c
clarity.

Privacy Policy

Last updated: 5 August 2026

Clarity is a Google Sheets add-on for financial advisors. This policy explains what data Clarity accesses, how it is used, and your rights under Singapore's Personal Data Protection Act (PDPA).

What Clarity accesses

Clarity reads data directly from the Google Sheet you have open when you open the dashboard. This includes client names, dates of birth, insurance policy details, CPF and investment figures, and administrative information you have entered into that sheet. Clarity can only access the spreadsheet you are actively using it in — it cannot see, open or list any of your other spreadsheets or Drive files.

Clarity writes back to that same sheet in one case only: when you use Save changes to sheet on the retirement tab, which records the retirement age, income goal and drawdown ages you have adjusted.

Clarity does not copy, transmit, or store this data anywhere outside your Google account. All portfolio processing happens within your browser session. The only information transmitted to our servers is your Google account email address, used to check your subscription status. When you close the dashboard, nothing else is retained.

Load Template does not use any Google account permission. It opens Google's own "make a copy" screen for our blank template file, and Google copies the file into your Drive after you confirm. Clarity never creates, reads or touches that file itself.

Google account permissions

To function, Clarity requests the following Google OAuth scopes:

Clarity requests no restricted scopes. It does not request access to your Google Drive, your other spreadsheets, Gmail, contacts, or any other Google service, and it has no ability to browse, search or list the files in your account.

Limited use of Google user data

Clarity's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically, Google user data obtained through these scopes is used only to provide and improve the features described in this policy. It is never used for advertising, never sold or rented, never transferred to data brokers or information resellers, and never used to develop, train, or improve generalised artificial intelligence or machine learning models. No human at Viper Gears reads your Google user data except where you have given explicit permission (for example, to troubleshoot a support request you have raised), where it is necessary for security purposes such as investigating abuse, or where we are required to by law.

Client data

Your clients' information lives only in your Google Sheets, within your own Google account. You are responsible for obtaining any necessary consent from your clients before entering their personal data into a sheet or presenting it to them via the dashboard or an exported PDF.

Who we share, transfer or disclose your data to

Your clients' portfolio data is shared with no one. It is never transmitted off your device to us or to anyone else. It stays in your Google Sheet, inside your own Google account, and is processed in your browser session.

The only Google user data Clarity transmits anywhere is your Google account email address. It is disclosed to exactly two service providers, each for a single stated purpose:

We do not transfer or disclose your information to third parties for purposes other than the ones described above. In particular, we do not sell, rent or trade your data; we do not share it with advertisers, data brokers, analytics providers or AI training providers; and we do not disclose it to any other third party for their own independent use.

There are two narrow exceptions. We may disclose data where we are legally compelled to do so by a valid order of a court or regulator with jurisdiction over us, or where disclosure is strictly necessary to investigate suspected fraud or a security incident. If Viper Gears Private Limited is ever acquired or merged, subscriber records may transfer to the successor entity, which would remain bound by this policy; we would notify active subscribers by email before any such transfer takes effect.

Clarity has no ability to send data to any destination other than the one listed above. The add-on's manifest restricts outbound network requests to firestore.googleapis.com and Google enforces that restriction.

Subscription data

Clarity uses Stripe to process subscription payments. Your card number and billing details are handled directly by Stripe and never pass through or rest on our systems.

The subscriber record we hold for you contains only: your email address, whether your subscription is active, its Stripe status, your Stripe customer reference, your plan interval and price, and the date the record was last updated. We do not store your name, your address, your card details, or any client data.

How we protect your data

Because Clarity requests sensitive OAuth scopes, we apply the following safeguards:

Analytics and tracking

Clarity does not use third-party analytics, advertising trackers, or cookies beyond what Google Workspace requires to authenticate the add-on.

Data retention and deletion

Clarity retains no client data and no portfolio data of any kind. There is nothing to delete, because nothing was ever stored. Your clients' information is read from your sheet, rendered in your browser session, and discarded when you close the dashboard. Deleting your sheet, or removing rows from it, removes that data completely — no copy exists on our side.

The only record we retain is your subscriber record, described under Subscription data above. We keep it for as long as your subscription is active, because it is what grants you access to the add-on.

If you cancel, your subscriber record is deleted within 30 days of cancellation. You may also request deletion at any time by emailing us at the address below; we will delete the record within 30 days and confirm when it is done. Deleting the record ends your access to Clarity. Stripe retains its own transaction records independently, for the period its own policy and Singapore tax law require.

Revoking Clarity's access at myaccount.google.com/permissions immediately stops all further access to your Google data.

Your rights under the PDPA

You have the right to access, correct, or withdraw consent for personal data we hold about you. To exercise these rights, contact us at the address below. We will respond within 10 business days.

Changes to this policy

If we make material changes, we will update the date at the top of this page and notify active subscribers by email at least 14 days before the changes take effect.


Contact

For privacy-related questions:
hello@vipergears.com