Controller
For sessions, the institution or person running the presentation decides how CLAIRIO is used. We then act on their behalf.
What the camera sees, and what never leaves the room
Engagement analysis runs in the browser of the room's computer. No image or sound is recorded or sent to our servers.
Every few seconds our servers receive only numbers aggregated over the whole room: an engagement score, the share of faces turned towards the speaker, the number of faces detected and the slide on screen.
CLAIRIO identifies no one, does not perform facial recognition and does not infer emotions. The engine follows each face for a short while to form the room score, on the computer only: no individual score is kept or sent.
The Google Meet extension follows the same rules. It reads the meeting’s cameras that are on, on the host’s computer, and the host tells participants before starting it. It sends only the aggregated numbers described above. A participant who turns their camera off is not counted.
Account data
Name, email address, language, creation date and a password fingerprint (scrypt). We never know your password.
To keep you signed in: a session token of which we keep only a fingerprint, its expiry date and the browser type. You see these devices in Settings and can sign them out.
If you ask for a new password: a one use link of which we keep only a fingerprint, erased at the latest 24 hours after it was made.
Legal basis: performance of the contract.
Participant data
Joining a session requires no account. A random identifier is stored in a cookie only on the first vote, question or answer, to prevent repeated voting.
Questions, votes and poll answers are kept with the session. A first name is saved only if the participant chooses to give one.
If the speaker chose anonymous mode, they never see who asked what. If they chose named mode, participants are told before they write.
Legal basis: the organiser's legitimate interest in running their presentation.
Retention
Questions and participant names: erased automatically after the period chosen by the speaker (7, 30, 90 or 365 days after the session ends). Poll figures and the engagement curve remain in the report.
Sessions and reports: kept while the account exists, and deletable at any time.
Account: deleted immediately and permanently on request, with all its sessions and files.
Sign in sessions: 30 days at most. Contact form messages: one year.
Contact form
Name, email address, organisation, role, subject, audience size and message, used only to answer you. Legal basis: your consent, which you can withdraw by writing to us.
Recipients
Your data is never sold or rented. It is accessible to our team and to our host, who acts on our instructions. We use no advertising tool and no third party tracker.
The e-mails we send (the link to choose a new password, the notice of a new contact message to our team) go through an e-mail delivery service, which receives only the recipient's address and the content of the message. We send no advertising and no newsletter.
Security
Encrypted connections, passwords protected by a slow hash, tokens stored as fingerprints, sign in attempts rate limited, and strict separation: one account can never read another's sessions.
Your rights
You may access, correct, erase, restrict, object to and obtain a copy of your data.
From Settings you can download everything CLAIRIO keeps about you in one click, and delete your account yourself.
For any other request, write to us from the contact page. You may also contact the data protection authority of your country.