Privacy Policy

1. Data Controller Information

For the purposes of applicable data protection laws, the data controller of your personal data is the operator of ClauseLensAI (“ClauseLensAI”, “we”).

• Service: ClauseLensAI
• Website: https://clauselensai.com
• Contact: our contact form

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise any of your rights regarding your personal data, please contact us at our contact form.

2. Information We Collect

We collect various types of information to provide and improve our Services. The types of personal data we collect depend on how you interact with us and which Services you use.

2.1 Information You Provide Directly

When you interact with our Services, you may provide us with the following information:

Account Information

• Full name (first name and surname)
• Email address
• Password (stored in encrypted form)
• Username or display name
• Profile photograph (optional)
• Phone number (optional)
• Date of birth (for age verification where required)

Payment and Billing Information

• Credit/debit card details (processed securely by our payment processors)
• Billing name and address
• Bank account details (for refunds where applicable)
• VAT number (for business customers)
• Transaction history

Content and Documents

• Preferences and settings you choose inside the Service
• Text, audio, and other content submitted through our AI-powered tools
• Files, images, links and notes you upload or enter to use the Service
• Any other content you submit through our Services

Communication Data

• Messages sent through our contact forms
• Customer support tickets and correspondence
• Feedback and survey responses
• Newsletter subscription preferences
• Marketing communication preferences

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain information through cookies and similar technologies:

Device and Browser Information

• Device type (desktop, mobile, tablet)
• Operating system and version
• Browser type and version
• Browser language settings
• Screen resolution and display settings
• Device identifiers (including mobile advertising IDs)

Network and Connection Information

• IP address
• Internet Service Provider (ISP)
• Approximate geographic location (city, region, country) based on IP
• Connection type (WiFi, cellular, broadband)
• Time zone settings

Usage and Interaction Data

• Pages visited and navigation paths
• Time and date of visits
• Time spent on each page
• Click patterns and interactions
• Scroll depth and engagement metrics
• Features used and frequency of use
• Search queries entered on our site
• Referring website or source
• Exit pages
• Error logs and crash reports

Cookies and Tracking Technologies

• Session cookies and persistent cookies
• Local storage and session storage data
• Web beacons and pixel tags
• Unique cookie identifiers

For detailed information about the cookies we use, please see our Cookie Policy.

2.3 Information from Third Parties

We may receive information about you from various third-party sources, including:

Authentication Providers

• Google (if you sign in with Google)
• LinkedIn (if you sign in with LinkedIn)
• Other OAuth providers

When you use these services to log in, we receive information from them including your name, email address, and profile picture, subject to your privacy settings on those platforms.

Analytics and Advertising Partners

• Google Analytics (website usage data)
• Google Ads (advertising performance data)
• Social media platforms (demographic and interest data)
• Marketing automation tools

Business Partners

• Payment processors (transaction verification)
• Fraud prevention services
• Identity verification services
• Customer relationship management platforms

2.4 Special Categories of Personal Data

We generally do not request or intentionally collect special categories of personal data (sensitive data), such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health information, or sexual orientation.

However, if you choose to include such information in content you upload, we process this data solely for the purpose of providing our Services to you, with your explicit consent. We recommend that you do not include sensitive information unless absolutely necessary.

3. How We Collect Your Information

3.1 Direct Collection

• Account Registration: When you create an account on our platform
• Service Usage: When you use our AI-powered tools and services
• Purchases: When you make a purchase or subscription
• Communications: When you contact us via email, phone, or contact forms
• Surveys and Feedback: When you participate in surveys or provide feedback
• Events: When you register for webinars or events

3.2 Automated Collection

• Cookies: Small data files stored on your device
• Web Beacons: Electronic images that count visitors and track usage
• Log Files: Server logs that record website activity
• Analytics Tools: Third-party tools that track usage patterns

3.3 Third-Party Collection

• Social Logins: When you authenticate using third-party accounts
• Partners: When our business partners share information with us
• Public Sources: Publicly available information

4. Legal Basis for Processing (GDPR)

Under the UK GDPR and EU GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

4.1 Contractual Necessity (Article 6(1)(b) GDPR)

Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract. This includes:

• Processing your registration and account creation
• Providing our AI-powered services
• Processing payments and transactions
• Delivering customer support
• Managing your subscription

4.2 Legitimate Interests (Article 6(1)(f) GDPR)

Processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests. Our legitimate interests include:

• Improving and optimising our Services
• Analysing website usage and trends
• Preventing fraud and ensuring security
• Marketing our Services to existing customers
• Conducting business analytics
• Protecting our legal rights

We conduct a balancing test for each processing activity to ensure our interests do not override your fundamental rights and freedoms.

