Privacy Policy

We collect the following, depending on how you use ClauseShift:

• Account information. When you create an account we collect your email address. If you sign in with Google, we receive your email address, basic profile name, and avatar from Google. We never receive your Google password.
• Contract content you submit. The text, documents (such as PDF or DOCX), or audio you upload, paste, or record so we can analyze it. See section 3 for how this is processed.
• Reports and activity. The risk reports we generate, key dates we extract, and your in-app activity (such as reviews run), tied to your account.
• Billing information. If you subscribe or buy credits, payments are handled by our payment processor (Paystack). We receive confirmation and subscription status, but we do not collect or store your full card number.
• Usage and device data. Anonymous, aggregate analytics (such as page views and feature usage) and standard server logs (such as IP address and browser type) used to operate and secure the service.

• Provide, maintain, and improve the contract-review service.
• Generate risk reports and, for paid features, track contract deadlines.
• Authenticate you, process payments, and manage your subscription or credits.
• Send you transactional and, where enabled, risk-alert and reminder emails.
• Respond to your support requests.
• Monitor performance, prevent abuse, and keep the service secure.

We do not sell your personal information, and we do not use your contract content to train our own models.

To analyze a contract, ClauseShift sends the content you submit to third-party AI model providers that perform the analysis, and returns a structured risk report to you. Audio you submit is first transcribed by a speech-to-text provider. These providers process the content to deliver the result; we instruct them to act as our service providers and not to use your content to train their models, subject to their own terms.

Your saved reports are stored under your account so you can revisit them. You can delete individual reports, or your entire account, at any time (see section 7).

We share data with a small set of vendors strictly to operate ClauseShift. Each processes only what is needed for its function:

• Hosting & database— for running the app and storing your account, reports, and settings.
• AI model & transcription providers— to analyze contract content and transcribe audio.
• Payment processor (Paystack)— to take payments and manage subscriptions.
• Email provider— to send transactional, alert, and support emails.
• Privacy-friendly analytics— cookieless, aggregate visitor measurement.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

We keep this light. We use a small amount of local storage in your browser to keep you signed in and remember preferences (such as light or dark mode). Our visitor analytics are cookieless and do not track you across other websites. We do not run third-party advertising trackers.

We keep your account information and reports for as long as your account is active. When you delete a report it is removed from your account; when you delete your account, your personal data and associated reports are deleted. We may retain limited records (such as payment and security logs) where required for legal, accounting, or fraud-prevention purposes.

• Access and update your account details in the app.
• Delete individual reports, or your whole account (which removes your personal data), at any time from your account settings.
• Opt out of non-essential emails such as risk alerts in your settings.
• Depending on where you live, you may have additional rights (such as access, correction, deletion, or portability). Contact us to exercise them.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS) and access controls so each account can only reach its own data. No method of transmission or storage is perfectly secure, but we work to protect your information and to limit who and what can access it.

ClauseShift is operated with infrastructure that may process and store data in regions including the European Union and elsewhere. By using the service you understand your information may be processed in those locations.

ClauseShift is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, notify you. Your continued use of ClauseShift after an update means you accept the revised policy.

Questions about this policy or your data? Reach us through our contact page. You can also review our Terms of Service.