Privacy Policy

Last updated: September 2026

1. Who we are

ClauseGuard ("we," "us," or "our") is an AI-powered contract analysis service. For privacy matters, use our contact form and save your reference link.

2. What data we collect

We collect only what is necessary to provide the service:

• Account information: Your name and email address when you create an account.
• Billing information: Payment processing is handled entirely by Stripe. We never see or store your full card details.
• Usage data: Account-linked usage events (such as analyses run and plan type) and, with your consent, browser analytics to improve the product.
• Contract text (temporary): The text extracted from your uploaded document is sent to our AI provider for analysis. The full source text is not saved in our application database. Reports contain selected source quotations. See Section 3 for details.

3. How we handle your contracts

This is the most important section for most users.

• When you upload a contract, the file is parsed client-side where possible and the extracted text is transmitted over an encrypted connection (TLS 1.2+).
• The extracted text is sent to Anthropic to generate your analysis and answer follow-up questions. ClauseGuard does not save the full source text, but stores selected quotations in your report and a one-way fingerprint used to check reattached text.
• ClauseGuard does not train AI models on your contract content. Anthropic processes API inputs under its applicable commercial terms and retention policies; provider processing is not a promise of immediate deletion.
• Analysis reports, including source quotations, are stored privately in your account. Anyone with a share link you explicitly create can read that report until you revoke the link. Account deletion removes your application account and associated reports.
• Deletion from the active application does not guarantee immediate removal from provider backups or legally required billing records.

4. AI processing and third-party providers

Anthropic processes contract text for AI analysis. Neon provides our database and authentication, Vercel hosts the application, Stripe processes payments, and Resend delivers account emails. These providers process data under their applicable terms and privacy policies.

We also process account, billing, and usage data to operate the service, prevent abuse, and respond to support requests.

5. Cookies and tracking

We use a minimal set of cookies:

• Session cookies: Required to keep you logged in. They follow the authentication provider's configured expiration and can persist across browser sessions.
• Analytics: We use PostHog to understand how people use ClauseGuard. PostHog collects page views, feature usage events, and basic device/browser information. Analytics only load after you accept the cookie consent banner. No data collected by PostHog is used for advertising, retargeting, or sold to third parties.

We do not use advertising cookies, retargeting pixels, or ad-network tracking scripts. PostHog is the only third-party analytics service embedded on our pages.

6. Data sharing and selling

We do not sell, rent, or trade your personal data. Period.

We share data only in these limited circumstances:

• With the service providers described above, as necessary to operate the platform.
• When required by law, a valid court order, or to protect the rights and safety of our users.

7. Your rights (GDPR & beyond)

If you are located in the European Economic Area, United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your account and associated data ("right to be forgotten").
• Portability: Receive your data in a portable, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we limit how we process your data.

To exercise any of these rights, use the contact form. We will respond through your reference link within 30 days.

8. Data retention

• Contract documents: Uploaded files and full extracted text are not saved in our application database. Selected quotations are retained in reports. AI-provider retention is governed by that provider's policies.
• Analysis reports: Stored until account deletion. Plan-specific history windows limit which reports are displayed; those windows do not automatically delete older records.
• Account data: Application records are removed when account deletion succeeds. Provider backups and operational logs may have separate retention periods.
• Support requests: We store the email, topic, message, and any response. Resolved requests are deleted after 90 days unless a longer period is legally required. Keep your reference link while the request is open.
• Billing records: Stripe retains billing records under its policies and applicable legal requirements.

9. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, access controls, and server-side ownership checks. No system is perfectly secure — if you believe you found a vulnerability, use our security contact form.

10. Children's privacy

ClauseGuard is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated by email to registered users at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy-related questions, requests, or concerns, use the contact form and save your reference link.

contact form

---

ClauseGuard is not a law firm and does not provide legal advice. This privacy policy is informational and does not constitute legal counsel.