Privacy Policy

ClauseCatch reviews contracts, which means you trust us with sensitive documents. We take that seriously. This policy explains what we collect, what we do with it, and — just as importantly — what we never do.

The short version

• Your contracts are never used to train AI models.
• We never sell your data or share it with third-party AI partners for their own use.
• We do not store your original uploaded file — only the extracted text needed to produce and show your review.
• Your data is encrypted in transit and at rest, and you can delete it at any time.

What we collect

• Account information — your name and email address, used to create and secure your account and to send essential service emails.
• Contract content — when you upload or paste a contract, we extract its text to analyze it. We keep that extracted text so you can revisit your reviews. We do not retain the original PDF or DOCX file after processing.
• Review results — the analysis we generate (risk flags, missing clauses, counter-proposal email) is stored in your account.
• Usage & diagnostics — basic, mostly aggregated data about how the product is used, plus error reports, to keep the service reliable.
• Payment information — handled by our payment processor. We never see or store your full card details.

How we use your data

We use it to provide the service — analyzing your contracts, showing your reviews, maintaining your account, processing payments, sending service-related email, and improving reliability. We do not use your contract content to train models, and we do not use it for advertising.

Service providers we rely on

We use a small set of trusted providers strictly to operate ClauseCatch. Each processes data only to provide their service to us:

• Anthropic — AI analysis. Contract text is sent for processing and is not used to train their models under their commercial API terms.
• Supabase — database and authentication.
• Vercel — application hosting.
• Resend — transactional email.
• Lemon Squeezy — payment processing.
• Analytics & error monitoring — to understand product usage in aggregate and catch bugs.

Data retention & deletion

Extracted contract text and review results are deleted from our systems 30 days after a review — or immediately when you request it. You can delete any individual review, or your entire account, at any time. Account information is retained while your account is active and removed on account deletion, except where we're required to keep limited records (for example, payment records for tax purposes).

Security

Data is encrypted in transit (TLS) and at rest. Access is restricted to what's needed to run the service. No system is perfectly secure, but privacy is a core design goal here, not an afterthought.

Your rights

You can access, export, correct, or delete your data. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these, email privacy@clausecatch.ai and we'll respond promptly.

Children

ClauseCatch is not intended for anyone under 18, and we do not knowingly collect their data.

Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, notify you by email. Continued use after a change means you accept the updated policy.

Contact

Questions about privacy? Email privacy@clausecatch.ai.