Privacy Policy

At Clumcy, Inc. ("Clumcy", "we", "our", or "us"), we are committed to safeguarding enterprise data sovereignty and customer privacy. Clumcy is engineered specifically as a non-invasive orchestration platform that normalizes operational metrics across your disconnected business software without requiring complex database setups or write access to your production systems.

This Privacy Policy explains what information we collect, how it is used, and the robust safeguards we uphold to guarantee that your business intelligence remains secure and private.

1. Information We Collect & Process

Clumcy collects and processes only the minimum data required to deliver cross-system orchestration and root-cause intelligence:

• Account & Workspace Information: Name, professional work email, company name, role, and workspace member configuration provided during onboarding or demo requests.
• Connected System Operational Metadata: Read-only operational metrics extracted via customer-authenticated API tokens from enterprise plugins (e.g., SAP, Oracle, NetSuite, Salesforce, HubSpot, Zoho, Workday) according to your chosen sync cadence (Daily, Weekly, Monthly, etc.).
• Diagnostic & Analysis Outputs: Cross-system bottleneck reports, correlation history, and root-cause summaries generated inside your private tenant workspace.
• No Direct Database Passwords: Clumcy operates with zero database setup. We do not store raw database superuser passwords, host production database clones, or access unrelated internal networks.

2. How We Use Your Information

All data collected is used solely to provide and improve enterprise orchestration services:

• Synchronizing and normalizing disparate metrics across your connected business tools.
• Executing automated root-cause detection algorithms to pinpoint multi-department blockers.
• Providing executive visualizations, timeline trends, and scheduled operational digest notifications.
• Upholding platform security, detecting abnormal access attempts, and verifying authorized workspace access.

3. Data Security & Storage Architecture

Clumcy employs comprehensive enterprise-grade technical and organizational security measures:

• Encryption: All data in transit is protected using TLS 1.3 cryptographic protocols. Data at rest is encrypted using AES-256 standard encryption.
• Tenant Data Isolation: Strict multi-tenant isolation ensures that your organization's normalized metrics and root cause logs cannot be accessed by unauthorized third parties or external tenants.
• Read-Only Scrapes: All plugin connectors query source applications via read-only privileges, eliminating risks of data pollution or accidental writes.

4. Data Retention & Workspace Purges

Historical synchronization logs and correlation analyses are retained for the duration of your active enterprise subscription. Upon workspace termination or written request, your tenant data and normalized logs are permanently purged from primary storage within 30 days.

5. Your Privacy Rights (GDPR, CCPA & Global Regulations)

In compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and applicable global privacy legislation, you have the right to:

• Access & Portability: Request an export of your account profile and workspace configurations.
• Correction & Erasure: Rectify inaccurate details or request permanent deletion of your tenant workspace.
• Revoke Connectors: Instantly disconnect any active plugin connector at any time directly from your dashboard settings.