Privacy Policy
Last updated: 8 October 2026
1. Who we are
glariu is run by [Operator full legal name], an individual. For privacy questions, email privacy@glariu.com.
When a company uses glariu for its people, that company is the controller of their data and glariu is the processor. For our website visitors and account owners, glariu is the controller.
2. What data we collect
| Type | Examples | Why |
|---|---|---|
| Account | Name, email, profile photo | Sign in and identify you |
| Work profile | Role, team, manager, level, skills | Show your career path and team |
| Growth content | Goals, 1-on-1 notes, agenda and action items, learning progress | The core features of glariu |
| Feedback and reviews | Kudos, feedback requests and answers, performance reviews | Feedback and review features |
| Feedback about glariu | Messages sent from the in-app feedback form | Improve the product. The glariu team reads it across companies, without your name |
| Usage data | Pages visited and clicks, only with your consent | Improve the product |
| Error data | Error reports, and screen replays with all text hidden only with your consent | Find and fix bugs |
We do not sell your data and we do not use it for advertising.
3. Legal basis
- Contract: to provide the service your company signed up for.
- Legitimate interest: security, preventing abuse and fixing bugs.
- Consent: product analytics. You can withdraw consent at any time.
4. Who we share data with
| Service | What it does | Where |
|---|---|---|
| Supabase | Database | EU (Frankfurt) |
| Vercel | Hosting | EU (Frankfurt) |
| Clerk | Sign-in and accounts | USA |
| OpenAI | AI suggestions (only text sent to AI features) | USA |
| PostHog | Product analytics (only with consent) | EU (Frankfurt) |
| Sentry | Error reports, plus screen replays only with consent (all text hidden) | USA |
| Resend | Emails | USA |
| Upstash | Rate limiting | USA |
Transfers outside the EU are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How we protect data
- Data is encrypted at rest and in transit.
- Database rules make sure each person only sees what they are allowed to see.
- Access to production systems is limited to the people who run glariu.
6. How long we keep data
- We keep your data while your account is active.
- When an account is deleted, its personal content is deleted. Shared items, such as meetings, stay for the other people in them without your name.
- Database backups are kept for a limited time and then removed.
7. Your rights
You can ask to see, correct, export or delete your data, or object to how we use it. Email privacy@glariu.com and we will reply within 30 days. You can also complain to your local data protection authority.
8. Cookies
We use cookies that are needed to sign you in. Analytics cookies are only set if you agree.
9. Changes
We will tell you about important changes by email or in the app.