Privacy policy
Last updated: July 2026.
1. Who we are
ClauseLens ("we", "us") is the data controller for the personal data described in this policy. You can reach us at privacy@clauselens.org.
2. What we collect
Account data (name, email), billing data (processed by Stripe; we never store card numbers), contracts you upload for analysis, and usage data (pages visited, features used).
3. Legal basis for processing
We process account and contract data to perform our contract with you (Art. 6(1)(b) GDPR) i.e. to provide the analysis you signed up for. We process billing data to comply with legal and tax obligations (Art. 6(1)(c)). We process aggregated usage data on the basis of our legitimate interest in improving the product (Art. 6(1)(f)), balanced against your right to privacy.
4. How we use it
To provide the service (analyzing your contracts), process payments, send transactional email, and improve the product. We do not sell personal data. We do not use your data to train AI models.
5. Who we share it with
We share data with a small number of processors, strictly to run the service: Anthropic (to analyze contract text you submit), Stripe (payment processing), our database and hosting provider, and Resend (transactional email). Each acts under a data processing agreement and may not use your data for its own purposes. We do not share data with third parties for their own marketing.
6. International transfers
Some processors above may process data outside the EU/EEA (for example, in the United States). Where that happens, we rely on the EU Standard Contractual Clauses or an equivalent adequacy mechanism to protect your data.
7. Retention
We keep account and contract data for as long as your account is active. If you delete a contract or your account, it is permanently removed from our production systems within 30 days, except where we must keep billing records for longer to meet legal or tax obligations.
8. Storage & security
Data is encrypted in transit (TLS) and at rest. You can permanently delete any contract or your entire account from your dashboard at any time.
9. Your rights (GDPR)
You have the right to access, correct, export and delete your data, and to object to or restrict processing. Email privacy@clauselens.org to exercise these rights; we respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).
10. Cookies
We use strictly necessary cookies for authentication and privacy-friendly analytics. No third-party advertising cookies.
11. Children
ClauseLens is intended for business use and is not directed at, or knowingly used by, children under 16.
12. Changes & contact
We may update this policy; material changes will be announced by email. Questions: privacy@clauselens.org.