Privacy Policy

Overview

This document explains how Closora handles your information when you use our products and website. We design for least-privilege access, tenant isolation, and auditability by default.

Information we process

We process account information, finance documents and ERP data you connect, and product usage telemetry. Customer financial data is isolated per tenant and, where elected, encrypted with your own keys (BYOK).

We do not use customer financial data to train shared models except with explicit opt-in.

How we use information

To provide the service, run agents and verifiers, generate audit trails, and support you. Aggregate, de-identified telemetry helps us improve reliability.

Sharing

We share data only with subprocessors necessary to deliver the service, under contract, and never sell personal information.

Security

SOC 2 Type II controls, encryption in transit and at rest, per-tenant isolation, immutable audit logging, and annual penetration testing with a public bug-bounty program.

Your rights

You may access, correct, export, or delete your information subject to legal retention obligations. Contact us to exercise these rights.

Data retention

We retain data for the life of your contract and a limited period thereafter for legal and audit purposes, then delete or de-identify it.

International transfers

Where data crosses borders, we rely on appropriate safeguards such as Standard Contractual Clauses and regional data residency options.

Changes

We may update this document and will post the revised version with a new effective date.

Contact

For questions, email legal@tryclosora.com or write to Closora Ltd., San Francisco, CA.

Last updated 2026. This document is a template for demonstration and is not legal advice.