Privacy Policy

Clara is a workplace communication coaching service operated by Workplace English Lab. This policy applies to the Clara website and application at clara.workplaceenglishlab.com, and to the Workplace English Lab automation that responds to comments and messages on our Instagram and Facebook accounts through Meta’s official platform integrations.

We process information that is necessary to provide these services. That includes information you give us directly and information we receive through authorised Meta integrations when you choose to interact with us on those platforms.

Information you provide directly. When you create a Clara account or use the service, we may process your email address, your account credentials in hashed form, the answers you give in the diagnostic and in lessons, your written practice responses, your progress through the programme, saved phrases, and your settings.

Spoken practice. When you answer out loud, your audio is sent for transcription and is then discarded. Raw learner recordings are not written to our database or to storage. The resulting text is kept with the rest of your practice so that feedback and progress work.

Payment information. Purchases are handled by our payment provider. We receive a record that a purchase occurred and the email address associated with it. We do not receive or store your full card details. If you delete your Clara account, this order record (order id, amount, and the purchase email) is kept and unlinked from your account — not removed — so a receipt request, refund, or payment dispute for that order can still be handled; it is kept only for as long as that purpose requires, and it is never used to restore the access the deleted account had or to profile your behavior. See User Data Deletion for the full explanation.

Information received through Meta integrations. If you comment on or message a Workplace English Lab Instagram or Facebook account, our application may receive and process:

• your Instagram or Facebook account identifier, and the public username or display name attached to it
• comments you make on Workplace English Lab posts
• messages you send to Workplace English Lab
• timestamps and related interaction metadata, such as which post or conversation the interaction belongs to
• the message or button selections you make inside an automated conversation, where those selections are needed to operate the automation you asked for

Technical information. Our servers and service providers process standard technical data such as IP address, browser type, and request logs, which are needed to deliver, secure, and debug the service.

We use the information described above to operate the service you asked for. Specifically, information received through Meta integrations is used only to:

• detect the automation triggers you initiate, such as a specific keyword left in a comment
• send the reply or private message you requested
• continue the conversation you started, including handling your replies and button selections
• operate, secure, debug, and improve the service

Account and practice information is used to run the coaching programme: to show your plan and progress, to generate feedback on your responses, to keep your saved material available, to confirm what you have access to, and to provide support when you contact us.

We may also use information where we are required to do so by law, or where it is necessary to prevent fraud and abuse or to protect the security of the service.

• We do not sell personal data.
• We do not use data received through Meta integrations for unrelated advertising, and we do not share it with advertising networks or data brokers.
• We do not request or use access beyond the data needed for the functionality you initiate.

The Workplace English Lab automation operates through Meta’s official Instagram and Facebook platform integrations. Your use of Instagram and Facebook is governed by Meta’s own terms and privacy policy, and data held by Meta on its own systems remains subject to Meta’s policies rather than this one.

We also rely on service providers to run Clara. These providers process data on our behalf, for the purposes described in this policy, and are not permitted to use it for their own unrelated purposes. They are:

• Google Cloud and Google’s Gemini models: transcribing your spoken practice, writing coaching feedback from the text of your practice, and generating Clara’s voice
• Supabase: our database and sign-in
• Vercel: hosting
• RevenueCat: confirming which plan you hold when you buy in the Apple App Store or Google Play, which handle those payments themselves
• Lemon Squeezy: payments for purchases made on the web
• Cloudflare: aggregate page analytics, described below
• an email provider, used for sign-in and account emails

We send these providers only what each one needs to do its job, such as your audio for transcription or the text of your practice for feedback. Raw audio is not kept, as described above.

We use Cloudflare Web Analytics to understand how Clara’s pages are used in aggregate. It runs a small script that reports the page visited, the referring page, and basic technical information such as browser and device type to Cloudflare, which processes it on our behalf. It does not use cookies and we do not use it to identify individual visitors or to track you across other sites.

We keep personal information for as long as it is needed for the purposes described in this policy, and then delete it or remove its link to you.

• Clara account and practice information is kept while your account is active, so that your plan, progress, and saved material remain available to you.
• Information received through Meta integrations is kept for as long as needed to run the conversation you started and to keep a record of the interaction for support, security, and abuse prevention.
• Raw spoken-practice audio is not retained: it is transcribed and then discarded.
• Limited records may be kept for longer where we are required to keep them for legal, accounting, security, or fraud-prevention reasons.

You can ask us to delete your information at any time — see User Data Deletion.

Data is transmitted over encrypted connections and stored with reputable infrastructure providers. Access to personal data inside Workplace English Lab is limited to the people who need it to operate and support the service, and account data is separated so that one learner’s material is not visible to another.

No online service can promise perfect security. If we become aware of a breach affecting your personal data, we will act on it and notify you where we are required to do so.

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to object to or restrict certain processing, and to withdraw consent where our processing relies on it.

To exercise any of these rights, contact contact@workplaceenglishlab.com. We may need to verify your identity or your control of the account before acting on a request.

You can request deletion of personal information associated with Clara or with Workplace English Lab, including information received through Instagram or Facebook. Email contact@workplaceenglishlab.com with the subject line “Data Deletion Request”. Full instructions, and what deletion does and does not cover, are on the User Data Deletion page.

Clara is intended for adults using English at work. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy as the service changes. The effective date at the top of this page shows when the current version took effect. Material changes will be reflected here before they take effect.

For any question about this policy or about your data, contact Workplace English Lab at contact@workplaceenglishlab.com.