Privacy policy

CLVER Corporation Ltd., a company in Thailand, runs Exagram.

This policy covers Exagram Cloud, which is app.exagram.app, api.exagram.app and uc.exagram.app. It also covers the Exagram iPhone, Mac and web apps when you use them with Exagram Cloud.

Whoever hosts a Self-hosted Exagram runs it. This policy does not cover data on a server someone else runs. If you use one, ask its operator how it handles your data.

Send privacy questions to ranatchai@cleverse.com.

The Terms and Conditions set the rules for using Exagram.

• Account. Your name, your email address and a password, which we store only as a hash. If you sign in with Google or Apple, we also get the identity they confirm. Sign in with Apple can give us a private relay email address instead of your own. When you sign in by email, we send a one-time code and a link to that address.
• Workspace content. The files and Artifacts you upload or your AI tools save, every Revision of them, your folders, the Grants that say who has access, your Links, and the comments on Revisions.
• Connections. The AI tools you connect over MCP and OAuth, with the scopes each one holds and any Folder Access you set.
• Technical data. Your IP address, which we use for rate limits and security. On the web, a sign-in session cookie keeps you signed in. The iPhone app keeps its session in the device Keychain.

Exagram records every read of an Artifact in the Ledger. Each record shows who read it, or which Connection or Link did, when, which Revision, and the outcome.

The owner of an Artifact sees the records for it. Workspace Admins see the records for their Workspace. When you open an Artifact someone else owns, that owner can see that you did.

The Ledger is a core feature of Exagram.

We use your data only to run the service. That means storing your Artifacts, sharing them with the people and AI tools you choose, recording access, sending sign-in codes, invitations and notification email, and keeping Exagram secure.

We do not show advertising and we do not sell your data. Exagram has no third-party analytics and no tracking SDKs. We do not track you across other apps or websites, and the iPhone app declares this in its Apple privacy manifest.

• Google Cloud hosts Exagram Cloud, including its database and file storage.
• An email delivery provider sends sign-in codes, invitations and notification emails over SMTP. You can unsubscribe from notification emails.
• OpenRouter receives data only when you use AI edit. AI edit sends the text being edited and your instruction to OpenRouter, which passes them to the AI model configured for that feature.
• Google and Apple confirm who you are, only when you choose them to sign in.
• Google Fonts serves the fonts the web app loads in your browser, so Google receives your IP address.
• Microsoft previews PowerPoint files in the web app. Its Office viewer fetches the file from Exagram through a short-lived signed link.

When you connect an AI tool, what it reads goes to that tool, and its provider handles it under its own terms.

Exagram can detect sensitive values in documents. Detection runs on Exagram servers. It does not send documents to an outside service or an AI model.

We keep your data while your account or Workspace exists. You can delete an Artifact yourself.

The Exagram apps do not have an account deletion feature. To delete your account, email ranatchai@cleverse.com.

You can ask to access, correct, export or delete your data. Email ranatchai@cleverse.com to make a request.

Exagram is not directed at children under 13.

This page shows the date it was last updated. We announce material changes on this page.