Privacy Policy

1. Introduction

ClausePatrol ("we", "us", or "our") operates clausepatrol.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password (encrypted)
• Monitored URLs: Web addresses of documents you choose to monitor
• Payment Information: Processed securely by our payment processor (Razorpay/LemonSqueezy) - we do not store credit card details

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, IP address
• Cookies: Essential session cookies only (no tracking or advertising cookies)

3. How We Use Your Information

We use your information solely to provide and improve our service:

• Monitor specified documents for changes as you request
• Send email alerts when changes are detected
• Process payments and manage subscriptions
• Provide customer support
• Improve service quality and fix bugs
• Send important service announcements

We do NOT use your data for advertising, sell it to third parties, or train AI models.

4. AI Processing

We use OpenAI's API to analyze document changes and identify significant modifications. When processing:

• Only publicly accessible document content is sent to OpenAI
• Content is processed in real-time and not stored by OpenAI (per their API terms)
• Analysis results are used solely to alert you of changes
• We comply with OpenAI's Business Terms which prohibit using API inputs for model training

5. Data Storage and Security

Your data is stored securely:

• Database: Supabase (AWS, SOC 2 Type II certified)
• Document Snapshots: Cloudflare R2 (private buckets)
• Encryption: TLS 1.3 in transit, AES-256 at rest
• Access Control: Role-based access, regular security audits

6. Third-Party Services

We use these trusted service providers:

• OpenAI: Document change analysis (API only, no training on your data)
• Supabase: Database and authentication
• Cloudflare R2: Secure document snapshot storage
• Razorpay/LemonSqueezy: Payment processing (PCI DSS compliant)
• Resend: Transactional email delivery

Each provider is bound by strict data processing agreements and complies with GDPR.

7. Data Retention

We retain data only as long as necessary:

• Active Accounts: Data retained while subscription is active
• Account Deletion: All data deleted within 30 days of account closure
• Snapshots: Historical snapshots deleted with your account
• Payment Records: Kept for 7 years for tax/legal compliance only

8. Your Rights

You have the following rights:

• Access: Request a copy of your personal data
• Correction: Update incorrect information
• Deletion: Delete your account and all associated data
• Export: Download your monitored document list
• Opt-out: Unsubscribe from non-essential emails
• Portability: Transfer your data to another service

To exercise these rights, email [email protected]

9. Cookies

We use only essential cookies:

• Session Cookies: Keep you logged in (deleted on logout)
• Preference Cookies: Remember your settings

We do NOT use advertising, tracking, or analytics cookies. No third-party cookies are set.

10. International Data Transfers

Our servers are located in the United States. By using our service, you consent to data transfer outside your country. We ensure appropriate safeguards through:

• EU-U.S. Data Privacy Framework compliance
• Standard Contractual Clauses with processors
• Encryption in transit and at rest

11. Children's Privacy

Our service is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a minor, contact us immediately for deletion.

12. Changes to This Policy

We may update this policy. When we do:

• We'll update the "Effective Date" at the top
• Material changes will be emailed to all users
• Continued use after changes constitutes acceptance

13. Contact Us

For privacy questions or to exercise your rights: