Privacy Policy

We collect the following, depending on how you use ClauseShift:

• Account information. When you create an account we collect your email address. If you sign in with Google, we receive your email address, basic profile name, and avatar from Google. We never receive your Google password.
• Contract content you submit. The text, documents (such as PDF or DOCX), or audio recordings you upload so we can analyze them. See section 3 for how this is processed.
• Reports and activity. The risk reports we generate, key dates we extract, and your in-app activity (such as reviews run), tied to your account.
• Billing information. If you subscribe or buy credits, payments are handled by our payment processor (Paystack). We receive confirmation and subscription status, but we do not collect or store your full card number.
• Usage and device data. Anonymous, aggregate analytics (such as page views and feature usage) and standard server logs (such as IP address and browser type) used to operate and secure the service.
• Crash logs and diagnostics. If the app or website encounters an error, we collect a crash report (the error, stack trace, device model, and operating system version) through Sentry, processed on servers in the EU, so we can find and fix bugs. Crash reports never include your contract content and are not used to identify you.

• Provide, maintain, and improve the contract-review service.
• Generate risk reports and, for paid features, track contract deadlines.
• Authenticate you, process payments, and manage your subscription or credits.
• Send you transactional and, where enabled, risk-alert and reminder emails.
• Respond to your support requests.
• Monitor performance, prevent abuse, and keep the service secure.

ClauseShift trains no AI of its own. We do not sell your personal information or use your contract content to train models operated by ClauseShift, and the AI providers that process your content have confirmed in writing that they do not use it to train their models either, and that they do not share it with third parties for training.

ClauseShift trains no AI of its own. To analyze a contract, we send the content you submit to third-party AI model providers that perform the analysis and return a structured risk report. Audio recordings you upload are first transcribed by a speech-to-text provider. Those providers process content under their own terms and have confirmed in writing that they do not use submitted content to train their models and do not share it with third parties for training; our analysis provider has additionally confirmed that request content is processed transiently to deliver the service. We do not save the source document as part of your account; only the report it produces is stored there.

Our transcription provider (Speechmatics) is certified to ISO 27001, SOC 2 Type 2, and HIPAA. On our account, uploaded audio is not used to train models, real-time audio is not stored, and batch transcripts are deleted within seven days. We have a Data Processing Agreement in place with them.

When resumable review processing is enabled, submitted content may be held temporarily in an AES-256-GCM encrypted processing job so a review can continue if the app is backgrounded or a connection is interrupted. The encrypted source payload is cleared when the job succeeds or reaches a terminal failure, and the entire job record expires within 24 hours. When resumable processing is disabled, no queue copy is created.

Your saved reports are stored under your account so you can revisit them. You can delete individual reports, or your entire account, at any time (see section 7).

We share data with a small set of vendors strictly to operate ClauseShift. Each processes only what is needed for its function:

• Hosting & database: for running the app and storing your account, reports, and settings.
• AI model & transcription providers:to analyze contract content and transcribe audio.
• Payment processor (Paystack): to take payments and manage subscriptions.
• Email provider: to send transactional, alert, and support emails.
• Privacy-friendly analytics: cookieless, aggregate visitor measurement.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

For the full list of sub-processors, what each one receives, and their security certifications, see our Trust Center.

We keep this light. We use a small amount of local storage in your browser to keep you signed in and remember preferences (such as light or dark mode). Our visitor analytics are cookieless and do not track you across other websites. We do not run third-party advertising trackers.

We keep your account information and reports for as long as your account is active. A deleted report moves to your private Trash, where you can restore it or delete it permanently; any report left there is permanently deleted within 30 days. Share links expire after 30 days unless you revoke them sooner. Encrypted resumable-review jobs expire within 24 hours, with their encrypted source payload cleared sooner after success or terminal failure. When you delete your account, your personal data and associated reports are deleted immediately. We may retain limited records (such as payment and security logs) where required for legal, accounting, or fraud-prevention purposes.

• Access and update your account details in the app.
• Delete individual reports, or your whole account (which removes your personal data), at any time from your account settings.
• Export a machine-readable copy of your account data from account settings.
• Opt out of non-essential emails such as risk alerts in your settings.
• Depending on where you live, you may have additional rights (such as access, correction, deletion, or portability). Contact us to exercise them.

European Economic Area, UK, and Switzerland (GDPR): where the General Data Protection Regulation or equivalent law applies, we process your personal data on these legal bases: performance of a contract (providing the service you signed up for), legitimate interests (securing and improving the service, preventing abuse), consent (optional emails such as risk alerts, which you can withdraw anytime), and legal obligation (payment and tax records). You additionally have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. We do not use your data for automated decision-making that produces legal effects about you.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and access controls so each account can only reach its own data. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit who and what can access it.

ClauseShift is operated with infrastructure that may process and store data in regions including the European Union and elsewhere. By using the service you understand your information may be processed in those locations.

ClauseShift is intended for adults and is not directed to children. In line with the US Children’s Online Privacy Protection Act (COPPA), the service is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. We also do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it promptly.

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know what personal information we collect and how we use it, to request access to or deletion of that information, to correct inaccurate information, and not to be discriminated against for exercising these rights.

We do not sell or share your personal information as those terms are defined under the CCPA and CPRA, for any user, including California residents. Because there is no sale or sharing to opt out of, we do not offer a “Do Not Sell or Share My Personal Information” opt-out. You can still exercise your access, correction, and deletion rights at any time from your account settings or through our contact page.

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, notify you. Your continued use of ClauseShift after an update means you accept the revised policy.

Questions about this policy or your data? Reach us through our contact page. You can also review our Terms of Service.