Privacy Policy

Last updated: March 2026

1. Who we are

ClauseGuard ("we," "us," or "our") is an AI-powered contract analysis service. Our registered contact for privacy matters is hello@clauseguard.io.

2. What data we collect

We collect only what is necessary to provide the service:

• Account information: Your name and email address when you create an account.
• Billing information: Payment processing is handled entirely by Stripe. We never see or store your full card details.
• Usage data: Aggregate, anonymized metrics (number of analyses run, plan type, session duration) to improve the product.
• Contract text (temporary): The text extracted from your uploaded document is sent to our AI provider for analysis. It is not persisted after analysis completes. See Section 3 for full details.

3. How we handle your contracts

This is the most important section for most users.

• When you upload a contract, the file is parsed client-side where possible and the extracted text is transmitted over an encrypted connection (TLS 1.2+).
• The extracted text is sent to our AI provider solely to generate your analysis report. It is processed in memory and not written to persistent storage by ClauseGuard.
• We do not use your contract content to train, fine-tune, or improve any AI model — ours or our provider's.
• Analysis reports (the structured output ClauseGuard generates) are stored in your account history so you can revisit them. You can delete any report at any time from your dashboard.
• If you close your account, all associated reports are permanently deleted within 30 days.

4. AI processing and third-party providers

ClauseGuard uses large language model (LLM) APIs to power its analysis engine. Contract text is transmitted to these providers under data processing agreements that prohibit the use of customer data for model training. We select providers with strong data protection commitments.

We do not use your data for any purpose other than delivering the analysis you requested.

5. Cookies and tracking

We use a minimal set of cookies:

• Session cookies: Required to keep you logged in. Expire when you close your browser or after 30 days of inactivity.
• Analytics: We use privacy-friendly, cookieless analytics to understand aggregate traffic patterns. No cross-site tracking, no advertising identifiers.

We do not use advertising cookies, retargeting pixels, or any third-party tracking scripts.

6. Data sharing and selling

We do not sell, rent, or trade your personal data. Period.

We share data only in these limited circumstances:

• With service providers who help us operate the platform (hosting, payments, email delivery) under strict data processing agreements.
• When required by law, a valid court order, or to protect the rights and safety of our users.

7. Your rights (GDPR & beyond)

If you are located in the European Economic Area, United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated data ("right to be forgotten").
• Portability: Receive your data in a portable, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we limit how we process your data.

To exercise any of these rights, email hello@clauseguard.io. We will respond within 30 days.

8. Data retention

• Contract documents: Never stored — discarded immediately after analysis.
• Analysis reports: Retained in your account until you delete them or close your account.
• Account data: Retained for the duration of your account, plus 90 days after closure for legal and billing purposes.
• Billing records: Retained for 7 years as required by financial regulations.

9. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, access controls, and regular security reviews. No system is perfectly secure — if you believe you have found a vulnerability, please contact us at hello@clauseguard.io.

10. Children's privacy

ClauseGuard is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email to registered users at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy-related questions, requests, or concerns, contact us at:

hello@clauseguard.io

---

ClauseGuard is not a law firm and does not provide legal advice. This privacy policy is informational and does not constitute legal counsel.