1. Introduction & Scope
Clever Solutions LLC ("Clever," "we," "us," or "our"), doing business as CleverSol.ai, is a software and artificial-intelligence solutions company. We design, build, and operate software applications and integrations — including integrations that connect to third-party services — both for our own use and on behalf of our clients, and we use AI providers to power certain features.
This Privacy Policy explains how we collect, use, share, store, and protect information in connection with:
- our website at https://cleversol.ai;
- the professional services and software solutions we provide to clients; and
- our own first-party software and the integrations we build and operate that connect, with authorization, to third-party services — including Intuit QuickBooks Online, Microsoft SharePoint, Microsoft Exchange / Microsoft 365, and Google Drive — and the AI providers (such as Anthropic and OpenAI) that help power our features. Among these is a private, internal-use integration with QuickBooks Online ("QuickBooks"), an accounting service provided by Intuit Inc. ("Intuit") (the "QuickBooks Integration"), described in Section 9.
We may add, remove, or change the third-party services we integrate from time to time. The examples named in this Policy are illustrative of the kinds of services we do or may support — such as other accounting systems, cloud storage providers, email and communication platforms, CRM systems, and AI/ML providers — and are not an exhaustive list.
Where we build or operate a solution for a client, that client generally determines how personal data is handled within their solution, and our processing is governed by our agreement with them (see Section 2). Additional, product- or client-specific privacy notices may supplement this Policy for particular solutions.
2. Our Role — Controller and Processor
- When we act as a controller. For our website, our own business operations, and our first-party tools such as the QuickBooks Integration, we determine the purposes and means of processing and act as the data controller.
- When we act as a processor / service provider. When we build or operate a solution for a client, we typically process data on that client's behalf and under their instructions. In those cases the client is the controller, the client's own privacy notice applies to their end users, and our processing is governed by the applicable services agreement and any data processing terms. We do not use client data for our own independent purposes except as permitted by that agreement or as required by law.
3. Information We Collect
Depending on the context, we collect and process the following categories of information:
Website and contact information you provide — such as name, business email, company, role, contact-form submissions, and the contents of your communications with us.
Website usage information — such as log data, device and browser information, IP address, and similar technical data collected when you visit our website, including through cookies and analytics (see Section 11).
Client and project data — information and materials that clients provide, or authorize us to access, so we can design, build, test, and operate their solutions. This may include personal data belonging to a client's own users, which we process as a processor (Section 2).
Data from connected third-party services. With authorization, our integrations access data from the third-party services a user or client connects. Depending on the integration, this includes:
- Intuit QuickBooks Online — accounting and financial data, such as financial reports (Profit & Loss statement, Balance Sheet, Trial Balance), the chart of accounts, account balances, and company profile information, accessed on a read-only basis (see Section 9).
- Microsoft SharePoint — documents and files, and related file/folder metadata, from authorized SharePoint sites or libraries.
- Microsoft Exchange / Microsoft 365 — email and mailbox data, such as messages, attachments, and related metadata, from authorized mailboxes.
- Google Drive — files and documents, and related file metadata, from authorized Google Drive accounts.
- Other connected services — data from additional third-party services we may integrate from time to time (for example other accounting systems, cloud storage providers, email/communication platforms, and CRM systems), accessed only with authorization and used to provide the requested service.
We access this data only with authorization, use it to provide the relevant service, and do not sell or rent it.
Data processed by AI providers. To power certain features, we send data to third-party AI/LLM providers — currently Anthropic and OpenAI — which process it to generate outputs. This processing is described in Section 5.
OAuth 2.0 access/refresh tokens and API credentials. To connect to QuickBooks, Microsoft, Google, and other authorized systems, we use OAuth 2.0 authorization and API credentials. This generates access and refresh tokens (or equivalent credentials) that let our software retrieve data on the authorized party's behalf. These tokens and credentials are treated as sensitive and are stored securely (Section 7). We do not collect or store third-party account passwords; authentication is handled by the provider (for QuickBooks, by Intuit; for SharePoint/Exchange, by Microsoft; for Drive, by Google).
