deletes anything in QuickBooks.

Connection credentials. The tokens and API keys that let Clair reach a connected system. We encrypt them before storing them, and the encryption key is kept separately from the database.

Questions and answers. What people ask Clair, what she answers, which tools she used to answer, and how many AI model tokens the answer used. We keep this for billing, support and quality.

Email you send us. If you reply to an email from Clair or write to one of our addresses, we receive that message.

Technical records. IP address and browser type when you sign in, kept with your session and in our audit log, and standard server logs.

We do not use advertising cookies or third-party analytics on clair.works. The only cookie we set keeps you signed in.

How we use it

• To provide Clair: answer questions, produce charts and reports, run scheduled reports, and carry out actions a person has approved.
• To keep accounts secure: sign-in, sessions, and an audit log of changes to connections, team members and settings.
• To bill, support and improve the service.
• To send service email such as sign-in links, invitations and the reports you schedule.

We do not sell personal information or business data. We do not use customer data, including QuickBooks data and Google user data, to train, fine-tune or evaluate AI models, and we do not allow our AI provider to do so. Each customer's data is used only to serve that customer and is never shown to or combined with another customer's data.

Generative AI

Clair is built on Anthropic's Claude models, reached through Anthropic's commercial API. When a question needs business data, a tool on our servers retrieves it from the connected system and passes the relevant figures to the model, which writes the answer. The model never receives credentials and has no direct access to connected systems. Answers are generated by AI and can be wrong: check them before acting on them. Clair never takes an action in another system on her own; a person must approve each one.

Google user data

Clair's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in only to confirm your email address and name so you can sign in.

Who we share it with

We share data only with service providers that help us run Clair, under agreements that limit them to that purpose:

We may also disclose information when the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

How long we keep it

• The text of questions and answers: 13 months by default, then deleted. The record that a task happened, without its text, is kept for billing history.
• Answer pages shared by link: 30 days.
• Connection credentials: until you disconnect the system or close the account. Disconnecting deletes the stored credentials.
• Account information and the audit log: for the life of the account, and for a reasonable period afterwards for legal and security purposes.
• When a customer closes its account, we delete its business data and credentials within 30 days, except where the law requires us to keep something.

Security

Data is encrypted in transit. Credentials for connected systems are encrypted at rest with a key stored apart from the database. Sign-in links and session identifiers are stored only as hashes. Each customer's data is kept separate, and access inside an account is limited by role. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as the law requires.

Your choices and rights

You can disconnect any system at any time from the console. Account owners can remove team members. You can ask us to access, correct, export or delete your personal information by writing to [email protected]; if your request concerns business data that belongs to a customer, we will refer it to that customer. Depending on where you live, you may have additional rights under local law, and we honor them.

Clair is a business service and is not directed to children under 16.

Changes

If we change this policy in a way that matters, we will tell account owners by email before the change takes effect. The date at the top shows the latest version.

Contact

Onepath AI Technologies, Inc. · [email protected]