Privacy Policy

1. Overview

Clivea currently operates a pre-launch website where visitors may join a waitlist, submit questions, provide optional feedback, and learn about our upcoming platform. We believe in collecting only the information reasonably necessary to operate our website and communicate with users.

2. Information You Provide

We may collect your full name, email address, expected MCAT month and year, optional survey responses, optional platform ratings, optional written feedback, and optional questions submitted through our website. Submission of this information is voluntary, although certain features such as joining the waitlist require an email address.

3. Information Collected Automatically

When you visit our website we may automatically collect technical information including your IP address, browser type, browser version, operating system, device type, approximate location derived from IP, referring pages, pages visited, session duration, click activity, cookies, local storage, and similar diagnostic information. This information helps us understand website performance, improve reliability, prevent abuse, and measure traffic.

4. How We Use Information

We use collected information to maintain our waitlist, send confirmation emails, notify you when Clivea launches, respond to questions, improve our website, understand visitor behavior, evaluate advertising effectiveness, prevent fraud, maintain security, comply with legal obligations, and communicate product updates. We do not sell your personal information.

5. Legal Basis

Where applicable, we process personal information based on your consent, our legitimate interests in operating and improving our Services, compliance with legal obligations, or steps taken before entering into a contract.

6. Analytics, Advertising & Your Privacy Choices

We may use analytics, search optimization, conversion measurement, and advertising technologies provided by trusted third parties. These tools help us understand website usage, improve user experience, measure campaigns, and understand how visitors discover Clivea. As our business evolves, providers may change.

Who these providers are

The technologies we use, or expect to use, on this website are:

• Google Analytics and Google Ads (Google LLC / Google Ireland Limited) — website measurement, and measuring which advertisements lead to a signup.
• Google Search Console (Google LLC) — how the site appears in Google Search. It uses no cookies and no advertising identifiers.
• Meta Pixel (Meta Platforms, Inc. / Meta Platforms Ireland Limited) — measuring advertisements on Facebook and Instagram.
• LinkedIn Insight Tag (LinkedIn Corporation / LinkedIn Ireland Unlimited Company) — measuring advertisements on LinkedIn.
• X Pixel (X Corp.) — measuring advertisements on X.
• Reddit Pixel (Reddit, Inc.) — measuring advertisements on Reddit.
• Vercel (Vercel, Inc.) — website hosting, and aggregate performance and traffic measurement.

Each provider sets its own cookies or similar identifiers, and each has its own privacy policy governing what it does with the information it receives. Advertising technologies are only loaded where they are permitted, and only in the state described below.

We do not sell your personal information

We do not sell your personal information, and we never have. However, some United States privacy laws — including the California Consumer Privacy Act as amended by the CPRA — define 'sharing' broadly enough to include the use of advertising cookies for cross-context behavioural advertising, even where no money changes hands. To that extent, our use of the advertising technologies listed above may be treated as 'sharing' your online identifiers and browsing activity with those providers. You can switch this off at any time, as described below. We do not knowingly sell or share the personal information of anyone under 16.

Your choices

• Your privacy choices. Select 'Your privacy choices' in the footer of any page to turn analytics and advertising technologies off, or back on. This is also how you exercise the right to opt out of 'sharing' described above.
• Global Privacy Control. If your browser or an extension sends a Global Privacy Control signal, we treat it as a valid opt-out request. Analytics and advertising technologies are switched off automatically, and we do not ask you again.
• Cookie banner. If you are in the European Economic Area, the United Kingdom, or Switzerland, no analytics or advertising cookies are set until you choose. Your choice is remembered, and you can change it at any time from the footer.
• Your browser. You can also block or delete cookies in your browser settings. Doing so does not affect joining the waitlist or asking us a question, which work with or without cookies.

Turning these technologies off does not remove any advertisement you see; it stops the measurement and the use of your information to select advertisements for you.

7. Third-Party Service Providers

We may work with providers for hosting, domain management, cloud infrastructure, email delivery, analytics, advertising, customer communications, fraud prevention, and website performance. These providers process personal information only to provide services to Clivea and are expected to protect that information appropriately.

The providers that currently receive personal information you give us are:

• Vercel, Inc. — hosting and delivery of this website.
• MongoDB, Inc. (MongoDB Atlas) — the database in which waitlist entries, questions, and feedback are stored.
• Resend (Plus Five Five, Inc.) — delivery of the confirmation email we send when you join the waitlist.
• Google Workspace (Google LLC) — the mailbox that receives your questions and our replies.

The advertising and analytics providers named in Section 6 receive online identifiers and browsing activity rather than the details you type into our forms. We do not send your name, email address, or MCAT test date to any advertising provider.

8. Feedback & Testimonials

If you voluntarily provide feedback, suggestions, or testimonials, we may review them internally to improve Clivea. If we wish to feature your comments publicly on our website, launch materials, or social media, we will request your permission before identifying you.

9. AI Features

The pre-launch website does not currently provide AI tutoring or AI conversations. If future versions introduce AI-powered learning experiences or personalized study recommendations, we will update this Privacy Policy before or when those features become available.

10. Data Retention

We retain waitlist information until you request deletion, unsubscribe, or until it is no longer necessary for the purposes described in this policy. Technical logs may be retained for security, diagnostics, and operational purposes for reasonable periods.

11. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted connections where appropriate, access controls, monitoring, and other industry-standard practices. Despite these efforts, no internet transmission or storage method is completely secure.

12. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to certain processing, withdraw consent where applicable, receive a copy of your information, and opt out of marketing communications. Verified requests will be handled within the timeframe required by applicable law.

To exercise any of these rights, email us at hello@clivea.ai. We will not discriminate against you for exercising them. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority, and withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

If you are in the United States, you may also opt out of analytics and advertising technologies at any time using the 'Your privacy choices' link in the footer of any page, or by sending a Global Privacy Control signal from your browser. Both are described in Section 6. Where the law allows an authorised agent to act for you, we may ask for proof of that authority.

13. International Transfers

Your information may be processed in the United States or other jurisdictions where our service providers operate. Clivea is based in the United States, and the providers named in Sections 6 and 7 host and process information there.

Where information is transferred out of the European Economic Area, the United Kingdom or Switzerland, that transfer is made under a lawful transfer mechanism — an adequacy decision where one applies, and otherwise the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant), which our providers incorporate into their data processing terms. You may request more information about the safeguards that apply by writing to hello@clivea.ai.

14. Children

Our Services are intended for people preparing for the MCAT and are not directed to anyone under 16 years of age. We do not knowingly collect personal information from anyone under 16, and we do not knowingly sell or share it. If you believe someone under 16 has given us personal information, write to hello@clivea.ai and we will delete it.

15. Business Transfers

If Clivea undergoes a merger, acquisition, investment, restructuring, or sale of assets, user information may be transferred as part of that transaction in accordance with applicable law.

16. Policy Updates

We may revise this Privacy Policy from time to time. Material changes will be reflected by updating the Last Updated date and, where appropriate, by additional notice.

17. Contact

Questions about this Privacy Policy may be directed to hello@clivea.ai.

Appendix: Additional Privacy Commitments

Clivea is committed to transparency, data minimization, and responsible stewardship of personal information. We strive to collect only information reasonably necessary for the operation and improvement of our Services. We review our practices periodically and may update internal procedures as our platform evolves. Where practical, we design systems that limit unnecessary collection, restrict internal access, and encourage secure handling of information. Users remain in control of the information they choose to provide.