Who we are
ClauseDock is the service brand responsible for this website and its account information. Contact hello@clausedock.com for privacy questions or requests.
Information and purposes
Public pages and the free checker: the checker reads the CSV you select inside your browser. It does not send that file to the ClauseDock application server. Website infrastructure can process connection information such as IP address, browser details, request times and security logs to deliver and protect the site.
Accounts: our authentication provider processes the email address and password you enter, confirmation and recovery requests, and sign-in/session records. The application uses account identifiers and workspace membership to restrict access. Do not send a password by email.
Controlled tests: authorized test accounts may store the permitted fictional files, source hashes, review notes, report revisions and case activity. General customer invoice and contract intake remains closed. Do not upload personal, confidential or customer records into a test.
Support: if you choose to email us, we receive your message and reply address. The scope-request form prepares a message locally; its answers reach us only if you choose to send it. Do not attach invoices, contracts, payment-card information or customer records.
Reasons for using information
We use account information to provide the workspace you request and respond to your support requests. Where applicable, this supports taking steps at your request or performing our agreement with you. We use limited access and security records for our legitimate interests in operating the service, preventing abuse and investigating failures. Necessary legal or transaction records may be kept to meet applicable obligations.
There is no newsletter or advertising consent collected by these account forms. Creating an account does not subscribe you to marketing. The audit workflow does not make decisions about a person’s employment, credit, insurance or similar eligibility.
Providers and processing locations
Supabase supplies authentication, database, private storage and server functions; the configured application project is in the United States (Ohio). Brevo is configured to deliver account emails. The website is hosted through OpenAI Sites and Cloudflare infrastructure. These providers can process the information needed to perform those functions, including technical logs.
Before an enabled checkout, we record your explicit acceptance of the terms and refund policy, acknowledgement of the privacy notice, and authority to act for the business. The record contains the account and case identifiers, report revision and hash, policy version and hashes, payment environment, supported scope and server timestamp. It contains no payment-card information or document text. These limited records support the purchase agreement and handling disputes; case-file deletion does not erase purchase or acceptance bookkeeping.
Live checkout remains disabled. If enabled, Paddle will process checkout and billing information under its own privacy notice; payment-card fields are handled by Paddle rather than the ClauseDock application.
No hosted model processing is enabled for customer files. We update this notice before material changes to processing begin. International processing may occur outside your country. Customer document intake remains closed while the applicable processing and transfer arrangements are finalized.
Browser storage
The workspace can retain a short-lived sign-in token and timestamps in this browser’s local storage. The cache expires no later than the token expiry or one hour, whichever comes first. The server checks the session again before access. Signing out clears the application cache; changing browsers or device can require another sign-in.
The application does not store your password, refresh token, uploaded files or reports in that session cache. Hosting, authentication and checkout providers may use storage needed for their own services. This site does not currently install an advertising analytics script.
Retention and deletion
Account and workspace information is retained while needed to maintain the requested account, preserve the test/workspace records you keep, resolve support or security issues, and meet applicable obligations. There is currently no automatic inactivity-deletion schedule for retained cases. You may request account or case deletion at hello@clausedock.com.
Where available to an authorized case owner, the case-data deletion control removes the active private files and erases saved draft/report and review contents after verification. It closes the case and retains minimal case/event identifiers and a deletion receipt. An interrupted deletion can remain pending until completed; do not treat a button click as proof of completion.
Copies downloaded to your device are outside that action. Provider logs and any applicable backups follow their own retention processes; deletion from active application storage is not a promise of immediate erasure from every backup.
Your choices and rights
You can use public pages without creating an account. An email and authentication details are needed for a private workspace; without them we cannot provide that access. Share only the minimum information needed in a support request.
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information. You may also object to processing based on legitimate interests. Contact hello@clausedock.com; we may need proportionate identity verification before disclosing or deleting private account data. We respond within applicable legal time limits. You may raise a concern with the data protection authority that has jurisdiction over your information, including the ICO where applicable.
Contact and related information
ClauseDock · hello@clausedock.com