Skip to main content
Clarion-specific privacy and legal disclosures.

​
Clarion Privacy Disclosures

Clarion is operated by Spearbit Labs Inc. (“Cantina”). These disclosures describe Clarion-specific handling of Google Workspace API data and should be read together with the Clarion Privacy Policy and Cantina’s Privacy Policy. Clarion may access Google Workspace data only when a workspace administrator or authorized user connects a Google integration. Clarion uses that data to provide user-facing Clarion functionality, including alert enrichment, detection, triage, reporting, and related security workflows. Clarion may process Google Workspace data with third-party service providers, including AI service providers, only to provide Clarion functionality requested by the user or workspace administrator. Clarion retains Google Workspace data only as needed to provide the service, support security workflows, comply with legal obligations, or as agreed with the customer. Trial workspace data may be suspended or deleted if the trial is not converted to a paid subscription within 60 days. Clarion protects Google Workspace data using administrative, technical, and physical safeguards appropriate to the sensitivity of the data.

​
Google API Limited Use Disclosure

Clarion’s use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Clarion does not use, transfer, or sell Google Workspace API data to develop, improve, or train generalized AI or ML models. Where Clarion uses AI services, Google Workspace API data is used only to provide user-facing Clarion functionality requested by the user or workspace administrator. Clarion does not use Google Workspace API data for advertising or to serve ads. Clarion does not allow humans to read Google Workspace API data except with the user’s explicit consent, where necessary for security purposes, where required to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.