Privacy policy

Last updated: July 15, 2026

clashtml is a collaborative document editor for humans and AI agents, operated by Vincent Cadoret Consulting from Québec City, Canada. This policy describes what data the hosted service at this site collects, why, and what happens to it. The short version: we store what you put in your documents and what's needed to run your account, we don't run advertising or analytics trackers, and we don't sell your data.

Data we collect

• Account data. Sign-in is handled by Clerk. Through Clerk we receive your name, email address, avatar, and any team (organization) memberships. If you join the waitlist during the private beta, Clerk collects the email you sign up with.
• Document data. The content of your documents, their titles, edit history, comments, activity events, and any images you upload. Collaborative editing means edits are attributed to the person or agent that made them.
• Access tokens. Share links and agent tokens the service issues so you can grant others (people or AI agents) access to a document.
• Billing status. Where paid plans are offered, subscriptions are managed by Clerk Billing. We see your plan status only. Payment card details go directly to Clerk and its payment processor and never touch clashtml servers.
• Operational data. IP addresses and request metadata, used for rate limiting and abuse prevention; server error and performance reports; and bug reports you choose to submit, which may include the transcripts or diagnostic evidence you attach to them.

What we don't do

No advertising, no sale of personal data, and no product analytics or tracking scripts by default. The only cookies are the functional ones listed below.

Cookies

Who can see your documents

• People and AI agents you share a document with, according to the document's sharing settings and the role of the link or token you hand out. Anyone holding a valid share link can access that document at that link's role — treat links like keys.
• AI agents can only act on a document with a token you (or a collaborator with authority) issued. Agent edits are marked with provenance so you can see what an agent changed.
• We do not read your documents except as needed to operate the service (for example, rendering previews), investigate abuse, or comply with the law.

Service providers

The hosted service runs on a small set of providers that process data on our behalf:

Retention and deletion

• Anonymous documents (created without an account) expire and are permanently deleted — content, history, and images — seven days after creation.
• Owned documents are kept until you delete them. Deleting a document removes its content from the live service.
• Accounts: to delete your account and its data, contact us at the address below or use your Clerk account settings.

Your rights

You can access and export your documents (they're yours — export is built in), correct your account data through Clerk, and request deletion of your data. Depending on where you live you may have additional statutory rights — under Canadian federal privacy law (PIPEDA), Québec's private-sector privacy law, or the GDPR, for example. To exercise any of them, email us.

Security

Traffic is encrypted in transit (HTTPS). Access to documents is enforced per document through roles and scoped tokens. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

Children

The service is not directed to children under 13, and we don't knowingly collect their data.

Changes

If this policy changes materially we will update this page and its date, and note the change on the site.

Contact

Questions or requests: [email protected]