Privacy

Privacy

This page covers clearwood.ai. It says what the site collects, why, who handles it, and how to ask us about it. Data from an AI risk check or a monitoring engagement is governed by the agreement with each client, not by this page. Effective October 20, 2026.

Who we are

Clearwood, PBC, a public-benefit corporation in Portland, Oregon. Questions about this page go to [email protected].

What we collect, and why

Site analytics. We use PostHog to see which pages are read, how people reach them (referrer and campaign tags in the link), the device class, and interactions such as clicks and form submissions. It runs without cookies and stores no identifier in your browser; your IP address and browser are used to derive a daily, anonymous visitor count and are not kept. We do not record sessions and we do not try to work out who you are. We use this to understand which writing and which links bring people to the site.

Forms. When you ask for an AI risk check, join as a protocol reviewer, or subscribe to the blog, we keep what you type (your email address and what you tell us) together with which link brought you to the site. Your browser remembers that link for a week, so a form you fill in on a later visit is still credited to it; nothing else is stored. We use what you send to reply to you, to set up the call you asked for, and to keep track of who has written to us. Cloudflare Turnstile checks that a submission came from a browser rather than a script; it looks at some characteristics of your browser to do that.

Server logs. Cloudflare serves the site and keeps standard request logs for a short period to run and protect it.

Who handles it

We do not sell personal data and we do not share it for anyone else’s marketing. The companies that process data on our behalf are PostHog (analytics), Cloudflare (hosting, Turnstile, and the database that stores form submissions), Slack (a note to our team that a submission arrived, with the company and the domain of the email address, not your name, address or message), and Google Workspace (our inbox, when you email us). All of them process it in the United States. If you write to us from the EU or the UK, that is a transfer to the United States, covered by each provider’s standard contractual terms.

How long we keep it

Analytics are kept for one year. Form submissions are kept while we are in contact with you, and deleted when you ask or when the conversation has clearly ended.

Your choices

Email [email protected] to see what we hold about you, to correct it, or to have it deleted; we will reply within a week. Blog emails carry an unsubscribe link, and a reply saying “stop” works too. We do not track you across other websites, so a Do Not Track signal from your browser has nothing here to switch off. If you are in the EU or the UK, you also have the right to object to our use of your data and to complain to your data protection authority; our basis for analytics is our legitimate interest in knowing how the site is used, and for forms it is the request you made.

Children

The site is for people at work. It is not directed at anyone under 16, and we do not knowingly collect their data.

Changes

If this page changes, the date at the top changes with it.