This policy explains how CLIO ("we", "us") collects, uses, and protects personal data when you use the CLIO application at clio-app.com and its related services and APIs.
Account data: name, email address, and — when you sign in with Google or Microsoft — the basic profile information those providers share (name, email, and organization identifiers used solely to match you to your workspace). We never receive your Google or Microsoft password.
Workspace data: content you and your team create in CLIO — time entries, projects, clients, invoices, payments, documents, and reports.
Technical data: log and diagnostic information (IP address, browser type, error reports) used to keep the service secure and reliable.
To provide and operate the service; to authenticate you and enforce your organization's sign-in policy; to send transactional email (invitations, reminders, reports you schedule); to monitor errors and performance; and to comply with legal obligations. We do not sell personal data, and we do not use your workspace content for advertising.
When your organization connects Google Workspace or Microsoft Entra ID, we store your provider's directory identifiers only to verify workspace membership at sign-in. Access can be revoked at any time from your Google or Microsoft account security settings.
Data is shared only with the subprocessors that run the service (cloud hosting, email delivery, payment processing, error monitoring), each bound by data-protection agreements, and where required by law. Your workspace data is visible only to members of your workspace according to the roles your administrators assign.
Data is encrypted in transit, stored in access-controlled databases isolated per workspace, and backed up regularly. We retain workspace data while your subscription is active and delete or anonymize it after account closure, subject to legal retention duties.
You may request access to, correction of, export of, or deletion of your personal data. Workspace administrators manage member data inside the product; for anything else contact us at the address below.
We will post updates to this policy on this page and, for material changes, notify workspace administrators by email.