Privacy Policy

Last updated: 16.09.2026

1. Controller

THE Clarity Mateusz Rzetecki, ul. Rolnicza 59A/58, 93-328 Lodz, Poland, NIP 6681926166. Contact: support@getscorra.com.

2. What we process

Data you give us

• account: email address, your name if you provide one, and the workspace you belong to,
• configuration: the domains and brands you track, the prompts you enter, the market you select,
• content you send to the agent, and the materials it produces for you.

Data we produce

• answers collected from AI assistants for your prompts, and the metrics computed from them,
• citations and the domains behind them,
• credit usage and the record of what consumed it.

Technical data

• IP address, browser and device type, server logs,
• session cookies needed to keep you signed in.

Payment data is entered in Paddle's checkout and does not reach our servers. From Paddle we receive the subscription status, the plan, and the identifiers needed to match a payment to a workspace.

3. Why, and on what legal basis

• To provide the Service - performance of a contract (Art. 6(1)(b) GDPR): running measurements, showing results, operating the agent, billing.
• To keep the Service working and safe - legitimate interest (Art. 6(1)(f)): logs, abuse prevention, debugging.
• To send service email - performance of a contract: sign-in links, alerts you switched on, billing notices.
• To send the free scan result - performance of what you asked for: you give an address, we send the result to it.
• To send one message with an offer after a free scan - consent (Art. 6(1)(a) GDPR), given by a separate optional checkbox on the scan form. It is a single message, not a list; we do not write again, and you can withdraw the consent at any time by writing to us.
• To meet legal duties - Art. 6(1)(c): accounting and tax records.

We do not sell personal data, and we do not use your prompts or measurements to train our own models.

4. Who processes data on our behalf

The Service runs on suppliers who process data as our processors:

• Vercel - hosting and delivery of the application,
• Neon - the database,
• DataForSEO - sending queries to AI assistants and returning their answers,
• Anthropic - analysing answers (brand detection, sentiment) and running the agent,
• Resend - sending email,
• Pipedream - only if you connect a tool for the agent to send work to; the connection belongs to your workspace and you can disconnect it at any time.

Paddle acts as a separate controller for payment data, as Merchant of Record: https://www.paddle.com/legal/privacy

Some suppliers process data outside the European Economic Area. Where that happens, transfers rely on Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

• Account and workspace data - for as long as the account exists, and afterwards for as long as accounting and limitation periods require.
• Measurements and answers - for the lifetime of the project. Your plan changes how far back the screens look; it does not delete anything, because a day that was not measured cannot be recreated.
• Logs - up to 12 months.
• Billing records - for the period required by tax law.

When you delete a project or close a workspace, we delete its data within 30 days, except where the law requires us to keep records.

6. Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and to receive it in a portable form. You can export your measurements as CSV from the Service at any time without asking us.

To exercise a right, write to support@getscorra.com. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland, or with your local supervisory authority.

7. Cookies

We use cookies that are necessary for the Service to work: keeping you signed in and remembering which workspace you are in. We do not use advertising cookies.

8. Data you enter about other people

Prompts and brand configuration may contain names of companies and, rarely, of people. You decide what to enter, and you are responsible for having a legal basis for entering personal data of third parties. We process it on your behalf under these terms.

9. Changes

We may update this Policy. Material changes are announced by email to account holders before they take effect.