Privacy Policy

ClauseGuard AI (“ClauseGuard,” “we,” “us,” or “our”) provides an AI-powered contract review platform available at www.theclauseguard.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Account information

When you create an account, we collect your email address and, if you sign in via Google, your name and profile picture. We store this in our authentication system (Supabase Auth).

Contract documents

When you upload a contract for analysis, the document is processed in memory by our AI engine. We do not permanently store the raw document file on our servers. The structured analysis results (risk scores, clause findings, recommendations) are stored in your account so you can access them later.

Payment information

Payments are processed by Stripe. We never see, store, or have access to your full credit card number. Stripe provides us with a transaction reference and your billing email.

Usage data

We collect standard usage data including pages visited, features used, analysis count, browser type, and IP address. This helps us improve the product and diagnose issues.

• To provide, maintain, and improve the ClauseGuard service
• To process your contract analyses and store results in your account
• To process payments and manage your subscription
• To send transactional emails (analysis results, deadline alerts, team invitations)
• To respond to your support requests
• To detect and prevent fraud, abuse, or security incidents
• To comply with legal obligations

Account information is retained as long as your account is active. Analysis results are retained in your account until you delete them. If you delete your account, all associated data (analysis results, obligations, playbooks) is permanently deleted within 30 days.

We use the following third-party services to operate ClauseGuard:

• Anthropic (Claude AI) — Powers our contract analysis engine. Contract text is sent to Anthropic's API for processing. Anthropic does not retain inputs or outputs beyond the API request. See Anthropic's Privacy Policy.
• Supabase — Authentication and database hosting. Data stored in SOC 2 compliant infrastructure.
• Stripe — Payment processing. PCI DSS Level 1 compliant.
• Vercel — Application hosting and edge network. SOC 2 Type 2 compliant.
• Resend — Transactional email delivery.

Depending on your location, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your personal data and account
• Portability — Request your data in a machine-readable format
• Objection — Object to processing of your personal data
• Restriction — Request restriction of processing

To exercise any of these rights, contact us at privacy@theclauseguard.com.

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. We do not sell personal information. To make a CCPA request, contact us at privacy@theclauseguard.com.

Our services are hosted in the United States. If you access ClauseGuard from outside the United States, your information will be transferred to and processed in the United States. By using our services, you consent to this transfer.

ClauseGuard is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. No third-party cookies are set by ClauseGuard.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last updated” date. Continued use of ClauseGuard after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, contact us at: