How Clue collects, uses, shares, and protects your information when you use our services, website, and mobile apps.
Clue Insights, Inc. ("Clue," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, website, and mobile applications (collectively, the "Services").
Our Services are available to customers globally. This Privacy Policy applies to all users, with additional rights for users in certain jurisdictions as described below.
We collect information you provide directly to us, including:
Account Information: Name, email address, phone number, company name, job title, username, and password
Profile Information: Employee ID, department, role, and skills/certifications
Content: Photos, videos, documents, and files you upload to the Services
Communications: Messages, feedback, and correspondence with us
Payment Information: Billing details and payment card information (processed by our payment provider)
When you use our Services, we automatically collect:
Location Data: GPS coordinates, timestamps, and geofence activity (for equipment tracking features)
Device Information: Device type, operating system, unique device identifiers, IP address, and browser type
Usage Data: Features used, actions taken, time spent, and interaction patterns
Log Data: Access times, pages viewed, and referring URLs
We may receive information from:
Your Employer: Employee data synced from your organization's HR or ERP systems
Telematics Providers: Driver assignments and vehicle data from fleet management systems
Integration Partners: Data from systems your organization connects to Clue
We use the information we collect to:
Provide, maintain, and improve our Services
Process transactions and send related information
Send technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent or unauthorized activity
Personalize and improve your experience
Send promotional communications (with your consent where required)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:
We process data necessary to provide you with our Services, including:
Account creation and authentication
Equipment tracking and management features
Work order management
Time tracking
We process data for our legitimate business interests, including:
Improving and developing our Services
Security and fraud prevention
Customer support
Analytics to understand Service usage
Where required, we obtain your consent for:
Marketing communications
Optional features that process sensitive data
We process data to comply with legal requirements, including:
Tax and accounting obligations
Legal proceedings and government requests
You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
We may share your information with:
If you use our Services through an employer or organization, that organization may access your data in accordance with their agreement with us.
We share data with third-party service providers who perform services on our behalf:
Category | Providers | Purpose |
|---|---|---|
Cloud Infrastructure | Amazon Web Services (AWS) | Hosting, storage, computing |
Authentication | Amazon Cognito | User authentication |
Communications | Amazon SES, Amazon SNS | Email and push notifications |
Mapping | Google Maps Platform | Maps and location services |
AI Processing | OpenAI | Document analysis (not retained) |
AI Processing | Anthropic (Claude) | AI chatbot and report generation |
App Distribution | Apple, Google | Mobile app delivery |
When your organization enables integrations, we share data with:
Fleet Telematics: Samsara, Lytx, Motive, Geotab (driver assignments)
ERP Systems: HCSS, Spectrum, Vista Viewpoint (employee and timecard data)
Maintenance Systems: HCSS, Spetrum, Vista, eMaint (work order assignments)
We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Clue, our users, or others.
In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
Clue is headquartered in the United States, and your personal data will be processed on servers located in the United States.
When we transfer your personal data outside the EEA/UK, we ensure adequate protection through:
Standard Contractual Clauses (SCCs): We use EU-approved standard contractual clauses for transfers to countries without an adequacy decision
Supplementary Measures: Including encryption of data in transit and at rest, access controls, and our SOC 2 Type II certified security program
For more information about our data transfer safeguards, contact privacy@getclue.com.
We retain your personal data for different periods depending on the type of data and purpose:
Data Category | Retention Period | Reason |
|---|---|---|
Account Data | Duration of account + 36 months | Contract performance, legal claims |
Usage/Activity Data | 36 months | Service improvement, support |
Location/GPS Data | 36 months | Service features, audit requirements |
Work Orders/Timecards | Duration of account + 7 years | Legal/tax compliance |
Support Communications | 3 years | Quality assurance, dispute resolution |
Marketing Data | Until consent withdrawn | Consent-based processing |
Upon termination of your organization's account:
You may request data export within 30 days
We delete your data within 36 months, unless required by law
Certain anonymized/aggregated data may be retained for analytics
To request early deletion, contact privacy@getclue.com.
We implement appropriate technical and organizational measures to protect your personal data, including:
Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
Access controls and multi-factor authentication
Regular security assessments and penetration testing
SOC 2 Type II certification
Employee security training
Incident response procedures
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.
You may update, correct, or delete your account information at any time by logging into your account or contacting us.
You may opt out of receiving promotional emails by following the unsubscribe instructions in those emails. You may still receive service-related communications.
You may disable location services through your device settings, though this may limit certain features.
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:
You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests. We will stop processing unless we have compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or significant effects. Clue does not currently make such automated decisions.
To exercise any of these rights, please contact us at:
Email: privacy@getclue.com
Response Time: Within 30 days (extendable by 60 days for complex requests)
Verification: We may need to verify your identity before processing your request
If you believe we have not handled your request appropriately, you have the right to lodge a complaint with your local data protection supervisory authority.
For EEA residents, find your authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
For UK residents: Information Commissioner's Office (ICO) at https://ico.org.uk
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):
Right to Know: Request information about the categories and specific pieces of personal information we collect
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the sale of personal information (Clue does not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, email us at privacy@getclue.com with "California Privacy Request" in the subject line.
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected personal information from a child under 16, we will delete that information.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically.
For privacy-related inquiries, data subject requests, or complaints:
Privacy Contact:
Email: privacy@getclue.com
Phone: 866-349-CLUE (866-349-2583)
Mailing Address:
Clue Insights, Inc.
Attn: Privacy
1110 N. Virgil Ave #90656, Los Angeles, CA 90029
Response Time: We aim to respond to all privacy requests within 30 days.
For general support inquiries, contact support@getclue.com.