Legal updates
Every change to our Privacy Policy, Terms of Service and Data Handling page, newest first. We email client owners and admins about each one, and at least 14 days before a material change takes effect.
014 Nov 2026: Privacy Policy, Data Handling
Minor change, in effect from 4 Nov 2026 with no notice period. Ailsa, 2 Nov 2026: minor, no notice. There are no real users yet (first client starts 18 Nov) and the provider is the same.
- Data Handling and Privacy: sign-in, passwords, two-factor authentication and recovery are handled by the Klarite account; ProveCONSULT no longer holds or receives passwords.
- Data Handling: people are invited and removed in the Klarite account; ProveCONSULT is opened with short-lived access passes issued by the Klarite account.
- Two-factor resets are no longer listed as something ProveCONSULT records.
023 Nov 2026: Privacy Policy, Data Handling
Minor change, in effect from 3 Nov 2026 with no notice period. Before launch: no clients yet (first client 18 Nov 2026).
- Privacy 3 and 5, Data Handling 3 and 9: once a week each active project is emailed a reminder of commitments that are overdue, due soon or have no due date, and of replies saved but not sent, at its connected mailbox (or the client's owners and admins when it has none). Mailbox sync does not record it as an event.
033 Nov 2026: Privacy Policy, Data Handling
Minor change, in effect from 3 Nov 2026 with no notice period. Before launch: no clients yet (first client 18 Nov 2026).
- Privacy 5, 7 and 8 and Data Handling 9: uploaded .pst and .msg files are read in Sydney by a short-lived task in Klarite's own AWS account, with no database access; what it reads out is deleted from Amazon S3 once copied in, and within 7 days at most.
0428 Oct 2026: Privacy Policy
Minor change, in effect from 28 Oct 2026 with no notice period. Before launch: no clients yet.
- Privacy 2: when a stakeholder answers the email preferences link, the project's connected mailbox is told (the client's owners and admins if the project has none).
0527 Oct 2026: Privacy Policy, Terms of Service, Data Handling
Minor change, in effect from 27 Oct 2026 with no notice period. Before launch: no clients yet.
- Privacy 9: you can ask us to close your account (your name stays on records you made, as a former member); requests about your own account answered within 5 business days, and stakeholders' requests passed to the client within 2 business days.
- Privacy 4: text with names removed is still treated as personal information; Anthropic deletes what it receives within 30 days unless the law or a misuse flag requires longer; themes are applied automatically and staff can change them.
- Privacy 5.1 states plainly that personal information may be processed in the United States, Japan and the European Union.
- Privacy 8: records are not deleted automatically while a client's agreement is in place.
- Terms 13: either party may still seek urgent court orders. Terms 16: any change is made under section 14.
- Punctuation tidied on all three pages.
0627 Oct 2026: Privacy Policy, Data Handling
Minor change, in effect from 27 Oct 2026 with no notice period. Before launch: no clients yet.
- The acknowledgment about overseas processing (Privacy 5.1) now also names the European Union, where technical error reports are held.
- Data Handling 6 now says the optional IP allowlist covers the application's pages and actions.
0726 Oct 2026: Privacy Policy, Data Handling
Minor change, in effect from 26 Oct 2026 with no notice period. Before launch: no clients yet.
- Klarite now keeps a record of each account closing (which account, who closed it and when) with its other security records, deleted after 12 months.
0826 Oct 2026: Privacy Policy, Terms of Service, Data Handling
Minor change, in effect from 26 Oct 2026 with no notice period. Before launch: no clients yet.
- An encrypted copy of the database is now made every night and kept in Klarite's separate backup account with Amazon Web Services in Sydney.
- Each copy is removed after 35 days, the same as the file backups; only Klarite holds the key to read it.
0925 Oct 2026: Privacy Policy, Terms of Service, Data Handling
Material change, in effect from 25 Oct 2026 with no notice period. Before launch: no clients yet.
- How long each kind of data is kept, and that operational and security records are now deleted automatically.
- After an agreement ends, data is kept 30 days for export and then deleted (matching Terms 11.4).
- Keeping consultation records for the long term, including for a regulator, is the client's responsibility.
- Accounts with no organisation that are unused for 12 months are closed; names stay on the client's records.
- Deleted data can stay in backups for up to 35 days.