Privacy Policy

1. Introduction

Arialy Inc., doing business as "Clave" ("we," "our," or "us"), operates the Clave platform, an AI-powered operations assistant service for Quick Service Restaurant (QSR) franchises. This Privacy Policy applies to all services operated by Arialy Inc., available through tryclave.ai, clave.restaurant, and any related subdomains (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using Clave, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password, and other registration details
Business Information: Company name, franchise information, store locations, and operational data
Financial Data: Sales data, transaction records, POS system data, and other financial information
Operational Data: Documentation, procedures, training materials, inventory data, and other business documents
Integration Data: Data from connected systems including POS systems, inventory management, labor scheduling, ERP systems, and other business tools you choose to integrate
Communication Data: Messages, support requests, voice interactions, and other communications with our AI agents

2.2 Automatically Collected Information

Usage Data: Log files, access times, pages viewed, features used, and interaction patterns
Device Information: IP address, browser type, operating system, device identifiers
Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience

3. How We Use Your Information

We use the collected information for the following purposes:

To provide, maintain, and improve our AI-powered services
To process transactions and manage your account
To generate analytics, reports, and insights for your operations
To enable voice assistants and AI-powered features
To analyze data across your connected systems (POS, inventory, labor, ERP) and provide actionable recommendations
To execute automated actions and recommendations across your store locations, as authorized by you
To monitor store-level metrics and provide real-time alerts and insights
To communicate with you about your account, updates, and support
To ensure security, prevent fraud, and comply with legal obligations
To personalize your experience and provide relevant recommendations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We may share data with trusted third-party service providers who assist us in operating our platform. These providers are contractually obligated to protect your data and may only process it to provide services to us. Our current subprocessors include:

Cloud hosting & database: Supabase, Railway — store and process your account, business, and operational data.
AI language models (assistant responses): Anthropic (Claude) and Google (Gemini). We send the messages you submit and the operational data you request so the assistant can generate responses.
AI model routing: OpenRouter — routes requests to the appropriate AI model provider on our behalf. Your messages pass through OpenRouter before reaching the model provider.
Voice services: Deepgram (speech-to-text), ElevenLabs (text-to-speech), and Daily (real-time audio transport) — process audio during voice assistant sessions.
Document search: OpenAI — generates text embeddings used solely to index your connected documents for semantic search.
Analytics & monitoring: PostHog (product analytics) and Sentry (error monitoring) — receive usage and diagnostic data to help us maintain and improve the Service.

We do not share your data with any of these providers for advertising purposes.

4.2 Third-Party Integrations

When you connect Clave to third-party systems (such as POS systems, inventory management, labor scheduling, or ERP systems), we access and process data from those systems solely to provide our services. We do not share your data with these third-party systems beyond what is necessary to perform the integrations you have authorized. Your data remains under your control, and you can disconnect integrations at any time.

4.3 Multi-Tenant Architecture

Clave operates on a multi-tenant architecture. Your data is isolated by tenant and is not accessible by other tenants. Each organization's data remains separate and secure.

4.4 Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the same privacy protections.

5. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit and at rest
Role-based access control and authentication
Regular security audits and monitoring
Secure API endpoints and authentication
Compliance with industry security standards

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal data, subject to legal retention requirements.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data
Portability: Request transfer of your data
Objection: Object to certain processing activities
Withdrawal: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at team@tryclave.ai.

Entity disclosure. "Clave" is the product brand and the DBA ("doing business as") name of Arialy Inc., the legal entity that owns and operates the Clave platform. Customers know us as "Clave"; the legal entity on contracts, invoices, and regulatory filings (including this SMS campaign) is Arialy Inc.

No sale or sharing of mobile information. Arialy Inc. (dba Clave) does not sell, rent, or share mobile phone numbers, SMS opt-in data, or SMS message content with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent records are explicitly excluded from any data sharing covered elsewhere in this Privacy Policy.

Arialy Inc. (dba Clave) sends SMS messages to authenticated business users regarding the restaurant operations they manage. This is an enterprise B2B platform — recipients are exclusively restaurant owners, franchise operators, multi-unit managers, and corporate operations staff at our customer organizations. We do not send SMS to end consumers, diners, or the general public.

Clave is invite-only. Users cannot self-register. Access is granted exclusively through enterprise agreements, where an organization's admin receives an account and invites team members directly through the platform.

