Privacy
How Clinamenic LLC collects, uses, and shares personal information for the Exedra suite hub.
This Privacy notice describes how Clinamenic LLC (“we,” “us,” or “our”) collects, uses, and shares personal information when you use the Exedra suite hub and gated suite applications (the “Service”).
This notice is intended for a US-first audience and includes disclosures relevant to U.S. state privacy laws, including the California Consumer Privacy Act (CCPA), as amended.
Contact: vario@clinamenic.com
Privacy requests: vario@clinamenic.com
1. Who we are
Exedra is operated by Clinamenic LLC. This notice covers the hub at exedra.studio and suite applications served through it at {slug}.exedra.studio.
2. Scope
This notice applies to personal information we collect through the Service. It does not cover third-party websites or services linked from the Service, including sign-in providers (Google, GitHub) or payment processors, which have their own privacy policies.
3. Information we collect
We collect the following categories of personal information:
| Category | Examples | Source |
|---|---|---|
| Identifiers and account data | Email address, name (if provided), Account ID | You; Account registration |
| Authentication data | Password hash, email verification status, OAuth provider identifiers when you use Google or GitHub sign-in | You; sign-in providers |
| Billing and transaction data | Stripe Customer, Subscription, and Price IDs; purchase records; billing address; tax identifiers collected at checkout | You; Stripe Checkout |
| Entitlement data | Subscription status, One-time Purchases, access grants, access codes | Service operation |
| Communications | Support correspondence; verification and password-reset email content metadata | You; our email systems |
| Technical data | Session cookies; IP address and request logs from hosting infrastructure | Your device; our servers |
We do not store full payment card numbers on our servers. Card data is collected and processed by Stripe on Stripe-hosted Checkout pages.
4. How we use information
We use personal information to:
- Create and secure Accounts and authenticate users;
- Provide hosted suite access and enforce entitlements;
- Process Subscriptions and One-time Purchases, including tax calculation where enabled;
- Send transactional emails (verification, password reset, billing-related notices from Stripe);
- Prevent fraud, abuse, and unauthorized access;
- Comply with legal, tax, and accounting obligations;
- Improve and operate the Service.
5. Legal bases (summary)
Where U.S. state or other privacy laws require a legal basis, we rely on performance of a contract (providing the Service you requested); legitimate interests (security, abuse prevention, improving the Service); legal obligation (tax and record-keeping); and consent where applicable (for example, optional sign-in methods or non-essential cookies if introduced).
6. How we share information
We do not sell your personal information. We share personal information with service providers who process it on our behalf only as needed to operate the Service:
| Sub-processor | Purpose | Privacy / DPA |
|---|---|---|
| Stripe, Inc. | Payment processing, billing, tax calculation | stripe.com/legal/privacy, stripe.com/legal/dpa |
| Email provider (via configured SMTP) | Transactional email (verification, password reset) | Provider depends on operator configuration |
| Google / GitHub (when enabled) | OAuth sign-in | Google Privacy Policy, GitHub Privacy Statement |
| Self-managed hosting (Tekhnema) | Application hosting, PostgreSQL database for hub data | Operated by Clinamenic LLC / its contractors |
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale with notice as required by law.
7. Cookies and similar technologies
We use essential session cookies to keep you signed in. These cookies are required for Account authentication. We do not use advertising cookies on the hub today. If we introduce analytics or non-essential cookies, we will update this notice and provide choices where required by law.
Session cookie name pattern: authjs.session-token (or __Secure-authjs.session-token over HTTPS).
8. Retention
We retain personal information only as long as necessary for the purposes described above:
| Data type | Retention |
|---|---|
| Account and entitlement data | While Account is active, plus 3 years after closure |
| Billing and purchase records | 7 years |
| Server and access logs | 90 days |
| Support correspondence | 3 years after resolution |
We may retain information longer when required by law or to resolve disputes.
9. Security
We implement reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. Payment card data is handled by Stripe on Stripe-hosted pages, not stored on our hub servers.
10. Your privacy rights (United States)
Depending on where you live, you may have the right to access personal information we hold about you, correct inaccurate information, delete personal information (subject to legal exceptions), and opt out of certain processing where applicable.
CCPA/CPRA: We do not sell or share personal information for cross-context behavioral advertising. California residents may request access, deletion, or correction by contacting vario@clinamenic.com. We will verify requests as required by law. We do not discriminate against you for exercising privacy rights.
To submit a request, email vario@clinamenic.com with the subject line “Privacy request” and the email address associated with your Account.
11. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact vario@clinamenic.com and we will take appropriate steps to delete it.
12. International users
The Service is operated from the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where our service providers operate. US-first sales are assumed; additional international transfer mechanisms may apply if we expand sales to other regions.
13. Changes to this notice
We may update this Privacy notice from time to time. We will post the updated notice on this page and update the “Last updated” date. Material changes will be communicated as required by law.
14. Contact
Privacy questions and requests: vario@clinamenic.com
General support: vario@clinamenic.com
See also our Terms of Service and Refund Policy.