Legal
Last updated: February 22, 2026
Effective date: February 22, 2026
Welcome to whyhireclay.ai ("the Site," "we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you visit our website.
The short version: We do not store or save any of your personal information. We do not use analytics, advertising trackers, or profiling. The only data that reaches Clay Cash directly is information you explicitly and voluntarily choose to send (such as sending an email via the contact link). Chat conversations with our AI assistant (ClayBot) are processed in real-time and are not stored, logged, or retained by us.
This policy applies to all visitors worldwide and is designed to comply with the privacy laws of the European Union (GDPR), the United Kingdom (UK GDPR), the United States (including CCPA/CPRA), Canada (PIPEDA), Japan (APPI), Singapore (PDPA), South Korea (PIPA), Australia (Privacy Act 1988), Brazil (LGPD), South Africa (POPIA), and other applicable jurisdictions.
The data controller for this website is:
Clay Cash is the sole operator of this website. For all privacy-related inquiries, data access requests, or concerns, you may contact him directly at the email address above.
We collect minimal data, limited to what is technically necessary:
When you use the ClayBot chat feature, your messages are sent to our server-side API function which forwards them to Anthropic's API for processing. These messages:
Our hosting provider (Vercel) may automatically collect standard server log data, which may include:
This data is collected and managed by Vercel under their own privacy policy. We do not access, use, or store these logs ourselves.
To prevent abuse, our chat API temporarily holds IP addresses in server memory for rate limiting purposes (maximum 60 seconds). This data is never written to disk, is never shared, and is automatically cleared. Because Vercel serverless functions are ephemeral, this data does not persist between function invocations.
To be explicit, we do not:
The following third-party services process data in connection with this website:
Purpose: Website hosting and serverless function execution
Data processed: Standard HTTP request data (IP address, user agent, request URLs) via server logs; serverless function execution for the chat API
Data location: United States (primary), with global CDN edge nodes
Retention: Per Vercel's data retention policies
Privacy policy: vercel.com/legal/privacy-policy
GDPR compliance: Vercel offers a Data Processing Addendum (DPA) and supports EU Standard Contractual Clauses (SCCs) for international transfers.
Purpose: Processing chat messages through the Claude AI model to generate responses for the ClayBot feature
Data processed: Chat messages you type into ClayBot, sent via our API for real-time inference
Data location: United States
Retention: Anthropic's API usage data retention is governed by their privacy policy. We use the API in a configuration where inputs and outputs are not used to train models.
Privacy policy: anthropic.com/privacy
Important: Anthropic does not use API inputs/outputs to train their models. Your chat messages are processed for inference only.
Purpose: Serving the Inter and JetBrains Mono typefaces used on this site
Data processed: Your IP address and browser information are sent to Google's servers when font files are loaded
Data location: Global (Google infrastructure)
Privacy policy: policies.google.com/privacy
Purpose: Serving the Tailwind CSS framework for site styling
Data processed: Standard CDN request data (IP address, user agent)
Served via: cdn.tailwindcss.com
No other third-party services are used. We do not use analytics providers, advertising networks, social media plugins, CRM platforms, or any other external services that process visitor data.
| Processing Activity | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Chat message processing | Providing real-time AI chat responses | Consent (Art. 6(1)(a)) — You actively choose to use the chat feature |
| Server logs (Vercel) | Website delivery, security, and abuse prevention | Legitimate interest (Art. 6(1)(f)) — Necessary for website operation |
| Rate limiting (IP) | Preventing API abuse | Legitimate interest (Art. 6(1)(f)) — Security and abuse prevention |
| Font loading (Google) | Rendering website typography | Legitimate interest (Art. 6(1)(f)) — Website functionality |
| Email contact | Communication you initiate | Consent (Art. 6(1)(a)) — You voluntarily send the email |
Retention: None. Messages exist only during your browser session and in-transit to the API. They are not logged, stored, or backed up by us. Closing or refreshing the page permanently erases all chat data.
Retention: Maximum 60 seconds in volatile server memory. Automatically cleared. Not persisted to disk.
Retention: Per Vercel's policies. We do not access or use these logs. See Vercel's privacy policy for details.
Retention: Only if you send one. If you choose to email Clay directly, that communication is retained as standard email correspondence and handled per your and Clay's email providers.
This website is operated from the United States. If you access this site from the European Economic Area (EEA), the United Kingdom, or other regions with data transfer restrictions, please be aware that your data may be processed in the United States by our third-party service providers.
Safeguards for international transfers:
Given that we collect and retain essentially no personal data ourselves, the scope of international transfers is limited to the standard HTTP requests that occur when you load a web page and (optionally) use the chat feature.
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (EU) 2016/679:
In practice, because we do not store personal data, most of these rights are already satisfied by default. If you have concerns, please contact us and we will respond within 30 days.
If you are located in the United Kingdom, you have equivalent rights under the UK General Data Protection Regulation (as retained under the Data Protection Act 2018). Your rights mirror those listed in Section 10 above.
You may lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk
If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) grants you the following rights:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. There is no need to opt out because there is nothing to opt out of.
Categories of personal information collected in the preceding 12 months: None retained. Standard server log data (collected by Vercel) may technically qualify as "identifiers" under CCPA but is not accessed or used by us.
If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws give you the right to:
As we do not store personal data, these rights are satisfied by default. For concerns, you may also contact the Office of the Privacy Commissioner of Canada: priv.gc.ca
If you are located in Japan, you have the right to request disclosure, correction, suspension of use, or deletion of your personal information. Since we do not store personal data, these rights are inherently satisfied. For inquiries, contact us at the email address listed below.
If you are located in Singapore, you have the right to access and correct your personal data, and to withdraw consent for its collection, use, or disclosure. We do not collect or retain personal data. For complaints, you may contact the Personal Data Protection Commission (PDPC).
If you are located in South Korea, you have the right to access, correct, delete, and suspend processing of your personal information. As we do not store personal data, no action is required. You may file a complaint with the Personal Information Protection Commission (PIPC).
If you are located in Australia, you have the right to access and correct personal information held about you. We do not collect or store personal information. For complaints, you may contact the Office of the Australian Information Commissioner (OAIC): oaic.gov.au
If you are located in Thailand, you have rights including access, correction, deletion, data portability, and the right to object to processing. We do not collect or retain personal data.
If you are located in India, you have the right to access, correct, and erase your personal data, as well as the right to nominate and grieve. We do not collect or retain personal data.
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you rights including access, correction, anonymization, deletion, data portability, information about sharing, and the right to revoke consent. As we do not store personal data, these rights are inherently satisfied. For complaints, you may contact the Autoridade Nacional de Proteção de Dados (ANPD).
If you are located in South Africa, the Protection of Personal Information Act (POPIA) gives you the right to access, correct, and delete your personal information, as well as the right to object to processing. We do not retain personal information. For complaints, you may contact the Information Regulator: inforegulator.org.za
This website is not directed at individuals under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to address the concern.
We take reasonable measures to protect data in transit and at rest:
The best security practice is not collecting data in the first place. That is our primary approach.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make material changes that affect your rights, we will make reasonable efforts to notify visitors (for example, by adding a notice on the homepage). Your continued use of the website after any changes indicates your acceptance of the updated policy.
For any privacy-related questions, data subject access requests, or concerns about how your information is handled, please contact:
We will respond to all privacy inquiries within 30 days (or sooner where required by applicable law).