8.1 SMS Consent — Call to Action

Users provide explicit, affirmative consent to receive SMS messages through the Clave platform. Each user must actively check an SMS consent checkbox in their profile settings before any messages are sent. Users are invited by their organization but must individually opt in. The organization cannot opt users in on their behalf.

Each user manages their own SMS consent under Settings > My Profile in the Clave platform. The consent checkbox is unchecked by default. The user must actively check the box and click Save before any SMS messages are sent. Consent status, IP address, and timestamp are recorded in our audit log.

The screenshot below shows the SMS consent checkbox as it appears in the Clave platform under Settings → My Profile on first visit. The box is empty by default — the user must affirmatively check it and click Save before any SMS is sent. The Clave logo (top-left of the sidebar) identifies the sender; the checkbox label discloses message type, use case, frequency, rates, and STOP/HELP keywords as required by CTIA guidelines.

Settings → My Profile: SMS consent checkbox is unchecked on first visit. The user must actively check the box and click Save before any SMS is sent.

When an admin invites a new team member, the invitation form does not expose any SMS consent control. Admins cannot opt invitees in on their behalf; the invited member must opt in themselves from their own Settings → My Profile page (shown above) after logging in. This is enforced both in the UI and server-side — the server rejects any attempt to set another user's SMS consent.

8.2 Message Categories

SMS messages are operational notifications sent to the user about the restaurant locations they operate. Messages fall into the following categories:

Daily sales summaries — revenue totals and top-performing locations.
Weekly labor cost reports — payroll-to-sales ratios and target variance by store.
Performance anomaly alerts — statistical deviations in sales, labor, or operational metrics.
Menu-mix and product performance insights — item- and channel-level top performers.
Comparative sales analysis — period-over-period summaries.
Scheduled report availability reminders — notifications when a daily, weekly, or monthly report is ready in the dashboard.
Promotion and campaign go-live alerts — internal operational notices to the operator informing them that a corporate or store-level promotion has launched, is about to launch, or is ending, so they can ensure in-store execution (signage, POS pricing, staff briefing). These are operational notices to the operator about their own stores' promotions, not marketing offers to consumers.

8.3 Sample Messages

"Clave: Daily sales summary — $12,450 across 5 locations. Top store: Doral $3,200. Reply STOP to opt out, HELP for help."
"Clave: Weston location sales down 15% vs last week. View breakdown in your dashboard. Reply STOP to opt out, HELP for help."
"Clave: Weekly labor report ready. Total labor $8,200 (28.5% of sales). 2 stores exceeded target. Reply STOP to opt out, HELP for help."
"Clave: Yesterday's top item — Classic Burger, 342 units sold across all locations. Reply STOP to opt out, HELP for help."
"Clave: $5 Classic Burger LTO launches Monday across all 5 locations. Confirm POS pricing is updated and staff briefed. Reply STOP to opt out, HELP for help."
"Clave: Your March sales report is ready. Check your dashboard for details. Reply STOP to opt out, HELP for help."

8.4 Message Frequency

Frequency varies by the alerts each user enables — typically 1–7 messages per week per user. Messages are operational only. We never send marketing or promotional content via SMS.

8.5 Opting Out

You can opt out of SMS communications at any time by:

Replying STOP to any message — you will receive a confirmation: "You have successfully been unsubscribed. You will not receive any more messages from this number. Reply START to resubscribe."
Unchecking the messaging consent checkbox in your account profile settings

After opting out, you will no longer receive SMS messages from Clave. To opt back in, re-enable the consent checkbox in your profile settings.

8.6 Message and Data Rates

Standard message and data rates may apply depending on your mobile carrier and plan. Clave is not responsible for any charges from your carrier.

8.7 Help

For help with SMS communications, reply HELP to any message. Response: "Clave (Arialy Inc.): Reply STOP to unsubscribe. Msg & data rates may apply. Contact team@tryclave.ai for support." You can also contact us at team@tryclave.ai.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and assist with security. You can control cookies through your browser settings, though disabling cookies may affect the functionality of our service.

10. Children's Privacy

Clave is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Legal Entity: Arialy Inc., dba Clave

Address: 5966 S Dixie Hwy Ste 300, South Miami, FL 33143, US

Email: team@tryclave.ai

Websites: tryclave.ai | clave.restaurant