4.3 Consent (Article 6(1)(a) GDPR)

Where we rely on your consent, you have the right to withdraw it at any time. We obtain consent for:

• Sending marketing communications to non-customers
• Using non-essential cookies
• Processing special categories of data (where applicable)
• Sharing data with certain third parties

4.4 Legal Obligation (Article 6(1)(c) GDPR)

Processing is necessary to comply with our legal obligations, such as:

• Tax and accounting requirements
• Responding to lawful requests from authorities
• Fraud prevention and detection
• Employment law requirements

4.5 Vital Interests (Article 6(1)(d) GDPR)

In exceptional circumstances, processing may be necessary to protect someone's life.

5. How We Use Your Information

5.1 Service Delivery and Operations

• Creating and managing your user account
• Providing access to our AI-powered tools and services
• Processing and analysing content you submit
• Generating AI-powered content, suggestions, and optimisations
• Processing payments and managing subscriptions
• Sending transactional emails (confirmations, receipts, service updates)
• Providing customer support and responding to enquiries

5.2 Service Improvement and Development

• Analysing usage patterns to improve user experience
• Training and improving our AI models (using anonymised data)
• Developing new features and services
• Conducting research and analysis
• Testing and quality assurance
• A/B testing and optimisation

5.3 Personalisation

• Customising your experience based on preferences
• Providing personalised recommendations
• Remembering your settings and preferences
• Tailoring content to your interests

5.4 Marketing and Communications

• Sending newsletters and promotional materials (with consent)
• Informing you about new features, products, and services
• Conducting surveys and gathering feedback
• Delivering targeted advertising (with consent)
• Managing competitions and promotions

5.5 Security and Protection

• Detecting and preventing fraud and abuse
• Monitoring for security threats
• Verifying user identities
• Enforcing our Terms of Service
• Protecting our rights, property, and safety

5.6 Legal and Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and court orders
• Establishing, exercising, or defending legal claims
• Maintaining records as required by law

6. How We Share Your Information

We do not sell your personal information.

We may share your information in the following circumstances:

6.1 Service Providers and Processors

We engage trusted third-party companies and individuals to perform services on our behalf, including:

All service providers are contractually obligated to protect your data and use it only for the specified purposes.

6.2 Legal Requirements

We may disclose your information when required by law, including:

• In response to valid legal processes (subpoenas, court orders)
• To law enforcement agencies upon lawful request
• To regulatory authorities as required
• To protect our rights, property, or safety
• To prevent fraud or illegal activities

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such transfer and any choices you may have regarding your information.

6.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6.5 Aggregated and Anonymised Data

We may share aggregated or anonymised data that cannot reasonably be used to identify you for research, analysis, or other business purposes.

7. Third-Party Services and Technologies

We use various third-party services to operate our platform effectively. Your use of such services may be subject to their terms and privacy policies.

8. Google Services Disclosure

We may use Google services (such as analytics and advertising tools) to understand usage and improve our marketing. Where required, we obtain consent for non-essential cookies and advertising technologies.

9. International Data Transfers

If personal data is transferred outside the UK/EEA, we use appropriate safeguards such as adequacy decisions and standard contractual clauses where applicable.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, accounting, and reporting requirements.

11. Data Security

We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

12. Your Rights Under GDPR

Under the UK GDPR and EU GDPR, you may have rights regarding your personal data. To exercise your rights, contact us at our contact form.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under applicable California privacy laws. Contact us at our contact form to exercise these rights.

14. Automated Decision-Making and Profiling

Our Services may use automated processing to provide features and improve performance. You may request information about automated processing and request human review where applicable.

15. Children's Privacy

Our Services are not directed to individuals under the age of 16 (or 13 in some jurisdictions). We do not knowingly collect personal information from children.

16. Third-Party Links and Services

Our website may contain links to third-party websites or services. We are not responsible for their content or privacy practices.

17. Do Not Track Signals

Some browsers include a “Do Not Track” feature. There is no universal standard for responding to these signals, and our site may not respond to them.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and may provide additional notice for material changes.

19. Complaints

If you have concerns about how we handle your personal data, please contact us first. You may also have the right to lodge a complaint with a supervisory authority.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at our contact form.

We aim to respond to all enquiries within 30 days.