Claribo Privacy Notice
Oblix Technologies Inc, doing business as Claribo (“Claribo,” “we,” “us,” or “our”), provides an invoice intake and review service for business customers. This Privacy Notice explains how we handle personal information when you visit claribo.ai, contact us, receive our business communications, or use a Claribo account. Claribo is currently in private beta.
Our customers may upload supplier invoices, email attachments, vendor records, and other business documents. The distinction between information we handle for our own business and information we process for a customer is explained below.
1. Scope and our role
This Notice covers personal information for which Claribo decides the purposes and means of processing, including website visitor information, business inquiries, outreach contacts, and account administration information. For personal information in invoices, supplier emails, attachments, vendor records, and related review data that a customer submits to its workspace (“Customer Data”), the customer generally decides what to submit and why. We process that information to provide the service on the customer’s behalf, under our agreement with that customer and any applicable data processing agreement. The customer’s own privacy notice may also apply to the people whose information appears in Customer Data.
If your information appears in a customer’s invoice or vendor record and you want to access, correct, or delete it, please contact the customer first. You may also email us at info@claribo.ai, and we will help route your request where appropriate.
2. Information we collect
Information you give us. When you request a demo, join a beta, contact us, or communicate with us, we may receive your name, work email address, company, role, phone number, message, and correspondence. When you use a Claribo account, we receive account and workspace information such as your name, email address, organization, role, invitations, and support requests. Our authentication provider processes sign-in credentials and related authentication data.
Information submitted through the service. A customer may send documents to a workspace inbox or upload them directly. Those materials may contain names, business addresses, email addresses, tax identifiers, bank account details, invoice and purchase order information, and other information about suppliers, customer employees, or individuals named in documents. We also process extracted fields, review notes, assignments, decisions, exports, and activity history produced through the workspace. Email sent to a workspace inbox may include sender and recipient details, subject lines, message content, attachments, and technical delivery information. The customer controls which documents it submits.
Usage and device information. When you visit our website or use the service, we and our providers may receive IP address, browser and device information, referring pages, approximate location derived from IP address, pages viewed, timestamps, actions in the service, and diagnostic or security logs. We may use cookies and similar technologies as described in Section 6.
Business contact information from other sources. We may receive professional contact details from publicly available business sources, professional networks, referrals, and prospecting providers to contact organizations that may be interested in Claribo. This may include a person’s name, employer, business title, and work contact details. We do not collect payment card details for a paid Claribo subscription during the free private beta.
3. How we use information
We use personal information to respond to inquiries and arrange demos; create and administer accounts and beta access; receive and process customer-submitted documents; extract and display invoice information; apply configured checks; support human review and export; operate, troubleshoot, and secure the website and service; provide support and service notices; understand usage and improve product performance; conduct relevant business outreach and measure our marketing; investigate misuse; and comply with law or protect rights and safety.
We do not use the contents of Customer Data for unrelated marketing. Our processing of Customer Data is directed by the customer and the applicable agreement. Automated invoice extraction and checks support a customer’s review process; Claribo does not itself decide whether a supplier should be paid.
Where European or UK data protection law applies to information for which we are the controller, our legal bases may include performing a contract or taking steps requested before a contract, our legitimate interests in operating, securing, improving, and explaining our business service, compliance with legal obligations, and consent where required, including for certain cookies or marketing. We consider the relevant interests and rights before relying on legitimate interests. A customer is responsible for identifying an appropriate legal basis for personal information it submits to Claribo as Customer Data.
4. When we disclose information
Service providers. We use providers for hosting, authentication, storage, email delivery and inbound email, document extraction, analytics, security, support, and business communications. They may process information on our behalf to perform those services, subject to appropriate contractual and security terms. A provider may see Customer Data only to the extent needed for the services it provides.
Your organization and its users. Information in a customer’s workspace may be visible to its authorized users according to the access and roles the customer configures. We may share account-related information with the customer’s workspace administrators.
At a customer’s direction. When a customer uses an export or API, information may be sent to recipients or systems the customer chooses. The receiving organization then handles that information under its own terms and practices.
Legal and business circumstances. We may disclose information when reasonably necessary to comply with law or valid legal process; protect the service, our customers, or others from harm or fraud; or establish, exercise, or defend legal claims. If our business is involved in a merger, financing, acquisition, reorganization, or sale, information may be disclosed to parties involved in that transaction subject to appropriate safeguards.
5. International handling
Claribo and its providers may process information in countries other than the one where you live or work. Those countries may have different data protection laws. Where a cross-border transfer requires safeguards under applicable law, we will use an appropriate legal mechanism. We do not represent that all data is stored in a particular country or region unless we agree to that separately with a customer.
6. Cookies and website analytics
We use technologies needed for website and account functions, and we may use analytics and advertising measurement tools to understand visits and the effectiveness of our marketing. These technologies can collect online identifiers, pages viewed, referring information, and interactions with our website. Some providers may set their own cookies or receive information when their tags run. You can manage cookies through browser settings and, where we offer them, on-site controls. Blocking necessary cookies may affect account functions. Where law requires consent for optional technologies, we will ask for it before using them.
Our website may link to other sites. Their privacy practices are governed by their own notices.
7. Marketing choices
We may contact business professionals about Claribo, respond to interest they express, and send product updates relevant to our service. You may opt out of marketing emails using the link in the message or by writing to info@claribo.ai. We may still send necessary account, security, and service communications to active users.
8. Retention
We keep account, inquiry, website, and business contact information for as long as reasonably needed for the purposes described here, including providing the service, managing relationships, securing our systems, responding to requests, and meeting legal obligations. Retention periods can differ by information type and context.
For Customer Data, our private beta Terms allow the customer to request an export within 30 days after access ends. They state that we will delete Customer Data from active systems within 90 days after access ends or a valid deletion request, unless retention is required by law. Backup copies may remain until removed through our ordinary backup cycle and remain protected while retained. An applicable data processing agreement may set different requirements. We may keep limited records where necessary to comply with law, resolve disputes, or protect the service.
9. Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, and disclosure. These measures include access controls and protections appropriate to the nature of the information and the service. No method of transmission or storage is completely secure. If you believe an account or document has been exposed, contact info@claribo.ai.
10. Your privacy rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; object to or restrict certain processing; withdraw consent where processing relies on consent; or appeal a decision about a request. These rights are subject to applicable law and exceptions. You may also have the right to complain to a data protection authority.
To make a request about information Claribo handles for its own purposes, email info@claribo.ai. We may need to verify your identity before responding. If a request concerns Customer Data, the customer generally controls that data; please contact that organization first. We will assist the customer as required by our agreement and applicable law. If you receive a marketing email, you can opt out as described in Section 7.
11. Children
Claribo is a business service and is not intended for children. We do not knowingly solicit personal information from children through the website or service. If you believe a child has provided information to us, contact info@claribo.ai.
12. Changes to this Notice
We may update this Notice as our practices or legal requirements change. We will post the revised version at claribo.ai/privacy and provide additional notice where required by law. The version displayed there applies from the time it is posted or from a later date stated on the page.
13. Contact
Oblix Technologies Inc, doing business as Claribo
Privacy questions and requests: info@claribo.ai