How your data is looked after
Who is responsible
Your organisation decides what Clavarius is used for and who is added to it, so your organisation is the controller of that personal data. Clavarius processes it on your behalf. Our Privacy Notice and Terms, published at clavarius.io, set this out in full.
What Clavarius holds
- Staff: name, and optionally email and phone; when and where they signed in and out.
- Visitors: name, company, group size, an optional phone number, and visit times.
- Deliveries: who a delivery was for, a description, who received it and where it was left.
- Admins and access accounts: email address and a securely stored password.
- Email log: who was emailed and the subject.
Controls you have
| You can | Where |
|---|---|
| Download everything | Admin → Data & privacy |
| Decide how long records are kept | Data retention |
| Erase one person's personal data | Admin → People → Erase (GDPR) |
| Close your account and have everything deleted | Close your account |
How we protect it
- Each organisation's data is kept separate from every other organisation's.
- All connections are encrypted (HTTPS).
- Passwords are stored in a form that can't be turned back into the password.
- Backups are encrypted.
- Clavarius uses only the cookies needed to keep you signed in — no advertising or tracking cookies.
- Card payments are handled by our payment provider; Clavarius never sees card numbers.
Found a security problem? Please tell us at support@clavarius.io.