Privacy Policy
When you use Clapnode, you trust us with information about you and the things you create. We want you to understand what we collect, why we need it, and what happens to it.
This Privacy Policy explains how Clapstool Studios processes personal data when you use Clapnode.
Clapnode is still in early access and we are continuing to improve the service. This Privacy Policy describes how we handle personal data today. We’re actively working on making our privacy and security practices stronger and putting additional safeguards in place as we build and grow Clapnode. This is our first version of the Privacy Policy, and we’ll keep improving and updating it as Clapnode evolves.
If you have any questions about your privacy or how we handle your data, you can contact us at support@clapnode.com.
Clapnode is developed and operated by Clapstool Studios.
In this Privacy Policy, we refer to Clapstool Studios as “Clapstool”, “we”, “us”, or “our”.
For the personal data described in this Privacy Policy, Clapstool is generally the controller. This means that we decide why and how that personal data is processed.
There can be situations where we process personal data on behalf of another organisation. For example, an organisation may use a shared Clapnode workspace and store personal data about its employees or customers there. In those situations, the organisation may be the controller and Clapstool may act as a processor.
We try to keep the amount of personal data we collect to what we actually need to run Clapnode.
Your account
Your name — We use this to identify your account and show your name in Clapnode. This does not have to correspond to any real name, it can be a nickname for example.
Your email address — We use this to create your account, let you log in, and contact you when needed.
Your profile picture — This is completely optional and is simply used to personalize your profile.
Clapnode uses passwordless login. When you log in, we generate a verification code and send it to your email address. These codes are only valid for a single use and are not stored.
We also keep information about login attempts so we can make sure login works properly, detect problems, and provide support when something goes wrong.
Your Clapnode content
You can create and store:
projects and workspaces;
nodes and text;
images and GIFs;
links;
files;
other information you choose to add.
We store this content because it is necessary to provide Clapnode to you. This content can contain personal data. For example, you might add someone's name or email address to a project.
Technical and usage information
User ID and username — To identify your account within our systems.
Browser type and version — To help us understand technical issues and make sure Clapnode works properly across different browsers.
IP addresses in certain logs — These can help us investigate errors, security issues, and other technical problems.
Error and technical information — To help us find and fix problems.
Whether you are active or idle — This can be useful for features and technical monitoring.
Types of actions you perform in Clapnode, such as adding or deleting a node — This helps us understand how Clapnode is being used and where we can improve it.
Our internal analytics focus on how Clapnode is being used rather than the contents of what you create. For example, we may record that a user added a node, but we don't use this information to record what was written inside that node.
Subscription and billing information
If you subscribe to a paid plan, we may process:
your country;
your business name, if provided;
your VAT number, if provided;
your subscription;
payment ID and payment status;
amount paid;
invoice and other financial information.
Payments are processed through Mollie. We receive payment-related information from Mollie that allows us to identify and manage your payment, but we do not store your complete payment card details ourselves.
We also keep invoices and other financial records where required for accounting and tax purposes.
Information you send us
If you contact us, we may process:
your name;
your email address;
the content of your message;
any files or other information you choose to send us.
This can happen when you contact support@clapnode.com, team@clapnode.com, or team@clapstoolstudios.com.
Mostly, because we need it to make Clapnode work.
Providing Clapnode
We use your information to:
create and manage your account;
authenticate you;
store and display your content;
keep your workspaces available;
provide the features you use;
process your subscription and payments.
The legal basis for these activities is generally the performance of our agreement with you.
Security and reliability
We use technical information and logs to:
keep Clapnode secure;
detect and investigate errors;
prevent abuse;
troubleshoot technical problems;
improve the reliability of the service.
The legal basis for this is generally our legitimate interest in keeping Clapnode secure and reliable.
Improving Clapnode
We look at how people use Clapnode to understand what works well and where we can make things better.
Some of this information may be linked to individual users. We may use it to understand how Clapnode is being used, ask for feedback, or figure out what went wrong when something doesn't work as expected.
The legal basis for this is generally our legitimate interest in improving and developing Clapnode.
Support and communication
We use information you provide when contacting us to answer your questions, provide support, and communicate with you about Clapnode.
The legal basis is generally the performance of our agreement with you when the communication is needed to provide the service, and our legitimate interest when it relates to general support or communication.
Marketing
We do not currently send a general newsletter.
We may send sales or other commercial emails to email addresses we have obtained through events or other direct business interactions. You can opt out of these emails and request deletion of your contact information by emailing support@clapnode.com.
The legal basis for these emails is generally our legitimate interest in communicating with people who have shown an interest in Clapnode, where permitted by applicable law. Where consent is required, we will ask for your consent instead.
Legal and financial obligations
We may process and retain certain information when this is necessary to comply with legal, tax, accounting, or other legal obligations.
The legal basis for this is compliance with a legal obligation.
Your content belongs to you.
You keep ownership of the content you upload, create or store in Clapnode.
However, we need certain permissions to technically handle your content.
By using Clapnode, you give Clapstool Studios a limited, non-exclusive licence to host, store, reproduce, process, transmit, display and technically modify your content only as reasonably necessary to provide, maintain, secure and support Clapnode.
This licence does not transfer ownership of your content to us.
If we need access to your content to investigate or resolve a technical or support issue, we will only access what is reasonably necessary to do so.
We don't sell your personal data.
We work with a limited number of service providers that help us operate Clapnode. These providers only receive personal data where this is necessary for the service they provide.
