Privacy, in plain language.

Clientia is a private client operations workspace operated by AG Web Studios ApS (“Clientia”, “we”, “us”). This policy explains what we collect, why, and the choices you have. It applies to our marketing site, the Clientia application, and any feature you reach from either.

We try to write this document the way we’d want to read it ourselves: short, specific, and free of legal theatre. Where a term has a precise meaning under the GDPR, CCPA or another applicable law, we use it on purpose.

The data we hold falls into three buckets. We try not to collect more than we need.

Account data

Name, work email, workspace, role, authentication identifiers and the settings you choose. Provided directly by you or your administrator.

Workspace content

The records, documents and notes you store in Clientia — your clients, contacts, contracts, payments and the surrounding history. You own this content. We process it on your behalf to provide the service.

Operational telemetry

Logs, request metadata, device and browser information, and minimal analytics needed to keep the service reliable and secure. We do not sell this data and we don’t use third-party advertising trackers.

We use the data above to operate, secure and improve Clientia. In GDPR terms, our legal bases are:

Contract

To deliver the service you or your employer signed up for — authentication, workspace functionality, billing and support.

Legitimate interests

To keep the platform secure, prevent abuse, debug issues, and understand which features are useful enough to keep building.

Legal obligation

To meet tax, accounting and statutory record-keeping requirements in the jurisdictions where we operate.

Consent

For optional things — product update emails, beta features you opt into, non-essential cookies. Withdrawable at any time.

We share data with a short list of vetted sub-processors that help us run the service — cloud hosting, email delivery, billing and customer support tooling. Each one is contractually bound to handle data only on our instructions and under terms at least as strict as ours.

The current sub-processor list is published on our security page and updated whenever it changes. We never sell personal data, and we do not share workspace content with anyone outside this list without your explicit instruction or a binding legal request.

You can choose where your workspace data lives at provisioning time — EU (Frankfurt) or US (Virginia). Your data is stored in your chosen region. A small set of metadata may transit through other regions to deliver email, support and incident response.

When data moves between jurisdictions, we rely on the EU Standard Contractual Clauses, the UK IDTA, and equivalent transfer mechanisms where applicable.

We keep workspace content for as long as your account is active. After cancellation, content enters a documented soft-delete window (default 30 days) before being purged from primary and replica storage. Encrypted backups roll off within 90 days.

Some records — invoices, security logs and legal correspondence — are retained for longer where the law requires it.

Wherever you are, you can ask us to confirm what we hold, correct something we got wrong, export it, or delete it. Under the GDPR and CCPA you also have the right to object to certain processing and to lodge a complaint with your supervisory authority.

Most of these requests are one click from the workspace admin screen. Anything that needs a human is handled within 30 days — email privacy@clientia.app and we’ll route it.

Encryption everywhere (AES-256 at rest, TLS 1.3 in transit), envelope encryption with HSM-backed keys, per-tenant isolation, least-privilege access and audit logs your general counsel will actually trust. The full details live on the security page.

We use a small number of strictly necessary cookies for sign-in and security, and a privacy-preserving analytics cookie that doesn’t track you across sites. Anything beyond that asks for consent first and is documented in our cookies notice.

Clientia is built for professionals running businesses, not children. We don’t knowingly collect data from anyone under 16. If you believe we have, write to us and we’ll delete it.

When this policy changes in a way that affects you, we’ll tell you in-app and by email at least 30 days before it takes effect. The effective date at the top of the page always reflects the latest version.

Clientia is operated by AG Web Studios ApS, a Danish company.

For privacy questions, write to privacy@clientia.app. For anything else, the contact form reaches a human.