Privacy Policy

This policy explains the limited information Clova collects through the waitlist, optional research, and website analytics while we build Clova, why we collect it, and the choices available to you.

What we collect

When you join the waitlist, we collect your email address. You may also choose to provide your first name, phone number, and an age bracket.

You may separately choose to complete Clova's optional money-habits questionnaire. It asks about how you organise, spend, budget, and save. Public participants may optionally provide a first name and email address. When a waitlist member follows their private questionnaire link, compatible details already provided through the waitlist may be linked to the response so they are not requested again.

We do not ask for banking credentials, financial account data, transaction histories, an exact date of birth, or payment information through the waitlist or questionnaire.

When you complete a questionnaire, we collect the answers you choose to share. You may also provide your first name and email address. Questionnaire contact details are optional, and the questionnaire does not ask for financial account credentials or payment information.

How we use your details

We use your email to keep your waitlist place, send a private questionnaire continuation link, and contact you with occasional important Clova progress and access updates. If you provide a phone number, we use it only to text you when Clova opens. Optional profile details and questionnaire responses help us understand who is interested and what people need from the product. Completing the questionnaire is not required to keep your waitlist place.

Questionnaire responses started from a public share link remain separate from another person's waitlist record, private continuation, and answers.

We use questionnaire responses to understand people’s money habits, strengths, and difficulties and to inform what Clova builds. If you include an email address with a completed questionnaire, we use it to send one transactional thank-you email and use your first name in that message when available. Completing a questionnaire does not subscribe you to marketing emails.

Attribution and approximate location

We may record the page or campaign that brought you to Clova, including referral and UTM campaign information, along with a broad device and viewport category. When you join, your IP address may be used momentarily to derive an approximate country, region, and city. We do not store the raw IP address.

Website analytics, heatmaps, and session replay

We use PostHog to understand how people navigate Clova, reach key sections, and complete waitlist or questionnaire steps. This includes product analytics, heatmaps, and session replays that show interactions with the website. All form inputs are masked in session replays, and we do not deliberately send your contact details, questionnaire answers, or the text you type into form fields to PostHog.

After the server confirms your waitlist record, we give PostHog an opaque waitlist identifier so activity and return visits can be associated with the same waitlist member. The identifier is not your email address or phone number, but Clova can link it to your waitlist record. We therefore treat this analytics data as pseudonymous, not anonymous.

When you select a questionnaire sharing action, we may record the questionnaire name and version and the selected sharing channel, such as WhatsApp, native share, email, X, LinkedIn, or copy link. A copy-link event is recorded only after the clipboard write succeeds. This pseudonymous channel-selection event records intent only: it does not include the recipient, prove that a message was delivered, or attribute another person's response to you.

Remembering your place on this device

After your email is saved to the waitlist, we keep a normalised copy of it in this browser's local storage. This provides an immediate browser hint while the server confirms the current waitlist state. This local copy stays on your device, is not used as the analytics identifier, and can be removed by clearing Clova's site data.

After you save or skip the optional details step, Clova may set a secure cookie that JavaScript cannot read. It contains only a random browser credential, not your email address, signup identifier, answers, or questionnaire link. Clova stores only a hash of that credential. It can recognise the same waitlist member on this browser for up to 90 days so the site can offer the appropriate questionnaire action. Clearing Clova's site data removes the browser copy.

The welcome email and completed waitlist flow may also provide a separate private questionnaire continuation link. Its random credential can resume an unfinished response or show the submitted thank-you state for up to 90 days, and Clova stores only a hash of it. Treat this link as private: anyone who obtains it may be able to access that questionnaire state until the credential expires or is revoked. Public questionnaire share links never include this credential.

Who processes information

Service providers that support our website may process information on our behalf. These include website hosting, database, PostHog for website analytics, heatmaps and session replay, and Resend, which sends our questionnaire thank-you, welcome, progress, and early-access emails and manages marketing email preferences. We send Resend only the contact details and delivery metadata needed for the relevant email, not questionnaire answers. We otherwise limit the information shared to what is needed for those services to operate.

Access, correction, and deletion

You can ask what waitlist and linked questionnaire information we hold about you, request a correction, or ask us to delete it by emailing support@getclova.com. We may need to confirm that the email address belongs to you before acting on a request. Public questionnaire responses without usable contact details may not be identifiable as yours.

As Clova develops

We may update this policy as Clova and the services supporting it develop. If we want to use waitlist information for a materially different purpose, we will revisit the policy and consent approach rather than relying on unclear future-use wording.

This is an operational early-stage privacy policy. It should receive legal review before Clova launches a financial product or materially expands its collection or use of personal information.