Privacy Notice
Last updated: 11 August 2026.
Who we are
Clime is owned and operated by Musarrat Khatoon, a sole proprietor trading as "Clime" (the "seller", "we", "us"). We are the data controller for the personal data described in this notice — we decide what is collected and why. You can reach us through the Credits page.
What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Account data — name, email address, sign-in identifiers (including Google OAuth profile) | Creating and securing your account, signing you in, contacting you about the service | Performance of a contract |
| Content — conversations, messages, attachments, projects, generated output | Providing the product: storing your chats so you can return to them | Performance of a contract |
| Model configuration — provider names, model names, your API keys | Routing your requests to the provider you chose | Performance of a contract |
| Usage and telemetry — tokens, estimated cost, latency, request counts, model used | Your dashboards, allowance accounting, abuse and fraud prevention, capacity planning | Performance of a contract; legitimate interests (service integrity) |
| Technical data — IP address, device and browser information, error logs | Security, rate limiting, debugging | Legitimate interests (security) |
| Support and review content — messages you send us, reviews you publish | Answering you; showing reviews you chose to publish | Legitimate interests; consent for published reviews |
| Subscription records — plan tier, status, billing period, payment processor identifiers | Unlocking your paid plan and keeping it in sync | Performance of a contract; legal obligation (records) |
We do not sell your personal data, and we do not use your conversations to train our own models.
Payments
Our order process is conducted by our payment processor Razorpay Software Private Limited. When you buy a subscription, Razorpay collects and processes your billing details — including payment card or wallet information, billing address, and tax location — as an independent controller for those purposes. We never see or store your full card details. Razorpay shares back to us only what we need to activate your plan: your customer and subscription identifiers, the plan purchased, its status and its billing period. Musarrat Khatoon remains the seller and Merchant of Record. See Razorpay's privacy notice and consumer terms.
Your API keys (BYOK)
Clime is built around Bring Your Own Key: chat generation run on provider keys you connect yourself. Those keys are encrypted at rest (AES-256-GCM) and stored server-side. They are never returned to the browser — the app only ever shows a masked "last four" hint. All provider requests are made from our servers, so keys never appear in client code, network responses or logs. You can delete a key at any time from Settings, or by deleting the model that holds it; deletion is immediate and permanent.
Because your requests go to your own provider account, that provider is an independent controller for what you send it, and its own privacy policy and retention rules apply. We do not sell, provide or resell AI model access.
Who we share data with
- Model providers you select — when you send a message, its content is sent to that provider to generate a response. Their own privacy policy governs that request.
- Razorpay Software Private Limited, our payment processor, for the sale of subscriptions, payment processing, invoicing and tax compliance.
- Infrastructure and service providers (processors) — our hosting, database, authentication and error-logging suppliers, who process data only on our instructions.
- Professional advisers (legal, accounting) and authorities, where required by law or to establish or defend legal claims.
International transfers
Our providers may process data outside your country. Where personal data is transferred out of the UK or EEA, it is protected by an adequacy decision or by Standard Contractual Clauses with the recipient.
How long we keep data
- Chats, messages and attachments — until you delete them, or until you delete your account. Deletion is immediate and permanent.
- Account and model configuration (including API keys) — for the life of your account, then deleted within 30 days of account closure.
- Usage and telemetry records — up to 24 months, then deleted or aggregated into anonymous statistics.
- Security and error logs — up to 12 months.
- Billing and tax records — retained for as long as applicable tax and accounting law requires (typically 6–7 years), largely by Razorpay as our payment processor.
Your rights
You can ask us to:
- Access the personal data we hold about you, and get a copy of it;
- Correct anything inaccurate or incomplete;
- Erase your data — you can delete individual chats and models yourself in the app, or ask us to delete your whole account;
- Port your data to another service in a machine-readable format;
- Restrict or object to processing based on our legitimate interests;
- Withdraw consent at any time where processing relies on consent — for example, by removing a review you published.
Contact us through the Credits page and we will respond within one month. If you are in the UK or EEA and you are unhappy with our response, you have the right to complain to your local data protection supervisory authority.
Security
We apply appropriate technical and organisational measures: encryption in transit (HTTPS) and at rest, row-level access rules so one account cannot read another's data, server-side storage of API keys with no client exposure, restricted administrative access, and signature verification on payment webhooks. No system is perfectly secure, so please use a strong, unique password and keep your provider keys to yourself.
Cookies
We use essential cookies and local storage only — to keep you signed in and to remember preferences such as your theme and language. We do not run advertising or cross-site tracking cookies. Razorpay sets its own cookies within the checkout to process your order and prevent fraud. You can clear cookies in your browser at any time, though doing so will sign you out.
Children
Clime is not intended for children under 16, and we do not knowingly collect their personal data.
Changes
We will update this notice as the product evolves and change the date at the top. Material changes will be highlighted in the app.
See also our Terms & Conditions and Refund Policy.
Clime is an independent product and is not affiliated with, endorsed by or connected to Anthropic PBC, Claude, Claude.ai, OpenAI, Google, Meta, NVIDIA or any of their subsidiaries or affiliates. All trademarks belong to their respective owners.