Last updated: May 1, 2026
This policy explains what data ClauseAI collects, why we collect it, how we protect it, and what controls you have over it.
Uploaded files are processed server-side to extract text, classify document type, generate findings, and populate your dashboard. Documents are not stored permanently after analysis unless you explicitly save them.
We process your email address, plan status, authentication tokens, and workspace activity to operate the product, manage billing, and provide support.
Document text may be sent to third-party AI providers (Anthropic Claude, DeepSeek) solely to generate your analysis. We do not share your content for their training purposes.
All data is transmitted over encrypted connections (HTTPS/TLS). Firebase Auth manages authentication tokens. S3 storage uses server-side encryption. We apply reasonable technical safeguards throughout.
Analysis history, report exports, and workspace data are retained to power your document library. You may request deletion at any time by contacting us at privacy@clauseai.live.
Depending on your location, you may have rights to access, correct, delete, or export your data. Contact us to exercise any of these rights — we will respond promptly.
ClauseAI is not designed for processing highly regulated sensitive data (HIPAA, PCI-DSS, etc.) unless agreed in writing. Please do not upload documents containing full financial account numbers, SSNs, or similarly sensitive identifiers without understanding the risk.
ClauseAI uses the following third-party providers to operate:
Each provider has its own privacy policy governing how they handle data passed to them.
For access requests, deletion, correction, or any privacy concern: privacy@clauseai.live