All apps

Is Clay safe with your data?

C
Clay icon

Clay

Clay Software, Inc.

60/100

Partial disclosure · high confidence

Clay earns a C (60/100) because it discloses its data practices only in part.

#68

of 116 apps ranked

60

score · Sales & marketing avg 57

+3

vs category average

Grade scaleA · 85–100B · 70–84C · 55–69D · 40–54F · 0–39

Clay's privacy policy is strong on data-subject rights, sharing transparency, and international transfer safeguards. It says nothing about AI model training and gives little detail on retention or breach notification, which keeps the score mid-table.

What Clay's privacy policy says about your data

Self-declared data broker with sell opt-out

Section 13 states "Yes. Clay is a data broker" and offers a "do not sell" button plus a privacy@clay.com route. The 2024 metrics show all 8 opt-out requests were honored. The sale of data is disclosed and an opt-out exists, so it does not sink the score.

Full data-subject rights toolkit

Sections 11 and 12 grant access, correction, portability, deletion, objection, and restriction across the European and U.S. state frameworks, with a privacy@clay.com request channel and published CCPA response metrics.

International transfers with named safeguards

Section 14 relies on European Commission adequacy decisions, contractual protections, and Binding Corporate Rules, and Section 17 appoints VeraSafe as the Article 27 EU representative.

Retention and breach handling underspecified

Section 5 keeps data "only as long as necessary" with no day-count, and Section 6 promises "appropriate technical and organizational security measures" with no breach-notification commitment or timeframe. AI model training is not addressed at all.

What the policy is silent or vague on

  • Not stated: keeping user inputs out of model training
  • Not stated: a way to opt out of training
  • Not stated: whether training use differs by plan
  • Not stated: your ownership of generated outputs

Clay privacy rating

Training-data use0 of 4 disclosed
Keeps user inputs out of model training, or makes training opt-inSilent
Names a way to opt out of or into trainingSilent
Says whether training use differs by plan or tierSilent
Lets the user keep ownership of generated outputsSilent
Data-subject rights5 of 5 disclosed
Grants a right to access your dataDisclosed
Grants a right to delete your dataDisclosed
Offers data portability in a usable formatDisclosed
Grants a right to correct your dataDisclosed
Grants a way to object to or opt out of processingDisclosed
Retention and deletion1 of 3 disclosed
States a retention period for your dataPartial
States a deletion timeline after closure or requestPartial
Sets a shorter retention for AI conversation logsNot applicable
Commits to collecting only the data it needsDisclosed
Third-party sharing4 of 5 disclosed
Lists the categories of third parties it shares withDisclosed
References a sub-processor list or data processing agreementDisclosed
Does not sell or share data for advertising, or offers opt-outPartial
Names a safeguard for international data transfersDisclosed
States a standard for government and law-enforcement accessDisclosed
Transparency3 of 4 disclosed
Discloses that you are interacting with AISilent
Marks AI-generated or synthetic outputNot applicable
Enumerates the categories of data it collectsDisclosed
Maps processing purposes to legal basesDisclosed
Is versioned and dated, with change noticeDisclosed
Sensitive data and children1 of 2 disclosed
Discloses automated decisions and a human-review pathNot applicable
Limits the use of special-category dataSilent
Governs biometric data specificallyNot applicable
States protections for children's dataDisclosed
Security and accountability0 of 3 disclosed
Describes its security safeguardsPartial
Commits to breach notificationSilent
Names a certification or a privacy contactSilent
DisclosedPartialSilentAdverseNot applicable

Details

Category
Sales & marketing
Modalities
text
Processes biometrics
No
Policy last updated
2025-07-03
Region scored
Global / US-default
Assessed
2026-06-20
Read Clay's privacy policy

Other sales & marketing apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.

Is Clay safe with your data? Grade C | AI App Trust & Transparency Index