Privacy Policy

This privacy notice for ClauseOne, Inc. ("we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://app.clauseone.co, or any website of ours that links to this privacy notice.
• Engage with us in other related ways including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at founders@clauseone.co.

SUMMARY OF KEY POINTS

We collect personal information you provide to us. We do not process sensitive personal information, nor do we collect information from third parties. We use your information to provide and improve our services and share it only with service providers when necessary. We protect your data using technical and organizational safeguards.

You may have privacy rights under U.S. state laws such as California (CCPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and Virginia (VCDPA). For more information, review the section: "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?"

TABLE OF CONTENTS

• WHAT INFORMATION DO WE COLLECT?
• HOW DO WE PROCESS YOUR INFORMATION?
• WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?
• DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
• HOW DO WE HANDLE YOUR SOCIAL LOGINS?
• HOW LONG DO WE KEEP YOUR INFORMATION?
• HOW DO WE KEEP YOUR INFORMATION SAFE?
• DO WE COLLECT INFORMATION FROM MINORS?
• WHAT ARE YOUR PRIVACY RIGHTS?
• DO-NOT-TRACK CONTROLS
• DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
• UPDATES TO THIS NOTICE
• CONTACT INFORMATION
• HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

1. WHAT INFORMATION DO WE COLLECT?

We collect the personal information you voluntarily provide to us when you register, request information, make purchases, or otherwise interact with our services.

We also use cookies and similar technologies. Please see our Cookie Notice on our website.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your data to:

• Create and manage accounts
• Provide and improve our Services
• Respond to support requests
• Send administrative notices
• Send marketing (only with consent)
• Display targeted ads
• Monitor fraud/security
• Comply with local legal obligations

3. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?

We may share your information with third-party service providers, including:

• Cloud and infrastructure: Google Cloud, Vercel
• Analytics: Google Analytics, Short.io
• Billing: Stripe
• Communication: Intercom, Slack
• User auth: Clerk
• Marketing and Retargeting: Google Ads, Short.io
• Monitoring: Posthog

We may also share your data in connection with business transfers like mergers or acquisitions.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We use cookies, pixels, and other tracking technologies to improve user experience and analytics. You can control cookie settings in your browser or device.

See our full Cookie Notice at https://clauseone.co/legal.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you sign in using social accounts (like Google or Facebook), we receive certain information such as your name, email, and public profile. We use it to authenticate your account and for no other purpose.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal data for as long as you have an account with us or as necessary to fulfill the purposes described in this policy. When no longer needed, we securely delete or anonymize the data.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We aim to protect your personal information through a system of technical, administrative, and physical safeguards. These include access controls, encryption, firewalls, secure development practices, and regular staff training.

In addition, we undergo routine security assessments, including both manual and automated security testing, to identify and remediate vulnerabilities in our systems and infrastructure. This ensures we maintain a strong and evolving security posture.

We are also actively working toward compliance certifications such as SOC 2 and ISO/IEC 27001 to formalize and validate our commitment to data protection and security best practices.

However, please note that no system can be guaranteed 100% secure, and transmission of personal information to and from our Services is at your own risk. We encourage you to access our Services only within secure environments.

8. DO WE COLLECT INFORMATION FROM MINORS?

No. Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal information from a user under 18 years of age, we will take immediate steps to delete such information from our records.

If you believe that your child or a minor has provided us with personal information, or if you have accidentally submitted any information and would like to have it deleted, please contact us using the details provided in the "Contact Information" section below. We will respond promptly in accordance with applicable data protection laws and our internal data deletion procedures.

9. WHAT ARE YOUR PRIVACY RIGHTS?

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data
• Withdraw consent at any time
• Opt out of marketing communications

To exercise your rights, email founders@clauseone.co

10. DO-NOT-TRACK CONTROLS

We do not currently respond to browser-based Do-Not-Track (DNT) signals due to a lack of standardized technology. If that changes, we will update this policy.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

Yes. Residents of CA, CO, CT, DE, IA, MT, OR, TX, UT, and VA may have these rights:

• Access/Know, Correct, Delete, Portability
• Opt out of: Sale, Sharing (CA), Targeted Advertising, and certain Profiling
• Limit Sensitive PI (CA, if applicable)
• Appeal a denied request

To exercise email founders@clauseone.co.

We do not sell personal data. We only share data with service providers under contract for business purposes.

13. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this privacy notice to remain compliant with laws or reflect changes in our practices. Updates will be reflected by the "Last updated" date at the top. Material changes may be communicated directly to users or posted prominently.

14. CONTACT INFORMATION

If you have any questions or concerns, contact us at:

15. HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

To request access to, update, or delete your personal data, please email us at founders@clauseone.co