4. How We Use Information
We use the information we collect to:
- provide, operate, and improve our website, professional services, and software solutions;
- design, build, test, deploy, and support solutions for our clients and for ourselves;
- operate our integrations — including using the QuickBooks Integration to support internal month-end close, reconciliation, and financial analysis, and using document, file, and email integrations to provide their intended functionality;
- develop and operate AI-enabled features, subject to the safeguards in Section 5;
- communicate with you, respond to requests, and provide support;
- maintain the security, integrity, and reliability of our systems; and
- comply with legal, accounting, audit, and contractual obligations.
We do not sell or rent personal information, and we do not use the information for advertising or for any purpose unrelated to those described here.
5. Artificial Intelligence & Automated Processing
Because we build and operate AI-enabled solutions, some of our services and internal tools use machine-learning and other AI systems, including AI models provided by third-party vendors — currently Anthropic and OpenAI. We apply the following practices:
- Human oversight. AI-generated outputs are tools to assist people; they are subject to human review and are not used as the sole basis for decisions that produce legal or similarly significant effects without meaningful human involvement.
- Model-training limits. We do not use client confidential data, personal data, or data accessed through connected services (including QuickBooks data) to train publicly available or general-purpose AI models. Where we use third-party AI providers to process such data, we use business or enterprise offerings configured so that inputs and outputs are not used to train the provider's general models, subject to that provider's terms.
- Vendors as subprocessors. AI model providers (such as Anthropic and OpenAI) and related infrastructure act as our service providers / subprocessors and are bound by contractual confidentiality and security obligations. When we act as a processor for a client, our use of AI subprocessors is governed by our agreement with that client.
- Accuracy and limitations. AI systems can produce inaccurate or incomplete output. Outputs are reviewed by qualified people before being relied upon, and AI output is not a substitute for professional accounting, tax, legal, or other professional advice.
6. Data Sharing & Disclosure
We do not sell or rent personal information, and we do not share it with third parties for their own independent purposes. We share information only as follows:
- Service providers / subprocessors — such as cloud hosting and infrastructure providers and AI model providers (including Anthropic and OpenAI) — who process data on our behalf under contracts requiring appropriate confidentiality and security.
- Connected third-party services — where you authorize an integration, data flows between our software and that service (for example Intuit for QuickBooks, Microsoft for SharePoint and Exchange/Microsoft 365, and Google for Drive) as needed to provide the integration.
- Clients — where we operate a solution on a client's behalf, data is handled for, and shared with, that client as controller.
- Legal and safety — where required by law, regulation, subpoena, court order, or valid legal process, or to protect our rights, our users, or the public.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
7. Data Storage & Security
- Storage. Data we control — including data accessed through our integrations and any derived reports — is stored in private, access-controlled databases and systems operated by or for us. Client-solution data is stored in accordance with the applicable client agreement.
- Access controls. Access is limited to authorized personnel who need it for the purposes described here.
- Token and credential security. OAuth access/refresh tokens and API credentials for connected services are treated as sensitive credentials and stored securely, with access restricted to the components and personnel that require them.
- Safeguards. We apply reasonable administrative, technical, and organizational measures — including access controls and encryption in transit, and at rest where appropriate — designed to protect information against unauthorized access, disclosure, alteration, or destruction.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect information using commercially reasonable practices.
8. Data Retention
We retain information only for as long as necessary to fulfill the purposes described in this Policy, to provide our services, and to meet legal, accounting, audit, contractual, or recordkeeping obligations. Data accessed through connected services and any derived reports are retained only as needed for the purposes for which they were accessed and then deleted or securely disposed of. OAuth tokens and API credentials are retained only while the relevant connection remains active and are invalidated upon disconnection or revocation (Section 9). Client-solution data is retained and deleted in accordance with the applicable client agreement.
