Privacy policy
This policy explains what CLRT Ascent collects when you use the diagnostic, why we use it, who we share it with, and the rights you hold over it. It covers ascent.clrtstudio.com and the diagnostic behind it.
CLRT is the controller of your data.
CLRT Ascent is operated by CLRT L.L.C-FZ, a company registered in Dubai, United Arab Emirates. We decide how and why your data is processed, which makes us the data controller. For anything in this policy, write to privacy@clrtstudio.com.
Only what the diagnostic needs, and what you choose to give.
- Identity and contact. Your name, work email (verified when you sign in), mobile number, LinkedIn, and country. We ask for these at the results gate, and only once you give consent. The AED figures stay masked until you do.
- Your diagnostic responses. The role, sector, and scope you choose, your intent, your Zone of Genius ratings, the workflow you select, and the figures you enter. This is the material your brief is built from.
- Payment. If you upgrade to the paid diagnostic, Stripe processes your card. We never see or store full card details.
- Technical. Device and browser information, an approximate location derived from your IP address, and basic usage events, used to run the service and keep it secure.
To run the diagnostic, and on a lawful basis for each use.
- To run the diagnostic and assemble your brief, the service you asked for.
- To unlock your results and follow up about them, on the consent you give at the gate.
- To take payment for the paid diagnostic, to perform our contract with you.
- To keep the service secure and to improve our models and sector anchors. A person reviews any change before your input is allowed to move a live benchmark; nothing updates an anchor automatically.
Our lawful bases are your consent (UAE PDPL; GDPR Article 6(1)(a)) for the contact data captured at the gate and for follow-up, and our contract and legitimate interests for delivering, securing, and improving the service. You can withdraw consent at any time, which does not affect processing already carried out.
A short list of processors, and no one else.
- Anthropic.Your inputs are sent to the Anthropic API to generate your brief. Under Anthropic's commercial terms, this data is not used to train their models.
- Stripe. Card payments for the paid diagnostic.
- Vercel and our API host. Hosting and delivery of the application and its data.
We do not sell your data, and we do not buy or invent data about you. The tool renders only what you provide.
Some processing happens outside the UAE.
Your data is processed in the United Arab Emirates and, through the processors above, in other countries including the United States. Where a transfer leaves the UAE or the EEA, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
For as long as it serves the purpose, then no longer.
We keep your diagnostic record and contact details while you are a prospect or a client, and for as long as needed for the purposes set out above and to meet our legal obligations. After that we delete or anonymise it. You can ask us to delete your data sooner.
Access, correction, deletion, and more.
Under the UAE PDPL and, where it applies, the GDPR, you can ask to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent. To exercise any of these, email privacy@clrtstudio.com. We respond within 30 days. You may also complain to your data protection authority.
Procurement grade, by intent.
We encrypt data in transit, restrict access to it, and keep your AED figures masked until you consent to unlock them. No method of storage or transmission is perfectly secure, but we treat your data with the same standard the artifact is built to meet.
This is not a service for minors.
CLRT Ascent is built for accountable decision-makers and is not intended for anyone under 18. We do not knowingly collect data from children.
We update this page when our practice changes.
When we change how we handle your data, we revise this page and update the date at the top. Material changes will be made clear before they take effect.
One address for anything here.
CLRT L.L.C-FZ, Dubai, United Arab Emirates. For any privacy question or request, write to privacy@clrtstudio.com.