Clay&

Privacy Policy

Clay Privacy Notice

Version: 1.0

Effective Date: TBC

1) Controller and contact

  • Controller: Clay (TBC legal entity and address)
  • Contact: TBC
  • Legal notices: TBC

2) Scope

This Notice explains how Clay collects and uses personal data when you use the Platform.

3) Personal data we collect

  • Account data (name, email, phone)
  • Identity data (ID/passport/Emirates ID details where provided)
  • Business verification data (trade license details, UBO info where provided)
  • KYB/KYC and screening outputs (verification status, risk flags)
  • Uploaded documents (may contain personal data)
  • Usage/audit data (logins, approvals, access events, downloads)
  • Communications (messages/Q&A)
  • Device and analytics data (cookies, IP, identifiers) (see Cookie Notice)

4) Purposes

  • Provide Platform functionality and support onboarding
  • KYB/KYC, AML/CTF, sanctions screening and compliance controls
  • Controlled disclosure workflows and VDR access management
  • Generating Outputs (teaser/CIM drafts, valuations, summaries)
  • Security, fraud prevention, auditability, dispute readiness
  • Customer support and product improvement
  • Legal compliance and enforcement

5) Legal basis (high level)

Contract performance, legitimate interests (security/audit), compliance with law, and consent where required.

6) Sharing

  • With Subprocessors under contract (Schedule 4 / in-product register)
  • With other users only via Platform workflows (e.g., seller consent)
  • With authorities where legally required

7) International transfers

Clay may process/store data in multiple locations via vendors. Appropriate safeguards will be applied (contractual and technical).

8) Retention (summary)

Clay retains data only as long as necessary for the purposes above and legal/audit obligations. See Schedule A for a summary retention model.

9) Security

Reasonable technical and organisational measures, access controls, audit logging, least-privilege access, and vendor controls.

10) Your rights

Access, correction, deletion (subject to legal retention), objection, and complaint rights as applicable.

11) Updates

Material changes may require re-acknowledgement in-product.

Schedule A — Retention Summary (TBC)

  • Account profile data: TBC
  • Identity/KYB/KYC documents: TBC
  • Deal/VDR access logs: TBC
  • Messaging/Q&A: TBC
  • Financial documents: TBC
  • Backups: TBC
  • Legal holds: as required