Clay
Clay · Uncategorised · US · www.clay.com
services/clay.yamlVendor data-handling terms
Clay runs prospect lists through data providers and AI prompts; the notice does not address training on those lists or prompt outputs.
“We may use your information for other business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Website, products, marketing and your experience.”
“We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). / Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.”
The notice names no hosting region; Clay is a US company.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.clay.com | api | observed |
Assessment
Reasoning: A sales data-enrichment and outreach workspace. Uploaded prospect lists are fanned out to dozens of data providers and AI models; the notice is a template that does not cover that flow, its training implications or the region. GDPR exposure sits with the customer uploading EU contacts.
Flags: Prospect data sent to many third-party providers · Training-use and region not stated · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Use and retention terms verified against the Clay privacy notice; region not stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.