Clinear Limited

Who we are

Clinear Limited, registered in Ireland (company number 815993). Registered office: Cloonaghmore, Clonaslee, Co. Laois, R32 Y439.

Data protection contact: Rose Multaney. Director: Rauri Keogh. Write to the registered office above.

Lead supervisory authority: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963 — dataprotection.ie.

What this notice covers

This notice is for people who use Clinear the product: clinic owners, clinic staff, Clinear operators, and anyone who signs in with Google or connects a Google Ads account.

It is not the patient privacy notice. Each clinic is the controller of its patient records. Patients should read the notice on their clinic's own Clinear site.

What we collect

Account and login: name, email, phone if you give it, role, clinic, and sign-in events.

Google sign-in ("Sign in with Google"): your Google name, email address, and profile photo. We use these to recognise you as staff and to show your photo in the product. We do not use this to advertise to you.

Google Ads connection: if a clinic owner connects Google Ads, we receive an OAuth grant for that Ads account. We store the refresh token in a secret manager (Doppler), not in the database. We also store the Ads customer id. We use this only to upload offline conversions the clinic asked us to send.

Billing: if you pay Clinear, Stripe processes the payment. Clinear is the controller of that billing data. We do not take patient payments through Stripe.

Support: messages you send to Clinear at the registered office.

Google Ads conversions

When a clinic connects its own Google Ads account, Clinear may upload offline conversions to Google: click ids, a conversion time and value, an order id, Consent Mode v2 flags, and SHA-256 hashes of normalised email, phone, and name — never the raw values, never clinical notes.

We only do this when that person has a recorded ad_attribution consent. No consent means no request to Google.

Google Ads Data Processing Terms are not yet accepted on the Clinear manager account. Live uploads will not run until they are.

We do not create or manage campaigns, ads, or keywords.

How we use Google user data

We use Google user data only to provide Clinear: staff sign-in, and — if you connect Ads — conversion upload for that clinic.

We do not sell it. We do not use it for advertising by Clinear. We do not transfer it to other advertising platforms except the clinic's own connected Ads account as described above.

Staff sign-in and Ads connection are separate Google grants. Connecting Ads does not change how we use your sign-in profile.

Who else sees the data

Vendors Clinear uses to run the product (processors, unless noted):

Supabase (EU databases). Cloudflare R2 (files). Vercel (hosting, Ireland compute). AWS in the EU (email via SES; clinical AI via Bedrock; document extract via Textract). AssemblyAI EU (transcription, only if the clinic uses it). Twilio (SMS / WhatsApp). Doppler (secrets). Google Cloud (sign-in, and Places address lookup when enabled). Google Ads (only if the clinic connects). Stripe (Clinear's own billing — we are controller). Sentry (error reports — identifiers, not clinical values). Daily.co (staff video). Session cache (Upstash or Vercel KV).

Vonage SMS is HearMed-only today and is being retired.

A clinic's own Google Ads account is that clinic's, not Clinear's advertising account.

Transfers outside the EU

Most processing is in the EU. Google (sign-in, Places, and Ads if connected) is a named exception: Google's terms plus the EU–US Data Privacy Framework / standard contractual clauses. We do not send raw contact details to Google Ads.

How long we keep it

Staff accounts: while the person has access, then as long as we must keep them for the clinic's contract, security, or the law.

Google Ads connection tokens: until the clinic disconnects, or we revoke them.

Ad attribution and conversion records: 400 days by default (the clinic can set 30–730 days). Pre-patient click sessions: 90 days.

Backups: up to 35 days, then they expire. A restore re-applies erasures.

Your rights

You can ask us for a copy of your data, a correction, erasure, restriction, or objection, and you can complain to the Data Protection Commission.

Write to Rose Multaney at the registered office. Say you are exercising a right against Clinear Limited (not against a clinic). We will not ask a clinic to answer for our own staff or billing records.

If you are a patient, write to your clinic. They are the controller.

Changes

We will update this page when the facts change. The date at the top is the last review.