Privacy policy
Updated: October 8, 2026
Who operates Clovio?
Clovio is operated by M2H GROUP LLC. For privacy questions and requests concerning your data, contact app.clovio@gmail.com. This page covers clovio.io and app.clovio.io.
Information and purposes
We process your email, sign-in identity, profile and preferences to create and secure your account. Information entered by your agency (team, models, schedules, messages, documents and financial records) supports its workspace features. Service delivery is based on our contractual relationship; abuse prevention and security logs on our legitimate interest in protecting the service. An email and verified identity are necessary to open an account.
Optional Google sign-in
If you choose Google, Clovio receives your Google identifier, verified email and authorized profile information, such as your name and picture. These identify you and help prepare your profile. This sign-in does not grant access to Gmail or your Drive files. Clovio does not receive your Google password. You can revoke access through your Google Account’s third-party connections; revocation does not automatically delete information already stored in Clovio.
Agency workspaces and integrations
Members access their agency’s information according to their role. The agency is responsible for the information about its team and models; Clovio hosts and processes it to provide requested features. Drive and Stripe integrations require a separate connection. Information shared then depends on the requested action, such as a Drive file or a Stripe invoice.
Service providers and hosting
Vercel hosts the application; Supabase provides the database, authentication and storage; Resend delivers security emails; Google participates when you use its sign-in or an authorized integration. Stripe supports connected invoicing features. The primary database is configured in Paris and the email service in Europe. Provider infrastructure and operations may involve other countries; contact us for information about transfers and applicable safeguards.
Retention and security
Account and workspace information is retained while in use. Deactivation can preserve history and audit records; it is not a complete deletion. Deletion requests are assessed with the relevant agency, taking applicable obligations, disputes and backups into account. Session cookies and local storage support sign-in and preferences. Access is controlled by agency and role.
Your choices and rights
You can request access, correction, deletion, restriction or portability of your information, and object to certain processing where applicable. For agency-managed information, also contact your agency administrator. You can complain to the competent data protection authority, including the CNIL in France. We do not sell information received from Google or use it for targeted advertising or training artificial intelligence models.
Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
app.clovio@gmail.com