Your company, on your terms.
Clark works inside your real tools. This page states what that means for your data and what stays in your hands.
- Its own server
- Asks before it sends
- Logged access
- Work
- Notes
- Memory
- Work
- Notes
- Memory
- Work
- Notes
- Memory
One server per company.
Your Clark runs on its own isolated server at Hetzner. The work it does for you, its notes and its memory are processed and stored on that server. Nothing is shared between companies.
When one Clark works out a reusable way of doing something, the pattern travels to the others as an anonymised playbook. No client data, files or conversations move between companies.
- Client data
- Files
- Conversations
AI models, and what they see.
To answer a message or do a task, your Clark sends the content it needs to the AI model provider set up for your Clark. Most Clarks use models reached through OpenRouter. If you connect your own ChatGPT or Claude subscription, Clark uses OpenAI or Anthropic under that subscription.
Each provider processes that content to produce the answer, under its own terms. We do not use your data to train models, and we do not sell it.
Not used to train models. Never sold.
Where your data lives.
Our dashboard database and most of our processors are in the United States, and AI model providers may process content in other countries. Where personal data of people in the EU or EEA leaves the EEA, we use standard contractual clauses or another lawful safeguard.
Snapshots and backups of your Clark's server are kept at Hetzner. Every processor we use, what it does and where it runs is listed in the privacy policy.
- Your Clark's server, snapshots and backupsHetzner
- Dashboard database and most processorsUnited States
- AI model providersMay process content in other countries
- EU or EEA personal data leaving the EEAStandard contractual clauses or another lawful safeguard
Who on our side can reach it.
Only our team can reach the servers, over a private network and secure tunnels. Logins and admin access to the dashboard are logged.
This website and the dashboard only work over HTTPS, and access tokens for the apps you connect are encrypted at rest. If something needs a password during onboarding, you type it and we never see it.
- 08:02LoginLogged
- 10:47Admin accessLogged
- 14:15LoginLogged
- HTTPS only
- Tokens encrypted at rest
- Onboarding passwords: you type them
You decide what it may send.
By default, Clark asks you before it sends a message from your account, and you approve from your phone or the dashboard. It also asks approval before other high-stakes actions.
You can let Clark send on its own from the dashboard. Turning approval off takes a deliberate confirmation that shows what it allows; turning it back on is one click. Messages can also be checked against a written mandate you give Clark.
Clark wants to send this message
To: A client
Hi Sanne, the quote is attached. Shall we start on Monday?
- Turning it off asks for a deliberate confirmation
- Turning it back on is one click
- Can be checked against your written mandate
Everything is logged and reviewable.
Every step Clark takes is written down. Mission Control shows one screen with what it is doing, what it has done and what is waiting for you.
Actions are reversible where the connected tool allows it. Anything that cannot be undone waits for your approval.
- Reversible where the tool allows
- Cannot be undone: it waits for you
The off switch is yours.
Cancel monthly, by email or through the channels we set up with you. Cancellation takes effect at the end of the billing period.
You can download a copy of your account data from the settings in your dashboard at any time.
- Monthly
- By email
- Through your channels
What happens when you leave.
When your subscription ends, your Clark's server is deleted at the end of the paid period. We take a snapshot first, and it is deleted automatically after 30 days. Access to your connected apps is revoked.
We may keep an offline archive so your Clark can be restored if you come back, and delete it when you ask. When you ask us to delete your account, we delete your server, its snapshots and your account data, and keep invoices and cancellation records where tax law requires them.
- 01You cancel
- Takes effect at the end of the billing period
- 02End of the paid period
- Snapshot taken first
- Server deleted
- App access revoked
- 0330 days later
- Snapshot deleted automatically
GDPR and your rights
For the business content your Clark handles, you decide what happens to it and we process it on your behalf. A data processing agreement with standard contractual clauses is available on request.
- Access
- Correction
- Deletion
- Portability
- Restriction
- Objection
- Reply within 30 days
- DPA on request
You can ask for access, correction, deletion, portability, restriction or to object. Mail us and we respond within 30 days. In the EU or EEA you can also complain to your local data protection authority.
Report a security issue
If you think you have found a vulnerability in Clark, this website or the dashboard, mail us what you found and how to reproduce it.
Give us reasonable time to fix it before you make it public. While testing, do not access, change or delete data that is not yours, and do not disrupt the service for others.
The full detail
The list of processors, international transfers, retention periods and the data processing agreement are all in the privacy policy.
Read the privacy policyRead the terms
The commitments on this page are the ones in our terms of service and our privacy policy.
The rest of the answers happen on the call.
Book a call