Privacy Policy

ClauseForge, Inc. (“ClauseForge,” “we,” “us,” or “our”) operates the ClauseForge platform at clauseforge.ai. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

We collect the following categories of information:

Account Information

When you create an account, we collect your name and email address. If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google. We do not receive your Google password.

Documents and Inputs

We collect the document prompts and inputs you submit to generate legal documents, and we store the generated documents in your account history so you can access them later. This includes the parties, jurisdictions, and other details you provide when generating a document.

Payment Information

If you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe provides us with a tokenized reference to your payment method and your billing email. For more information on how Stripe handles your data, see stripe.com/privacy.

Usage Data

We automatically collect certain usage information when you interact with the Service, including your IP address, browser type, device type, pages visited, document types generated, and timestamps. This data is collected via server logs and analytics tools (Google Analytics) to help us understand how the Service is used and to improve it.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and authenticate your identity.
• Generate legal document drafts based on your inputs.
• Store your document history so you can retrieve past documents.
• Process subscription payments and manage billing through Stripe.
• Send transactional emails (account confirmation, password reset, subscription receipts).
• Analyze usage patterns to improve the Service and develop new features.
• Respond to support requests and communicate important Service updates.
• Comply with legal obligations and enforce our Terms of Service.

3. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not share your document inputs or generated documents with third parties except as described in this policy (e.g., passing your input to our AI model provider to generate the document) or as required by law.

4. Third-Party Services

We use the following third-party services to operate ClauseForge:

• Google OAuth — for account sign-in. Google's use of your data is governed by Google's Privacy Policy.
• Stripe — for payment processing. Stripe is PCI-DSS compliant and handles all credit card data.
• OpenAI / Anthropic — our AI document generation uses large language model APIs. Your document inputs are transmitted to these providers to generate output. We use these providers under data processing agreements that prohibit them from using your data for model training.
• Google Analytics — for anonymized usage analytics. You can opt out via browser extensions or your browser's privacy settings.
• Vercel — our hosting provider. Vercel may process request data (IP addresses, logs) as part of serving the application.

5. Data Retention

We retain your account information and document history for as long as your account is active. If you delete your account, we will delete your personal information and associated documents within 30 days, except where we are required to retain certain records for legal or regulatory compliance purposes (e.g., billing records, which may be retained for up to 7 years).

You may request deletion of your account and data at any time by emailing privacy@clauseforge.ai.

6. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted database storage, and access controls to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Your Rights

Depending on your location, you may have rights under applicable privacy laws (such as GDPR or CCPA) including the right to access, correct, or delete your personal data, the right to data portability, and the right to object to certain processing. To exercise any of these rights, contact us at privacy@clauseforge.ai.

8. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@clauseforge.ai.