We may also share personal data:
when you ask us to;
when this is necessary to provide a service you have requested;
when we are legally required to do so;
when necessary to protect our rights, users, or the security of Clapnode.
We try to work with service providers based in the EU wherever possible. Most of our service providers are even based in the Netherlands. Some of our providers are based outside the EU, or may use service providers in other countries. When personal data is transferred outside the EEA, we make sure appropriate safeguards are in place where required by applicable data protection law.
TransIP
Our main Clapnode infrastructure, including our databases and file storage, is hosted by TransIP in the Netherlands.
Acronis
We use Acronis to make daily backups of Clapnode data. Acronis is headquartered in Switzerland. Acronis states that customer content is kept in the selected data-centre region, but limited processing, such as customer support, may involve people or service providers in other countries. Acronis uses safeguards for international data transfers where required.
Magnific
We use Magnific for our icons API. When you search for an icon in Clapnode, the search terms you enter are sent to Magnific so they can return relevant icons. Magnific does not receive the rest of your Clapnode content through this integration. Magnific is based in Spain, but its privacy policy states that some of its service providers may be located outside the EEA. This means that some processing may take place outside the EEA.
We take reasonable technical and organisational measures to protect your personal data.
These include:
access controls;
authentication;
technical logging and monitoring;
encrypted connections;
regular backups;
limiting access to information to what is reasonably necessary.
No online service can be guaranteed to be completely secure. We therefore continuously work on improving the security and reliability of Clapnode.
We don't keep your personal data forever. We keep it for as long as we need it for the purpose we collected it for, unless we're legally required or otherwise allowed to keep it for longer.
How long we keep it depends on the type of data, why we use it, and any legal obligations that apply to us. We’ve put together an overview:
Account and profile data
We keep this for as long as you have a Clapnode account. When you request deletion of your account, we'll delete or anonymise the personal data linked to your account that we no longer need. We aim to do this within 14 days of your request, unless we're required or allowed to keep certain data for longer.
User content
When you request deletion of your account, we'll delete your personal user customer content. Content shared with others remains available in shared workspaces.
Stopping your subscription does not automatically delete your data. Your account, workspaces, and existing content remain available to you even if you stop paying for Clapnode. We only delete your data when you ask us to do so, or when we are legally required to delete it.
Billing and financial records
We keep invoices and payment records for as long as needed to meet our accounting and tax obligations. For example, certain business records in the Netherlands generally need to be kept for 7 years.
Support, feedback and suggestions
We may keep messages you've sent to us, including support requests, feedback, and suggestions, for as long as we reasonably need them to respond to you, keep track of issues, improve Clapnode, or resolve disputes.
Security, fraud and abuse
We may keep relevant information for as long as reasonably needed to investigate or prevent security incidents, fraud, abuse, or misuse of Clapnode.
Legal obligations and claims
Sometimes we need to keep personal data for longer to meet legal obligations, cooperate with authorities, or establish, exercise, or defend legal claims. We'll only keep it for as long as needed for that purpose.
Backups
When data is deleted, copies may remain temporarily in our encrypted backups. These backups are used for security and recovery, not for ordinary access to deleted data. As backups reach the end of their normal lifecycle, they are overwritten or securely deleted.
Depending on the circumstances, you have the right to:
access the personal data we hold about you;
correct inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive your personal data in a portable format;
withdraw consent where processing is based on consent.
These rights are not absolute. There may be situations where we are legally required to keep certain information.
Deleting your account
You can ask us to delete your Clapnode account by emailing support@clapnode.com.
We will delete your personal account data and personal workspaces as soon as reasonably possible and within the legal timeframe. We may need to keep certain information where we are legally required to do so, such as financial records.
If content exists in a workspace shared with other users, deleting your account does not automatically delete that shared content. The workspace and its contents may remain available to the other users who have access to it.
Getting a copy of your data
Clapnode does not currently have a self-service export function.
If you want a copy of the personal data we hold about you, email support@clapnode.com. We will provide your data as a ZIP file.
We may ask for information to verify your identity before handling a request. We will respond within the timeframe required by applicable data protection law.
Clapnode itself does not currently use cookies for advertising or behavioural tracking.
Our marketing website is separate from the Clapnode application and is built with Framer. Framer's native analytics does not use cookies and is designed to collect visitor information anonymously. It does not collect or store information that identifies individual visitors.
Clapnode is currently primarily designed around individual use, but you can already share workspaces with other people.
When you use Clapnode on behalf of an organisation and put personal data about other people into a shared workspace, the organisation may be responsible for that data and Clapstool may process it on the organisation's behalf.
In those situations, the organisation may be the controller and Clapstool may act as a processor.
Additional arrangements can be made through a Data Processing Agreement (DPA) where required.
If you have a concern about how we handle your personal data, please contact us first at support@clapnode.com. We'd much rather hear from you and try to resolve the issue together.
We're actively working to keep improving our privacy practices, so if you notice something that you think could be clearer or handled better, we'd genuinely appreciate you letting us know.
You also have the right to lodge a complaint with the data protection authority in the country where you live, work, or where you believe your rights have been infringed.
If you are in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We may update this Privacy Policy when our service changes, when we change how we process personal data, or when required by law.
The latest version will always be available at clapnode.com/privacy.
If we make an important change that affects how we process your personal data, we will take reasonable steps to bring the change to your attention.
If you have questions about this Privacy Policy, want to exercise your privacy rights, or simply want to understand something better, contact us at:
Clapstool Studios
Email: support@clapnode.com
We're happy to explain.