Privacy Policy

Last Updated: April 12, 2026 | Version 1.0

LegalClauze ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding that information when you use LegalClauze (the "Service").

By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account information: first name, last name, email address, password (stored as a secure one-way hash — never in plain text).
Document inputs: descriptions, jurisdictions, and other content you submit to generate legal documents.
Generated documents: the full text of documents produced for you, stored so you can access them later.
Payment information: when you subscribe, our payment processor collects your billing details. We do not store your full credit card number or security code on our servers.
Communications: emails you send to support@legalclauze.com and related correspondence.

1.2 Information Collected Automatically

Usage data: pages viewed, features used, documents generated, timestamps.
Device and log data: IP address, browser type, operating system, referring URLs, access times.
Cookies and similar technologies: we use session cookies and local storage to keep you logged in and remember preferences. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, maintain, and improve the Service;
Generate legal documents based on your inputs;
Process subscriptions, billing, and payments;
Send transactional emails (welcome, password reset, receipts, service updates);
Respond to support requests and provide customer service;
Enforce our Terms of Service and prevent fraud, abuse, or security incidents;
Comply with legal obligations and respond to lawful requests;
Analyze usage patterns to improve product features and user experience (in aggregate, de-identified form).

3. Third-Party Service Providers

We share information with trusted third parties that help us deliver the Service. These providers are contractually obligated to protect your data and only use it to perform services on our behalf:

Provider	Purpose	Data Shared
Anthropic (Claude AI)	Document generation	Document descriptions, jurisdiction info (no account identifiers)
Resend	Transactional email delivery	Email address, name, email content
DigitalOcean	Hosting and infrastructure	Server-side data, database storage
Namecheap Private Email	Support mailbox hosting	Incoming support emails
Payment processor	Subscription billing	Name, email, billing address, payment card data

We do not sell your personal information to third parties.

4. AI Processing Disclosure

When you submit a document description, the content of that description is transmitted to Anthropic's Claude API to generate the document. Anthropic's privacy practices are governed by their own policy. Per Anthropic's current policy, API inputs and outputs are not used to train their models, but this may change over time. Do not submit highly confidential, privileged, or sensitive personal information (such as Social Security numbers, bank account numbers, or medical records) in your prompts.

5. Data Retention

Account data: retained while your account is active.
Generated documents: retained in your account until you delete them or close your account.
Billing records: retained as required by law (typically 7 years for tax/accounting purposes).
Support communications: retained for up to 2 years.
After account deletion: we delete your personal data within 30 days, except information we are legally required to retain.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: request a copy of the personal data we hold about you.
Correction: request correction of inaccurate or incomplete data.
Deletion: request deletion of your account and associated data.
Portability: request a machine-readable export of your data.
Opt-out of marketing: unsubscribe from marketing emails via the link in each email (transactional emails required for service operation cannot be opted out of while your account is active).
Withdraw consent: where processing is based on consent.
Complaint: file a complaint with your local data protection authority.

To exercise these rights, email support@legalclauze.com from the email address associated with your account. We will respond within 30 days.

6.1 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to non-discrimination. We do not sell personal information as defined under the CCPA.

6.2 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, our legal basis for processing your data is: (a) performance of a contract when we provide the Service to you; (b) legitimate interest in operating our business; (c) compliance with legal obligations; or (d) your consent, where applicable.

7. Cookies and Tracking

We use a small number of technologies to keep the Service functioning:

Session tokens (LocalStorage): keeps you logged in after you sign in. Removed when you log out.
Essential cookies: required for the Service to function (e.g., session management, security).

We do not currently use third-party analytics cookies, advertising trackers, or cross-site tracking technologies. If this changes, we will update this policy and provide appropriate notice.

8. Data Security

We implement reasonable security measures to protect your information, including:

HTTPS/TLS encryption for all data in transit;
Hashed and salted passwords (never stored in plain text);
Secure server-side storage with access controls;
Environment-isolated credentials and API keys;
Regular security updates and patches.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your password secure and for notifying us of any suspected unauthorized access to your account.

9. International Data Transfers

LegalClauze is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. Data protection laws in the U.S. may differ from those in your country. By using the Service, you consent to this transfer.

10. Children's Privacy

LegalClauze is not intended for individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please email support@legalclauze.com and we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last Updated" date at the top of this page reflects the most recent version. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy or your data? Contact us at support@legalclauze.com.