Skip to content

Cloverpop Privacy Policy

Last Modified: 29 May 2024

Cloverpop is a product of Clearbox Decisions, Inc. We are committed to protecting the privacy of our users. This privacy policy describes how we will protect your personal and business information.

Plain English – Why do we care so much about privacy?

We are a values-driven company that helps with decisions at work. Many of these decisions are sensitive and involve private information. In order for us to help you, we have to earn and keep your trust. For you to trust us, we have to keep your information private and confidential. So it is not just the law that compels us to protect your privacy, it is also core to our values and our service.

Plain English – What you should know about the risks of using Cloverpop and how we reduce them.

  • We ask a lot of questions about your decisions. By policy and through technology described below, we protect that information and do not share it with any third parties without your explicit consent.
  • We encourage you to invite colleagues to weigh in on your decisions. Cloverpop is a collaborative app that depends in large part on teams of stakeholders weighing in with their perspectives. In order to maintain your privacy when you invite colleagues to weigh in on decisions, we only allow people to see decisions that: (1) they were specifically invited to weigh in on, or (2) are made by Teams that they are Members of. That also means that if you invite a colleague to one of your decisions, or make a decision on a Team that then they are Members of, they will know that you are the person making the decision, will be able to see certain information about that specific decision, and will know the identity and opinions of other colleagues who have also weighed in on it.
  • We analyze and publish aggregate information about the decisions in our Database. By policy and through technology described below, we protect that information and do not associate it with any information that could identify you, your company or specific information about your decisions.
  • We encourage you to ask us questions and give feedback via our customer support site. When you contact us via chat or email, we will know who you are and will ask questions as needed to respond to any concerns or feedback you give. Information from such inquiries is kept private unless you give us explicit permission to share it.
  • We encourage you to tell other people about Cloverpop. We post nothing about your decisions to Facebook, LinkedIn, Twitter or other social media services. But if you love your Cloverpop experience, we want to you tell everyone else about it. What you say is up to you.

What information do we collect?

  • Customer Relations Data: We collect information such as name, work email, company, department, company size and phone number on our marketing site in order to initialize customer relationships, deliver whitepapers, schedule demos and other customer relationship building interactions.
  • Customer Data: We collect information when you sign up for the Subscription Service, engage in a transaction, subscribe to communications from us, respond to a survey, fill out a form, engage with us for customer support, or use the Subscription Service. When using our site, registering on our site, or purchasing Subscription Services , as appropriate, you may be asked to enter information including (without limitation): name, e-mail address, gender, birthday, text boxes, questionnaire responses, location, phone number or credit card information.

What do we use your information for?

The information we collect from you may be used in the following ways:

  • To provide the Subscription Service to you – it is the nature of the app to collect information about your decisions, use that information to help you analyze and communicate about your decision, and provide a service based on the information you provide.
  • To improve our understanding of decisions – we are building the world’s largest database of business decisions, and using that information to improve the Cloverpop Subscription Service, provide data for scientific research and help you make such decisions more wisely.
  • To improve our website experience – we continually strive to improve our website offerings based on the information and feedback we receive from you.
  • To improve customer service – your information helps us to more effectively respond to any problems you find or needs you may have.
  • To process transactions – your information will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested.
  • To administer a contest, promotion, survey or other site feature.
  • To send periodic emails – the email address you provide when registering to use the Subscription Service may be used to send you information about your use of the Subscription Service and updates pertaining to any transactions on the site, in addition to receiving occasional company news, updates, related product or service information, etc.

Note: If at any time you would like to unsubscribe from receiving emails that are not required in the course of providing the Cloverpop service, just let us know by replying to an email, or using the unsubscribe instructions at the bottom of an email.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information or complete a transaction.

You may invite other people to weigh in on your decisions. Those people must verify their identity by demonstrating they own the email address you used when you invited them. There is no public view of Cloverpop Users or their decision information.

We use a secure server. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology and then protected in our Database to be only accessed by those authorized with special access rights to our systems, who are required to keep the information confidential.

Private financial information (credit cards, social security numbers, financials, etc.) is not stored on our servers after a transaction.

If you believe your information has been compromised in any way, please contact our Data Protection Officer immediately at privacy@cloverpop.com. If we detect a data breach we will follow the notification guidelines established by the General Data Protection Regulation (GDPR) and may notify you depending on the nature of the breach.

Do we use cookies?

Our website may use “cookies,” which store many types of data, to make your experience easier and more enjoyable. You may set your browser to refuse these cookies by seeing the help section of your browser. We work with third parties for purposes of conversion tracking your clicks from our advertisements and social media posts on other websites, including storing and accessing cookies. Specifically, you may opt out of Twitter's interest-based advertising here and LinkedIn's website demographics here.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information without your explicit consent in each case. This does not include trusted third parties who help us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. If we use or share other information, it will not include personally identifying information. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided in aggregate to other parties for scientific or academic research or other uses.

