Legal
Last updated: August 2, 2026
Clausa (“we,” “our,” or “us”) operates the contract intelligence platform at clausahq.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it. By using the Service, you agree to the collection and use of information as described here.
Account information. When you register, we collect your name, email address, and any other information you provide at sign-up.
Documents you upload. We collect and process the contract documents you upload to the Service in order to generate analysis results for you.
Usage data. We automatically collect information about how you use the Service, including pages visited, features used, analysis counts, and timestamps. This may include your IP address, browser type, and device information.
Payment information. Payments are processed by our third-party payment processor (Stripe). We do not store full card numbers; we receive and store a token and limited billing details (e.g., card last four digits, expiry) to manage your subscription.
Communications. If you contact us by email or through the contact form, we retain that correspondence.
We collect information directly from you (account registration, document uploads, form submissions) and automatically through your use of the Service (usage logs, analytics). We use Supabase for authentication and database services, which may independently collect certain session and access data.
We do not use your uploaded contract documents to train AI models. Document content is processed by AI inference providers solely to generate your analysis results and is not retained by those providers beyond the inference request.
Where applicable law requires a legal basis for processing, we rely on: (a) performance of a contract with you (to provide the Service); (b) our legitimate interests (improving the Service, fraud prevention, security); (c) compliance with legal obligations; and (d) your consent where applicable (e.g., marketing communications).
We do not sell your personal data. We share data only in the following circumstances:
Your data is stored on servers operated by our infrastructure providers. All data is encrypted in transit (TLS) and at rest. We apply access controls, authentication requirements, and monitoring to protect against unauthorized access.
No security measure is perfect. While we take reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a significant risk to you, we will notify you as required by applicable law.
We retain your account information and uploaded documents for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Analysis results are retained for the duration of your account. You may delete your account and all associated data at any time from your account settings. Document files are deleted from our storage within 30 days of account deletion.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise these rights, delete your account from settings or contact us. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
We use cookies and similar technologies to maintain your session, remember preferences, and understand how the Service is used. We use session cookies (deleted when you close your browser) and persistent cookies (which remain until you delete them). You can control cookies through your browser settings; disabling cookies may affect functionality.
We may use third-party analytics tools to help us understand usage patterns. These tools may set their own cookies subject to their own privacy policies.
Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our infrastructure providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data during international transfers.
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service at least 14 days before they take effect. The date at the top of this page reflects when the policy was last revised.
For privacy-related questions, requests, or complaints, please contact us. We aim to respond to all requests within 30 days.