ClearDCAA← Back to home

Privacy Policy

Last updated: July 20, 2026

1. Scope

This Privacy Policy describes how ClearDCAA ("we", "us") collects, uses, and shares personal information in connection with our DCAA compliance platform (the "Service"), our website, and related communications.

2. Information We Collect

  • Account information: name, work email, organization, role, and authentication credentials.
  • Customer Data: contracts, timesheets, indirect rate data, financial and personnel records that you upload or generate.
  • Usage data: log data, device and browser type, IP address, pages viewed, and actions taken within the Service.
  • Communications: support requests, feedback, and messages you send us.

3. How We Use Information

  • Provide, secure, maintain, and improve the Service.
  • Authenticate users and enforce access controls.
  • Respond to support requests and communicate about the Service.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our terms.

4. Legal Bases (EEA/UK)

Where GDPR applies, we process personal information under one or more of: performance of a contract, legitimate interests, consent, or compliance with legal obligations.

5. Sharing

We share personal information only with:

  • Subprocessors that provide infrastructure, analytics, and support under written agreements consistent with our DPA.
  • Your organization — administrators of your organization can see activity and content within your workspace.
  • Legal and safety — when required by law or to protect rights, property, or safety.
  • Business transfers — as part of a merger, acquisition, or asset sale, subject to this policy.

We do not sell personal information.

6. Security

We employ administrative, technical, and organizational safeguards including encryption in transit and at rest, role-based access control, tenant isolation, and audit logging. See our Trust page for details. No system is perfectly secure.

7. Retention

We retain Customer Data for the duration of your subscription and for a limited period afterward to permit export and to meet legal obligations. Contact us to request earlier deletion where permitted.

8. Your Rights

Subject to applicable law you may request access, correction, deletion, portability, or restriction of your personal information, and object to certain processing. Email privacy@cleardcaa.com to exercise rights. For Customer Data held on behalf of your employer, please direct requests to your organization's administrator.

9. International Transfers

Personal information may be processed in the United States. Where required we use appropriate safeguards such as Standard Contractual Clauses.

10. Children

The Service is intended for business use and is not directed to children under 16.

11. Changes

We will notify you of material changes to this policy via email or in-product notice.

12. Contact

Privacy questions: privacy@cleardcaa.com.