In addition, as we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, personally identifiable information may be part of the transferred assets.

How we share your information

We make collaborative decision software. This means sharing information through Cloverpop and with third parties.  We share your information as discussed below.

Sharing with other Cloverpop users

When you use Cloverpop, we share certain information about you with other users.

  • For decision-making: You can create content which may contain information about you, and grant permission to others to use that content based on settings you or your administrator select.  Some of the decision-making features of Cloverpop display your profile information to other users. For example, when you comment on a decision, we may display your name next to your comments so that other users with access to the decision understand who made the comment.
  • Community forums:  We offer offer publicly accessible blogs, web forums, issue trackers and Slack and MS Teams communities. You should be aware that any information you provide on these websites -- including information associated with the account you use to post -- may be seen by others and may remain even after you terminate your account. Consider the sensitivity of any information you input into suchg forums. To request removal of your information from publicly accessible websites operated by us, please contact us as provided below.
  • Managed accounts and administrators: If you register or access Cloverpop using an email address owned by your employer or organization, and such organization wishes to establish an account, certain personal information about you including may become accessible to that organization’s administrator and other Cloverpop users in the organization.

Sharing with 3rd parties

We share information with the following types of third parties to help us operate, provide, improve, integrate, customize, support and market our Services. The information shared with 3rd parties may include personal information, specifically your name and email address.

  • Service Providers: We use service providers to provide hosting, messaging and emailing, payment processing, and other services for us, which may require them to access information about you. If a service provider accesses information about you to perform services on our behalf, they do so with our careful control to protect your information. For a list of our sub-processors, see https://www.cloverpop.com/sub-processors.
  • Cloverpop Partners: We work with third parties who provide consulting services to deliver and implement customer solutions around the Services. We may share your information with these third parties in connection with their services, such as to deliver training services.
  • Third Party Links and Widgets: Occasionally, at our discretion, we may include links to third-party products or services on our website or blog, or include widgets to interact with third parties or social media sites. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
  • Testimonials: When you give us consent, we may share personal customer testimonials on our website or in social media, and those testimonials may include your name.
  • Law Enforcement Requests and Applicable Laws: In exceptional circumstances, we may share information about you with a third party if we believe that sharing is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request, including to meet national security requirements; or respond to an emergency which we believe in good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.
  • Enforcing Our Rights: In exceptional circumstances, we may share information about you with a third party if we believe that sharing is reasonably necessary to enforce our agreements, policies and terms of service; to protect the security or integrity of our products and services; or to protect our company, our customers or the public from harm or illegal activities.
  • Data Privacy: In cases of onward transfer to third parties of Personal Data received pursuant to the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework, Clearbox Decisions, Inc. is potentially liable if its agent processes such personal information in a manner inconsistent with the Principles, unless we prove that we are not responsible for the action that caused the damage.

Your Privacy Choices and Rights

We value your privacy and provide you with options to control how your personal data is used and disclosed. This section explains the choices and means we offer to help you manage your personal data, provide consent and opt-out of communications, manage cookies and tracking technology and access your data.

  • Marketing Communications: You can choose to receive or not receive marketing communications from us. If you have opted in and wish to opt out later, you can unsubscribe by following the instructions included in each marketing email or by contacting us at privacy@cloverpop.com.
  • Third-Party Sharing: We do not share your personal data with third parties for their direct marketing purposes without your explicit consent. If you previously consented and wish to revoke that consent, please contact us at privacy@cloverpop.com.
  • Account Settings: You can access and update your personal data directly through your account settings on our platform. This includes changing your preferences for how your data is used.
  • Deletion and Deactivation: You can request the deletion or deactivation of your account and associated data by contacting our support team via the application interface or emailing support@cloverpop.com. We will process your request in accordance with applicable laws.
  • Browser Settings: You can manage how cookies are used on our website by adjusting your browser settings. Most browsers provide options to block cookies, delete cookies, or alert you when cookies are being used.
  • Opt-Out Mechanisms: For interest-based advertising, you can opt out through mechanisms provided by organizations such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI).
  • Access Requests: You have the right to request access to the personal data we hold about you. To make such a request, contact us at privacy@cloverpop.com with your full name and the nature of your request.
  • Correction Requests: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request corrections. You can update your information directly through your account settings or contact us at privacy@cloverpop.com.
  • Data Portability: You have the right to request a copy of your personal data in a commonly used electronic format. To request data portability, please contact us at privacy@cloverpop.com.
  • Right to Restrict Processing: You can request that we restrict the processing of your personal data under certain conditions. To make such a request, contact us at privacy@cloverpop.com.
  • Additional Questions: For any privacy-related concerns or questions, you can contact our Data Protection Officer at privacy@cloverpop.com.
  • Complaint Handling: If you have any complaints about how we handle your personal data, please contact us at privacy@cloverpop.com . If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Your Rights Regarding Your Personal Data

You have the right to request access to the personal data we hold about you. This right allows you to obtain a copy of your personal information, understand how we use it, and with whom it is shared.