9. QuickBooks / Intuit-Specific Disclosures
This section describes specifically how the QuickBooks Integration handles QuickBooks Online data, in addition to the general practices above.
- Authorized, read-only access. The QuickBooks Integration accesses QuickBooks Online data only after the company authorizes the connection through Intuit's OAuth 2.0 flow, and only in read-only mode. It does not create, write to, modify, or delete any data in QuickBooks.
- What is accessed and why. With authorization, the Integration reads accounting and financial data — including financial reports (such as the Profit & Loss statement, Balance Sheet, and Trial Balance), the chart of accounts, account balances, and company profile information — solely for the authorized company's internal month-end close, reconciliation, and financial analysis. It is a private, internal tool and is not offered to the general public or to outside users.
- Not sold or shared. QuickBooks data is never sold, rented, or shared with third parties for their own purposes; it is used only for the authorized internal purposes described here.
- Compliance with Intuit requirements. We handle QuickBooks data in accordance with Intuit's applicable developer and data-handling requirements, limiting use of the data to the authorized internal purposes and protecting it with appropriate safeguards.
- No use for AI model training. We do not use QuickBooks Online data to train publicly available or general-purpose AI models (see Section 5).
- How to disconnect or revoke access. Authorization can be revoked at any time. You may disconnect the Integration from within its settings or by contacting us at legal@cleversol.ai, and/or revoke access directly through Intuit — for example, by signing in to the QuickBooks Online company file and removing the connected app under the account's "Apps" / connected-apps settings. Upon disconnection or revocation, the Integration can no longer retrieve new data from QuickBooks and the associated OAuth tokens are invalidated.
10. Third-Party Services
Our website, software, and integrations rely on third parties, including:
- Intuit — QuickBooks Online (accounting data); see Intuit's privacy policy at https://www.intuit.com/privacy/.
- Microsoft — SharePoint (documents/files) and Exchange / Microsoft 365 (email and mailbox data); see Microsoft's privacy statement at https://privacy.microsoft.com/privacystatement.
- Google — Google Drive (files/documents); see Google's privacy policy at https://policies.google.com/privacy.
- Anthropic and OpenAI — AI/LLM providers that may process data to power features; see https://www.anthropic.com/legal/privacy and https://openai.com/policies/privacy-policy.
- Cloud hosting and infrastructure providers that support our systems.
- Other third-party services we may integrate from time to time.
Your use of these third-party services is governed by their own terms and privacy policies, which are separate from this Policy. These third parties are responsible for their own data practices.
11. Cookies & Analytics
Our website uses cookies and similar technologies that are necessary to operate the site and, where applicable, to understand and improve how it is used. You can control cookies through your browser settings; disabling some cookies may affect site functionality.
12. International Data Transfers
We are based in the United States, and information we process may be stored and processed in the United States or in other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers of personal data.
13. Your Choices & Rights
- Connection control. The company or user controls whether an integration is connected to its third-party service account(s) and may disconnect or revoke access at any time (Section 9).
- Access, correction, and deletion. Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you by contacting legal@cleversol.ai. Where we process data on behalf of a client, we will refer your request to that client and support them in responding.
- Jurisdiction-specific rights. Depending on where you live, you may have additional rights under applicable privacy laws (such as the rights to access, correct, delete, or restrict certain processing, and to non-discrimination for exercising those rights). We honor valid requests as required by law.
14. Children's Privacy
Our website and services are directed to businesses and are not intended for children, and we do not knowingly collect personal information from children.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, our practices, or legal requirements. When we do, we will revise the "Effective Date" above and post the updated Policy at https://cleversol.ai/privacy. Material changes will be identified where practicable. Continued use after an update constitutes acknowledgment of the revised Policy.
16. Contact
If you have questions or requests regarding this Privacy Policy or our data practices, contact:
Clever Solutions LLC 1449 S Michigan Ave STE 13144 Chicago, IL 60605 Email: legal@cleversol.ai Website: https://cleversol.ai