What Vision stores, and what happens to it.

Last updated 10 September 2026.

What we store

Account details. Your work email address, the sign-in it is linked to, and whether the address is verified. If you were invited, the invitation carries the address it was sent to and who sent it. If you asked to join a workspace, the request carries your address and the decision.

Workspace records. Everything your organisation puts into its workspace: requests, projects, programs, funding, benefits, capacity, scenarios, dashboards, saved views and the setup that shapes them. These belong to the workspace, and the workspace owner controls who sees them.

Files people upload. Documents attached to a request or project are stored as uploaded, up to 4 MB each, and each time one is opened a record of who opened it is kept.

Audit history. Who did what, to which record, when, and why it was allowed or refused. Decisions stay on the record they were made about, and the workspace owner can read the whole log. Audit history keeps the person's address as it was at the time, so that history still reads correctly later.

Demo enquiries. If you ask for a demo on this site we keep the name, work email, company and message you entered, only to arrange the demo.

Where it runs

Vision is built and run by ClarityArc. These services process data on our behalf, each for one job:

• Vercel hosts the application. Its servers for Vision run in the eastern United States (Washington, DC region).
• Supabase holds the database and uploaded files, in Canada (Montreal region). Data is encrypted in transit and at rest.
• Clerk handles sign-in: the code sent to your email, sessions, and single sign-on where an organisation uses it. Clerk holds your email address and sign-in sessions.
• Stripe takes payment when a workspace pays by card. Card details go to Stripe directly and never reach Vision.
• Resend delivers the emails Vision sends — invitations, join-request notices and decisions, and the note to us when someone asks for a demo. It sees the recipient address and the email content.
• Sentry receives error reports so we can fix faults. Reports are sent without personal details: identifiers are stripped before they leave the server.

Nobody at ClarityArc can see inside a workspace by default. When ClarityArc sets up a new workspace it holds temporary setup access until the hand-off to the workspace's own admin; both the setup and the hand-off are recorded in that workspace's audit log. Any other support access is granted for a stated reason, limited to what that reason needs, and recorded.

How long it stays

• Workspace records and files stay as long as the workspace does. A request that was archived is removed for good thirty days later, with its files. A workspace can ask for its data to be destroyed; the request is recorded and carried out by ClarityArc.
• Audit history is kept for twenty-four months, and never less than twelve.
• Records of who opened a file are kept for twelve months.
• Invitations that expired or were withdrawn are removed after ninety days. Accepted invitations stay with the membership they created.
• Demo enquiries are removed after twelve months.
• Records of messages from payment and sign-in providers are removed after ninety days once they have been processed.

Removal runs automatically on that schedule. Anything a workspace still refers to — a decision, a funding release, a file — is kept until the record that refers to it goes.

Asking for a copy, or for removal

You can ask for a copy of everything Vision holds about you, across every workspace you belong to, and you can ask for your personal details to be removed. Removal ends your memberships, turns your sign-in off, and replaces your address everywhere it appears — including in audit history — with "removed user" and a short reference, so the workspace's history still makes sense without naming you. It cannot be undone.

To ask, contact your workspace admin, who can reach us at consulting@clarityarc.com. If you no longer have a workspace admin, write to that address yourself from the email you used with Vision. We answer from the console built for exactly this, and both the copy and the removal are recorded.

If your sign-in is deleted at the identity provider, Vision ends your memberships straight away and removes your details after a seven-day grace period.

Questions

If something here does not match what you see in the product, tell us at consulting@clarityarc.com and we will correct either the page or the product.