To exercise your right to access your personal data:

  1. Contact Us: Email our Data Protection Officer at privacy@cloverpop.com or send a written request to Clearbox Decisions, Inc., 320 W. Ohio St, Suite 300-W, Chicago, IL 60654.
  2. Provide Information: Include your full name, contact details, and a description of the data you wish to access.
  3. Verify Your Identity: We may need to verify your identity before processing your request to ensure the security of your data.
  4. Response Time: We will respond to your request within 30 days. If more time is needed, we will inform you of the reason for the delay and the extended deadline.

You also have these rights:

  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data under certain conditions.
  • Right to Restrict Processing: Request limitation of data processing under specific circumstances.
  • Right to Data Portability: Obtain and reuse your data for your own purposes across different services.
  • Right to Object: Object to the processing of your data in certain situations, including for direct marketing.
  • Right to Withdraw Consent: Withdraw your consent at any time if we are processing your data based on consent.

Managing Your Personal Data

The Cloverpop software platform hosts and processes customer data, including personal data, based on the instructions provided by Cloverpop’s subscription customers. Cloverpop acts as an agent processing this personal data on behalf of its customers. Consequently, Cloverpop does not own or control the personal data it processes for its customers and does not have a direct relationship with the users whose personal data is processed. Each customer determines what information, including personal data, is collected from its users, how that information is used and disclosed, and how it can be modified. Therefore, users of the subscription Service should contact their customer administrator with any questions or requests regarding the access or correction of personal data contained within the customer data.

If you are an authorized user of the Service, you can update your Customer Data on the user profile page of the product, and you may delete decision-related data directly in the application interface. Your data is retained as long as your account is active. You can request to deactivate your account and delete associated data by contacting Cloverpop support via the application interface or by emailing support@cloverpop.com.

If you submitted data through our marketing site (see Customer Relations Data) and would like to update, delete or receive a copy of that data please contact privacy@cloverpop.com.

California Online Privacy Protection Act Compliance

Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

As part of the California Online Privacy Protection Act, all users of our service who create a personal profile may make any changes to their information at anytime by logging in at cloverpop.com.

Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old, and are generally used by adult business people in management positions.

EU-US and Swiss-US Data Privacy Framework

Clearbox Decisions, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Clearbox Decisions, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Clearbox Decisions, Inc. has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Clearbox Decisions, Inc. commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact Clearbox Decisions, Inc. at: privacy@cloverpop.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Clearbox Decisions, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/file-a-dpf-claim for more information or to file a complaint. The services of JAMS are provided at no cost to you.

We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Right to Invoke Binding Arbitration

Under certain conditions, you have the right to invoke binding arbitration to resolve complaints regarding our compliance with the DPF Principles. This section outlines the conditions and procedures for invoking arbitration.

You may invoke binding arbitration provided that:

  • You have raised the complaint directly with us and provided us the opportunity to resolve the issue.
  • You have made use of the independent dispute resolution mechanism described in this privacy policy.
  • The issue has not been resolved through the above mechanisms.
  • Your complaint pertains to a violation of the DPF Principles.

To invoke binding arbitration, you must follow these steps:

  1. Deliver Notice: You must deliver notice to Clearbox Decisions, Inc. at privacy@cloverpop.com indicating your intention to invoke binding arbitration.
  2. Follow Procedures: Follow the procedures and meet the conditions set forth in Annex I of the DPF Principles. This includes providing a detailed description of your complaint, any relevant documentation, and the resolution you seek.

The arbitration process is governed by Annex I of the DPF Principles. For detailed information on the arbitration procedures and conditions, please refer to Annex I of the Data Privacy Framework Principles.

Online Privacy Policy Only

This online privacy policy applies only to information collected through our website and via our Subscription Service and not to information collected offline.

Your Consent

By using our website and Subscription Service, you consent to our Privacy Policy and Customer Terms of Service.

Customer Terms of Service

You can review our Customer Terms of Service at https://www.cloverpop.com/terms-of-service.

Changes to our Privacy Policy

If we decide to change our Privacy Policy, we will post those changes on this page, and/or update the Privacy Policy modification date. This policy was originally posted on 2 April 2021, received significant edits on 24 May 2021 and was updated with SOC2 compliance information on 26 Oct 2021. This policy was updated on 25 May 2022 to reflect our updated Privacy Shield certification as Clearbox Decisions, Inc. This policy was updated on 14 May 2024 to reflect our updated certification of the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. This policy was updated on 29 May 2024 to expand the explanation of your privacy and personal data rights and include the right to binding arbitration.

SOC2 Compliance

The Cloverpop service has completed a SOC2 Type 1 compliance audit. Prospective customers may request the audited report.

Contact Us

If there are any questions about this Privacy Policy you may contact us using the information below.

Clearbox Decisions, Inc.
320 W. Ohio St, Suite 300-W
Chicago, IL 60654
privacy@cloverpop.com